Login
[x]
Log in using an account from:
Fedora Account System
Red Hat Associate
Red Hat Customer
Or login using a Red Hat Bugzilla account
Forgot Password
Login:
Hide Forgot
Create an Account
Red Hat Bugzilla – Attachment 847302 Details for
Bug 1049817
neutron-dhcp-agent fails to start with plenty of SELinux AVC denials
[?]
New
Simple Search
Advanced Search
My Links
Browse
Requests
Reports
Current State
Search
Tabular reports
Graphical reports
Duplicates
Other Reports
User Changes
Plotly Reports
Bug Status
Bug Severity
Non-Defaults
|
Product Dashboard
Help
Page Help!
Bug Writing Guidelines
What's new
Browser Support Policy
5.0.4.rh83 Release notes
FAQ
Guides index
User guide
Web Services
Contact
Legal
This site requires JavaScript to be enabled to function correctly, please enable it.
audit.log containing AVC messages from an all-in-one RDO install on F20
audit.log (text/plain), 2.77 MB, created by
Lars Kellogg-Stedman
on 2014-01-08 18:51:45 UTC
(
hide
)
Description:
audit.log containing AVC messages from an all-in-one RDO install on F20
Filename:
MIME Type:
Creator:
Lars Kellogg-Stedman
Created:
2014-01-08 18:51:45 UTC
Size:
2.77 MB
patch
obsolete
>type=DAEMON_START msg=audit(1389203177.105:630): auditd start, ver=2.3.2 format=raw kernel=3.11.10-301.fc20.x86_64 auid=4294967295 pid=230 subj=system_u:system_r:auditd_t:s0 res=success >type=SERVICE_START msg=audit(1389203177.247:5): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="dbus" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1389203177.388:6): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="systemd-user-sessions" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1389203177.427:7): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="crond" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1389203177.449:8): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="rsyslog" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1389203177.497:9): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="systemd-logind" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1389203178.416:10): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="cloud-init-local" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1389203181.359:11): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="network" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1389203181.395:12): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="rc-local" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1389203181.405:13): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="serial-getty@ttyS0" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1389203181.416:14): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="getty@tty1" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1389203181.925:15): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="sshd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1389203192.667:16): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="systemd-hostnamed" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=ADD_GROUP msg=audit(1389203192.754:17): pid=597 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cloud_init_t:s0 msg='op=adding group acct="fedora" exe="/usr/sbin/useradd" hostname=? addr=? terminal=? res=success' >type=ADD_USER msg=audit(1389203192.923:18): pid=597 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cloud_init_t:s0 msg='op=adding user id=1000 exe="/usr/sbin/useradd" hostname=? addr=? terminal=? res=success' >type=ADD_USER msg=audit(1389203192.923:19): pid=597 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cloud_init_t:s0 msg='op=adding user to group acct="fedora" exe="/usr/sbin/useradd" hostname=? addr=? terminal=? res=success' >type=ADD_USER msg=audit(1389203192.923:20): pid=597 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cloud_init_t:s0 msg='op=adding user to group acct="fedora" exe="/usr/sbin/useradd" hostname=? addr=? terminal=? res=success' >type=ADD_USER msg=audit(1389203192.924:21): pid=597 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cloud_init_t:s0 msg='op=adding user to group acct="fedora" exe="/usr/sbin/useradd" hostname=? addr=? terminal=? res=success' >type=ADD_USER msg=audit(1389203192.924:22): pid=597 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cloud_init_t:s0 msg='op=adding user to shadow group acct="fedora" exe="/usr/sbin/useradd" hostname=? addr=? terminal=? res=success' >type=ADD_USER msg=audit(1389203192.924:23): pid=597 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cloud_init_t:s0 msg='op=adding user to shadow group acct="fedora" exe="/usr/sbin/useradd" hostname=? addr=? terminal=? res=success' >type=ADD_USER msg=audit(1389203192.924:24): pid=597 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cloud_init_t:s0 msg='op=adding user to shadow group acct="fedora" exe="/usr/sbin/useradd" hostname=? addr=? terminal=? res=success' >type=ADD_USER msg=audit(1389203192.927:25): pid=597 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cloud_init_t:s0 msg='op=adding home directory id=1000 exe="/usr/sbin/useradd" hostname=? addr=? terminal=? res=success' >type=USER_CHAUTHTOK msg=audit(1389203193.018:26): pid=602 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:passwd_t:s0 msg='op=lock password id=1000 exe="/usr/bin/passwd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1389203193.060:27): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="cloud-init" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389203193.325:28): pid=539 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=539 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1389203193.326:29): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="sshd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1389203193.335:30): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="sshd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1389203193.380:31): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="cloud-config" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=MAC_STATUS msg=audit(1389203194.139:32): enforcing=0 old_enforcing=1 auid=4294967295 ses=4294967295 >type=SYSCALL msg=audit(1389203194.139:32): arch=c000003e syscall=1 success=yes exit=1 a0=4 a1=7fffb19488a0 a2=1 a3=7fffb1948660 items=0 ppid=633 pid=634 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="setenforce" exe="/usr/sbin/setenforce" subj=system_u:system_r:cloud_init_t:s0 key=(null) >type=USER_AVC msg=audit(1389203267.357:33): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='avc: received setenforce notice (enforcing=0) exe="/usr/lib/systemd/systemd" sauid=0 hostname=? addr=? terminal=?' >type=SERVICE_STOP msg=audit(1389203267.363:34): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="crond" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1389203267.366:35): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="crond" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=ADD_USER msg=audit(1389203289.023:36): pid=795 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:useradd_t:s0 msg='op=adding user acct="dbus" exe="/usr/sbin/useradd" hostname=? addr=? terminal=? res=failed' >type=ADD_USER msg=audit(1389203289.023:37): pid=795 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:useradd_t:s0 msg='op=adding user acct="dbus" exe="/usr/sbin/useradd" hostname=? addr=? terminal=? res=failed' >type=CRYPTO_KEY_USER msg=audit(1389203303.192:38): pid=623 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=623 suid=0 exe=2F7573722F7362696E2F73736864202864656C6574656429 hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1389203303.197:39): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="sshd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1389203303.197:40): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="sshd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1389203303.242:41): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="sshd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389203348.681:42): pid=6115 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=6115 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.200.1 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389203348.682:43): pid=6115 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=6115 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.200.1 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389203348.683:44): pid=6114 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=6115 suid=74 rport=46838 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.200.1 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389203348.683:45): pid=6114 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=6115 suid=74 rport=46838 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.200.1 terminal=? res=success' >type=USER_AUTH msg=audit(1389203349.993:46): pid=6114 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=46838 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.200.1 terminal=? res=success' >type=USER_AUTH msg=audit(1389203349.993:47): pid=6114 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=4096 fp=8b:56:b0:3f:c8:ad:38:a6:94:f4:a7:26:83:75:cc:85 rport=46838 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.200.1 terminal=? res=success' >type=USER_ACCT msg=audit(1389203350.012:48): pid=6114 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=192.168.200.1 addr=192.168.200.1 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389203350.014:49): pid=6114 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=6115 suid=74 rport=46838 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.200.1 terminal=? res=success' >type=USER_AUTH msg=audit(1389203350.014:50): pid=6114 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.200.1 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1389203350.043:51): pid=6114 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=192.168.200.1 addr=192.168.200.1 terminal=ssh res=success' >type=LOGIN msg=audit(1389203350.043:52): login pid=6114 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=1 >type=USER_ROLE_CHANGE msg=audit(1389203350.112:53): pid=6114 uid=0 auid=0 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.200.1 addr=192.168.200.1 terminal=ssh res=success' >type=USER_START msg=audit(1389203350.172:54): pid=6114 uid=0 auid=0 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=192.168.200.1 addr=192.168.200.1 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1389203350.189:55): pid=6119 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=192.168.200.1 addr=192.168.200.1 terminal=/dev/pts/0 res=success' >type=USER_START msg=audit(1389203350.190:56): pid=6119 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=192.168.200.1 addr=192.168.200.1 terminal=/dev/pts/0 res=success' >type=CRYPTO_KEY_USER msg=audit(1389203350.190:57): pid=6119 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=6119 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.200.1 terminal=pts/0 res=success' >type=CRYPTO_KEY_USER msg=audit(1389203350.190:58): pid=6119 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=6119 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.200.1 terminal=pts/0 res=success' >type=CRED_REFR msg=audit(1389203350.190:59): pid=6119 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=192.168.200.1 addr=192.168.200.1 terminal=ssh res=success' >type=USER_ACCT msg=audit(1389203350.197:60): pid=6117 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:accounting acct="root" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1389203350.199:61): pid=6117 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1389203350.216:62): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="user@0" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=ADD_GROUP msg=audit(1389203370.140:63): pid=6147 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:groupadd_t:s0 msg='op=adding group to /etc/group id=84 exe="/usr/sbin/groupadd" hostname=? addr=? terminal=? res=success' >type=ADD_GROUP msg=audit(1389203370.397:64): pid=6147 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:groupadd_t:s0 msg='op=adding group to /etc/gshadow id=84 exe="/usr/sbin/groupadd" hostname=? addr=? terminal=? res=success' >type=ADD_GROUP msg=audit(1389203370.398:65): pid=6147 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:groupadd_t:s0 msg='op= id=84 exe="/usr/sbin/groupadd" hostname=? addr=? terminal=? res=success' >type=MAC_POLICY_LOAD msg=audit(1389203402.303:66): policy loaded auid=4294967295 ses=4294967295 >type=SYSCALL msg=audit(1389203402.303:66): arch=c000003e syscall=1 success=yes exit=3256851 a0=4 a1=7f247d162010 a2=31b213 a3=7fff8a6ab080 items=0 ppid=6193 pid=6203 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="load_policy" exe="/usr/sbin/load_policy" subj=system_u:system_r:load_policy_t:s0 key=(null) >type=ADD_GROUP msg=audit(1389203469.598:67): pid=6918 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:groupadd_t:s0 msg='op=adding group to /etc/group id=27 exe="/usr/sbin/groupadd" hostname=? addr=? terminal=? res=success' >type=ADD_GROUP msg=audit(1389203469.608:68): pid=6918 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:groupadd_t:s0 msg='op=adding group to /etc/gshadow id=27 exe="/usr/sbin/groupadd" hostname=? addr=? terminal=? res=success' >type=ADD_GROUP msg=audit(1389203469.609:69): pid=6918 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:groupadd_t:s0 msg='op= id=27 exe="/usr/sbin/groupadd" hostname=? addr=? terminal=? res=success' >type=ADD_USER msg=audit(1389203469.914:70): pid=6922 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:useradd_t:s0 msg='op=adding user id=27 exe="/usr/sbin/useradd" hostname=? addr=? terminal=? res=success' >type=USER_AVC msg=audit(1389203469.933:71): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='avc: received policyload notice (seqno=2) exe="/usr/lib/systemd/systemd" sauid=0 hostname=? addr=? terminal=?' >type=ADD_GROUP msg=audit(1389203471.555:72): pid=6943 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:groupadd_t:s0 msg='op=adding group to /etc/group id=998 exe="/usr/sbin/groupadd" hostname=? addr=? terminal=? res=success' >type=ADD_GROUP msg=audit(1389203471.562:73): pid=6943 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:groupadd_t:s0 msg='op=adding group to /etc/gshadow id=998 exe="/usr/sbin/groupadd" hostname=? addr=? terminal=? res=success' >type=ADD_GROUP msg=audit(1389203471.562:74): pid=6943 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:groupadd_t:s0 msg='op= id=998 exe="/usr/sbin/groupadd" hostname=? addr=? terminal=? res=success' >type=ADD_USER msg=audit(1389203471.572:75): pid=6948 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:useradd_t:s0 msg='op=adding user id=184 exe="/usr/sbin/useradd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1389203492.782:76): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="systemd-hostnamed" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1389203492.782:77): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="systemd-hostnamed" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1389203550.277:78): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="mongod" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389203550.816:79): pid=822 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=822 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389203550.817:80): pid=822 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=822 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1389203551.468:81): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="systemd-logind" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1389203551.468:82): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="systemd-logind" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1389203551.470:83): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="dbus" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1389203551.470:84): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="dbus" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1389203551.473:85): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="serial-getty@ttyS0" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1389203551.473:86): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="serial-getty@ttyS0" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1389203551.480:87): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="getty@tty1" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1389203551.480:88): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="getty@tty1" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1389203551.483:89): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="crond" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1389203551.483:90): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="crond" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1389203551.485:91): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="sshd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1389203551.485:92): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="sshd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1389203551.488:93): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="mongod" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1389203551.520:94): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="user@0" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1389203551.520:95): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="user@0" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1389203551.541:96): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="cloud-final" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=SERVICE_START msg=audit(1389203551.545:97): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="rc-local" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1389203551.545:98): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="rc-local" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1389203551.549:99): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="cloud-config" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1389203551.549:100): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="cloud-config" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1389203551.559:101): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="cloud-init" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1389203551.559:102): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="cloud-init" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1389203551.566:103): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="cloud-init-local" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1389203551.566:104): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="cloud-init-local" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1389203551.572:105): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="rsyslog" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1389203551.572:106): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="rsyslog" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1389203551.604:107): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="systemd-user-sessions" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1389203551.604:108): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="systemd-user-sessions" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1389203553.264:109): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="network" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1389203553.264:110): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="network" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1389203553.285:111): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="systemd-vconsole-setup" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1389203553.285:112): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="systemd-vconsole-setup" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1389203553.290:113): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="systemd-sysctl" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1389203553.290:114): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="systemd-sysctl" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1389203553.361:115): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="systemd-random-seed" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1389203553.361:116): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="systemd-random-seed" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SYSTEM_SHUTDOWN msg=audit(1389203553.417:117): pid=7215 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='init exe="/usr/lib/systemd/systemd-update-utmp" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1389203553.420:118): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="systemd-update-utmp" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1389203553.420:119): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="systemd-update-utmp" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=DAEMON_END msg=audit(1389203553.427:631): auditd normal halt, sending auid=0 pid=1 subj=system_u:system_r:init_t:s0 res=success >type=DAEMON_START msg=audit(1389203567.060:973): auditd start, ver=2.3.2 format=raw kernel=3.12.6-300.fc20.x86_64 auid=4294967295 pid=236 subj=system_u:system_r:auditd_t:s0 res=success >type=SERVICE_START msg=audit(1389203567.642:5): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="systemd-user-sessions" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1389203568.220:6): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="crond" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1389203569.366:7): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="rsyslog" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1389203569.504:8): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="systemd-logind" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1389203575.449:9): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="network" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1389203575.697:10): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="sshd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1389203575.711:11): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="rc-local" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1389203575.715:12): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="serial-getty@ttyS0" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1389203575.719:13): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="getty@tty1" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1389203577.064:14): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="mongod" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1389203578.216:15): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="cloud-init-local" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1389203594.666:16): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="systemd-hostnamed" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1389203594.686:17): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="cloud-init" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1389203595.828:18): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="cloud-config" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1389203597.043:19): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="cloud-final" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SYSTEM_BOOT msg=audit(1389203597.045:20): pid=603 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='init exe="/usr/lib/systemd/systemd-update-utmp" hostname=? addr=? terminal=? res=success' >type=SYSTEM_RUNLEVEL msg=audit(1389203597.046:21): pid=603 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='old-level=N new-level=3 exe="/usr/lib/systemd/systemd-update-utmp" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1389203597.046:22): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="systemd-update-utmp-runlevel" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1389203597.046:23): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="systemd-update-utmp-runlevel" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1389203627.056:24): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="systemd-readahead-done" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1389203627.057:25): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="systemd-readahead-done" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1389203894.770:26): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="systemd-hostnamed" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389203915.361:27): pid=718 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=718 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.200.1 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389203915.361:28): pid=718 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=718 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.200.1 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389203915.362:29): pid=717 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=718 suid=74 rport=47033 laddr=192. exe="/usr/sbin/sshd" hostname=? addr=192.168.200.1 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389203915.362:30): pid=717 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=718 suid=74 rport=47033 laddr=192. exe="/usr/sbin/sshd" hostname=? addr=192.168.200.1 terminal=? res=success' >type=USER_AUTH msg=audit(1389203920.688:31): pid=717 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=47033 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.200.1 terminal=? res=success' >type=USER_AUTH msg=audit(1389203920.688:32): pid=717 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=4096 fp=8b:56:b0:3f:c8:ad:38:a6:94:f4:a7:26:83:75:cc:85 rport=47033 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.200.1 terminal=? res=success' >type=USER_ACCT msg=audit(1389203920.721:33): pid=717 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=192.168.200.1 addr=192.168.200.1 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389203920.722:34): pid=717 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=718 suid=74 rport=47033 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.200.1 terminal=? res=success' >type=USER_AUTH msg=audit(1389203920.723:35): pid=717 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.200.1 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1389203920.736:36): pid=717 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=192.168.200.1 addr=192.168.200.1 terminal=ssh res=success' >type=LOGIN msg=audit(1389203920.736:37): login pid=717 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=1 >type=USER_ROLE_CHANGE msg=audit(1389203920.805:38): pid=717 uid=0 auid=0 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.200.1 addr=192.168.200.1 terminal=ssh res=success' >type=USER_START msg=audit(1389203920.847:39): pid=717 uid=0 auid=0 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=192.168.200.1 addr=192.168.200.1 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1389203920.856:40): pid=721 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=192.168.200.1 addr=192.168.200.1 terminal=/dev/pts/0 res=success' >type=USER_START msg=audit(1389203920.856:41): pid=721 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=192.168.200.1 addr=192.168.200.1 terminal=/dev/pts/0 res=success' >type=CRYPTO_KEY_USER msg=audit(1389203920.858:42): pid=721 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=721 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.200.1 terminal=pts/0 res=success' >type=CRYPTO_KEY_USER msg=audit(1389203920.858:43): pid=721 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=721 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.200.1 terminal=pts/0 res=success' >type=CRED_REFR msg=audit(1389203920.858:44): pid=721 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=192.168.200.1 addr=192.168.200.1 terminal=ssh res=success' >type=USER_ACCT msg=audit(1389203920.869:45): pid=720 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:accounting acct="root" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1389203920.870:46): pid=720 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1389203920.906:47): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="user@0" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389203946.388:48): pid=863 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=863 suid=0 exe="/usr/sbin/sshd" hostname=? addr=127.0.0.1 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389203946.389:49): pid=863 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=863 suid=0 exe="/usr/sbin/sshd" hostname=? addr=127.0.0.1 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389203946.389:50): pid=862 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=862 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389203946.389:51): pid=862 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=862 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389203946.440:52): pid=868 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=868 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389203946.440:53): pid=868 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=868 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389203946.442:54): pid=867 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=868 suid=74 rport=33002 laddr=192. exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389203946.442:55): pid=867 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=868 suid=74 rport=33002 laddr=192. exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389203947.467:56): pid=867 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=33002 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389203947.467:57): pid=867 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=4096 fp=8b:56:b0:3f:c8:ad:38:a6:94:f4:a7:26:83:75:cc:85 rport=33002 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_ACCT msg=audit(1389203948.005:58): pid=867 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389203948.005:59): pid=867 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=868 suid=74 rport=33002 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389203948.006:60): pid=867 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1389203948.008:61): pid=867 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=LOGIN msg=audit(1389203948.008:62): login pid=867 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=2 >type=USER_ROLE_CHANGE msg=audit(1389203948.051:63): pid=867 uid=0 auid=0 ses=2 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389203948.080:64): pid=867 uid=0 auid=0 ses=2 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1389203948.084:65): pid=867 uid=0 auid=0 ses=2 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389203948.086:66): pid=867 uid=0 auid=0 ses=2 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389203948.088:67): pid=870 uid=0 auid=0 ses=2 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=870 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389203948.088:68): pid=870 uid=0 auid=0 ses=2 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=870 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRED_REFR msg=audit(1389203948.090:69): pid=870 uid=0 auid=0 ses=2 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389203948.261:70): pid=867 uid=0 auid=0 ses=2 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRED_DISP msg=audit(1389203948.263:71): pid=867 uid=0 auid=0 ses=2 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389203948.268:72): pid=867 uid=0 auid=0 ses=2 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1389203948.270:73): pid=867 uid=0 auid=0 ses=2 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389203948.270:74): pid=867 uid=0 auid=0 ses=2 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=867 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389203948.270:75): pid=867 uid=0 auid=0 ses=2 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=867 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389203948.270:76): pid=867 uid=0 auid=0 ses=2 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=867 suid=0 rport=33002 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389203948.272:77): pid=882 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=882 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389203948.272:78): pid=882 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=882 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389203948.275:79): pid=880 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=882 suid=74 rport=33003 laddr=192. exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389203948.275:80): pid=880 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=882 suid=74 rport=33003 laddr=192. exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389203948.802:81): pid=880 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=33003 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389203948.802:82): pid=880 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=4096 fp=8b:56:b0:3f:c8:ad:38:a6:94:f4:a7:26:83:75:cc:85 rport=33003 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_ACCT msg=audit(1389203948.807:83): pid=880 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389203948.808:84): pid=880 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=882 suid=74 rport=33003 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389203948.809:85): pid=880 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1389203948.811:86): pid=880 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=LOGIN msg=audit(1389203948.811:87): login pid=880 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=3 >type=USER_ROLE_CHANGE msg=audit(1389203948.851:88): pid=880 uid=0 auid=0 ses=3 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389203948.866:89): pid=880 uid=0 auid=0 ses=3 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1389203948.870:90): pid=880 uid=0 auid=0 ses=3 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389203948.873:91): pid=880 uid=0 auid=0 ses=3 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389203948.874:92): pid=884 uid=0 auid=0 ses=3 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=884 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389203948.874:93): pid=884 uid=0 auid=0 ses=3 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=884 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRED_REFR msg=audit(1389203948.876:94): pid=884 uid=0 auid=0 ses=3 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389203948.895:95): pid=880 uid=0 auid=0 ses=3 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRED_DISP msg=audit(1389203948.899:96): pid=880 uid=0 auid=0 ses=3 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389203948.901:97): pid=880 uid=0 auid=0 ses=3 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1389203948.903:98): pid=880 uid=0 auid=0 ses=3 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389203948.903:99): pid=880 uid=0 auid=0 ses=3 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=880 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389203948.903:100): pid=880 uid=0 auid=0 ses=3 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=880 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389203948.903:101): pid=880 uid=0 auid=0 ses=3 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=880 suid=0 rport=33003 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389203948.905:102): pid=892 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=892 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389203948.906:103): pid=892 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=892 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389203948.909:104): pid=890 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=892 suid=74 rport=33004 laddr=192. exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389203948.909:105): pid=890 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=892 suid=74 rport=33004 laddr=192. exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389203949.437:106): pid=890 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=33004 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389203949.437:107): pid=890 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=4096 fp=8b:56:b0:3f:c8:ad:38:a6:94:f4:a7:26:83:75:cc:85 rport=33004 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_ACCT msg=audit(1389203949.441:108): pid=890 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389203949.442:109): pid=890 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=892 suid=74 rport=33004 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389203949.443:110): pid=890 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1389203949.445:111): pid=890 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=LOGIN msg=audit(1389203949.445:112): login pid=890 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=4 >type=USER_ROLE_CHANGE msg=audit(1389203949.484:113): pid=890 uid=0 auid=0 ses=4 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389203949.499:114): pid=890 uid=0 auid=0 ses=4 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1389203949.503:115): pid=890 uid=0 auid=0 ses=4 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389203949.505:116): pid=890 uid=0 auid=0 ses=4 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389203949.506:117): pid=894 uid=0 auid=0 ses=4 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=894 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389203949.506:118): pid=894 uid=0 auid=0 ses=4 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=894 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRED_REFR msg=audit(1389203949.509:119): pid=894 uid=0 auid=0 ses=4 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389203949.526:120): pid=890 uid=0 auid=0 ses=4 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRED_DISP msg=audit(1389203949.528:121): pid=890 uid=0 auid=0 ses=4 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389203949.530:122): pid=890 uid=0 auid=0 ses=4 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1389203949.532:123): pid=890 uid=0 auid=0 ses=4 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389203949.532:124): pid=890 uid=0 auid=0 ses=4 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=890 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389203949.532:125): pid=890 uid=0 auid=0 ses=4 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=890 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389203949.532:126): pid=890 uid=0 auid=0 ses=4 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=890 suid=0 rport=33004 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389203949.556:127): pid=905 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=905 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389203949.556:128): pid=905 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=905 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389203949.558:129): pid=904 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=905 suid=74 rport=33005 laddr=192. exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389203949.558:130): pid=904 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=905 suid=74 rport=33005 laddr=192. exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389203950.072:131): pid=904 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=33005 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389203950.072:132): pid=904 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=4096 fp=8b:56:b0:3f:c8:ad:38:a6:94:f4:a7:26:83:75:cc:85 rport=33005 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_ACCT msg=audit(1389203950.077:133): pid=904 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389203950.078:134): pid=904 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=905 suid=74 rport=33005 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389203950.079:135): pid=904 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1389203950.081:136): pid=904 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=LOGIN msg=audit(1389203950.081:137): login pid=904 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=5 >type=USER_ROLE_CHANGE msg=audit(1389203950.120:138): pid=904 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389203950.135:139): pid=904 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1389203950.140:140): pid=904 uid=0 auid=0 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389203950.142:141): pid=904 uid=0 auid=0 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389203950.143:142): pid=907 uid=0 auid=0 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=907 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389203950.143:143): pid=907 uid=0 auid=0 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=907 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRED_REFR msg=audit(1389203950.146:144): pid=907 uid=0 auid=0 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389203964.711:145): pid=904 uid=0 auid=0 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRED_DISP msg=audit(1389203964.712:146): pid=904 uid=0 auid=0 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389203964.715:147): pid=904 uid=0 auid=0 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1389203964.716:148): pid=904 uid=0 auid=0 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389203964.717:149): pid=904 uid=0 auid=0 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=904 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389203964.717:150): pid=904 uid=0 auid=0 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=904 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389203964.717:151): pid=904 uid=0 auid=0 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=904 suid=0 rport=33005 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389203964.736:152): pid=957 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=957 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389203964.736:153): pid=957 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=957 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389203964.738:154): pid=956 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=957 suid=74 rport=33012 laddr=192. exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389203964.738:155): pid=956 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=957 suid=74 rport=33012 laddr=192. exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389203965.257:156): pid=956 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=33012 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389203965.257:157): pid=956 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=4096 fp=8b:56:b0:3f:c8:ad:38:a6:94:f4:a7:26:83:75:cc:85 rport=33012 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_ACCT msg=audit(1389203965.262:158): pid=956 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389203965.263:159): pid=956 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=957 suid=74 rport=33012 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389203965.264:160): pid=956 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1389203965.266:161): pid=956 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=LOGIN msg=audit(1389203965.266:162): login pid=956 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=6 >type=USER_ROLE_CHANGE msg=audit(1389203965.307:163): pid=956 uid=0 auid=0 ses=6 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389203965.333:164): pid=956 uid=0 auid=0 ses=6 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1389203965.337:165): pid=956 uid=0 auid=0 ses=6 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389203965.339:166): pid=956 uid=0 auid=0 ses=6 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389203965.340:167): pid=959 uid=0 auid=0 ses=6 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=959 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389203965.340:168): pid=959 uid=0 auid=0 ses=6 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=959 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRED_REFR msg=audit(1389203965.343:169): pid=959 uid=0 auid=0 ses=6 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389203965.384:170): pid=956 uid=0 auid=0 ses=6 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRED_DISP msg=audit(1389203965.386:171): pid=956 uid=0 auid=0 ses=6 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389203965.390:172): pid=956 uid=0 auid=0 ses=6 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1389203965.392:173): pid=956 uid=0 auid=0 ses=6 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389203965.392:174): pid=956 uid=0 auid=0 ses=6 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=956 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389203965.393:175): pid=956 uid=0 auid=0 ses=6 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=956 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389203965.393:176): pid=956 uid=0 auid=0 ses=6 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=956 suid=0 rport=33012 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389203965.396:177): pid=967 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=967 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389203965.397:178): pid=967 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=967 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389203965.400:179): pid=965 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=967 suid=74 rport=33013 laddr=192. exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389203965.400:180): pid=965 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=967 suid=74 rport=33013 laddr=192. exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389203965.919:181): pid=965 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=33013 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389203965.919:182): pid=965 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=4096 fp=8b:56:b0:3f:c8:ad:38:a6:94:f4:a7:26:83:75:cc:85 rport=33013 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_ACCT msg=audit(1389203965.924:183): pid=965 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389203965.925:184): pid=965 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=967 suid=74 rport=33013 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389203965.926:185): pid=965 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1389203965.928:186): pid=965 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=LOGIN msg=audit(1389203965.928:187): login pid=965 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=7 >type=USER_ROLE_CHANGE msg=audit(1389203965.967:188): pid=965 uid=0 auid=0 ses=7 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389203965.983:189): pid=965 uid=0 auid=0 ses=7 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1389203965.987:190): pid=965 uid=0 auid=0 ses=7 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389203965.989:191): pid=965 uid=0 auid=0 ses=7 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389203965.990:192): pid=969 uid=0 auid=0 ses=7 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=969 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389203965.990:193): pid=969 uid=0 auid=0 ses=7 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=969 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRED_REFR msg=audit(1389203965.992:194): pid=969 uid=0 auid=0 ses=7 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389203966.030:195): pid=965 uid=0 auid=0 ses=7 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRED_DISP msg=audit(1389203966.032:196): pid=965 uid=0 auid=0 ses=7 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389203966.034:197): pid=965 uid=0 auid=0 ses=7 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1389203966.038:198): pid=965 uid=0 auid=0 ses=7 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389203966.038:199): pid=965 uid=0 auid=0 ses=7 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=965 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389203966.038:200): pid=965 uid=0 auid=0 ses=7 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=965 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389203966.038:201): pid=965 uid=0 auid=0 ses=7 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=965 suid=0 rport=33013 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389203966.045:202): pid=978 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=978 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389203966.045:203): pid=978 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=978 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389203966.050:204): pid=976 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=978 suid=74 rport=33014 laddr=192. exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389203966.050:205): pid=976 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=978 suid=74 rport=33014 laddr=192. exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389203966.568:206): pid=976 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=33014 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389203966.568:207): pid=976 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=4096 fp=8b:56:b0:3f:c8:ad:38:a6:94:f4:a7:26:83:75:cc:85 rport=33014 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_ACCT msg=audit(1389203966.573:208): pid=976 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389203966.574:209): pid=976 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=978 suid=74 rport=33014 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389203966.575:210): pid=976 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1389203966.577:211): pid=976 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=LOGIN msg=audit(1389203966.577:212): login pid=976 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=8 >type=USER_ROLE_CHANGE msg=audit(1389203966.618:213): pid=976 uid=0 auid=0 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389203966.632:214): pid=976 uid=0 auid=0 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1389203966.637:215): pid=976 uid=0 auid=0 ses=8 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389203966.639:216): pid=976 uid=0 auid=0 ses=8 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389203966.640:217): pid=980 uid=0 auid=0 ses=8 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=980 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389203966.640:218): pid=980 uid=0 auid=0 ses=8 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=980 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRED_REFR msg=audit(1389203966.642:219): pid=980 uid=0 auid=0 ses=8 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389203966.663:220): pid=976 uid=0 auid=0 ses=8 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRED_DISP msg=audit(1389203966.666:221): pid=976 uid=0 auid=0 ses=8 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389203966.668:222): pid=976 uid=0 auid=0 ses=8 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1389203966.672:223): pid=976 uid=0 auid=0 ses=8 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389203966.672:224): pid=976 uid=0 auid=0 ses=8 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=976 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389203966.672:225): pid=976 uid=0 auid=0 ses=8 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=976 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389203966.673:226): pid=976 uid=0 auid=0 ses=8 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=976 suid=0 rport=33014 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389203966.679:227): pid=988 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=988 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389203966.680:228): pid=988 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=988 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389203966.684:229): pid=986 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=988 suid=74 rport=33015 laddr=192. exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389203966.684:230): pid=986 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=988 suid=74 rport=33015 laddr=192. exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389203967.208:231): pid=986 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=33015 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389203967.208:232): pid=986 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=4096 fp=8b:56:b0:3f:c8:ad:38:a6:94:f4:a7:26:83:75:cc:85 rport=33015 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_ACCT msg=audit(1389203967.213:233): pid=986 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389203967.213:234): pid=986 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=988 suid=74 rport=33015 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389203967.214:235): pid=986 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1389203967.216:236): pid=986 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=LOGIN msg=audit(1389203967.216:237): login pid=986 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=9 >type=USER_ROLE_CHANGE msg=audit(1389203967.257:238): pid=986 uid=0 auid=0 ses=9 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389203967.272:239): pid=986 uid=0 auid=0 ses=9 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1389203967.276:240): pid=986 uid=0 auid=0 ses=9 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389203967.278:241): pid=986 uid=0 auid=0 ses=9 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389203967.279:242): pid=990 uid=0 auid=0 ses=9 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=990 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389203967.279:243): pid=990 uid=0 auid=0 ses=9 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=990 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRED_REFR msg=audit(1389203967.282:244): pid=990 uid=0 auid=0 ses=9 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=SERVICE_START msg=audit(1389203967.633:245): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="lvm2-lvmetad" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1389203967.643:246): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="lvm2-pvscan@7:0" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1389203967.672:247): pid=986 uid=0 auid=0 ses=9 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRED_DISP msg=audit(1389203967.674:248): pid=986 uid=0 auid=0 ses=9 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389203967.676:249): pid=986 uid=0 auid=0 ses=9 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1389203967.678:250): pid=986 uid=0 auid=0 ses=9 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389203967.679:251): pid=986 uid=0 auid=0 ses=9 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=986 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389203967.679:252): pid=986 uid=0 auid=0 ses=9 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=986 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389203967.679:253): pid=986 uid=0 auid=0 ses=9 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=986 suid=0 rport=33015 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389203967.701:254): pid=1021 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=1021 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389203967.701:255): pid=1021 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=1021 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389203967.703:256): pid=1020 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=1021 suid=74 rport=33016 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389203967.703:257): pid=1020 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=1021 suid=74 rport=33016 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389203968.234:258): pid=1020 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=33016 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389203968.234:259): pid=1020 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=4096 fp=8b:56:b0:3f:c8:ad:38:a6:94:f4:a7:26:83:75:cc:85 rport=33016 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_ACCT msg=audit(1389203968.239:260): pid=1020 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389203968.240:261): pid=1020 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=1021 suid=74 rport=33016 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389203968.241:262): pid=1020 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1389203968.243:263): pid=1020 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=LOGIN msg=audit(1389203968.243:264): login pid=1020 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=10 >type=USER_ROLE_CHANGE msg=audit(1389203968.285:265): pid=1020 uid=0 auid=0 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389203968.300:266): pid=1020 uid=0 auid=0 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1389203968.304:267): pid=1020 uid=0 auid=0 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389203968.305:268): pid=1020 uid=0 auid=0 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389203968.306:269): pid=1023 uid=0 auid=0 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=1023 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389203968.306:270): pid=1023 uid=0 auid=0 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=1023 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRED_REFR msg=audit(1389203968.309:271): pid=1023 uid=0 auid=0 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389203968.324:272): pid=1020 uid=0 auid=0 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRED_DISP msg=audit(1389203968.326:273): pid=1020 uid=0 auid=0 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389203968.328:274): pid=1020 uid=0 auid=0 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1389203968.329:275): pid=1020 uid=0 auid=0 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389203968.329:276): pid=1020 uid=0 auid=0 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=1020 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389203968.330:277): pid=1020 uid=0 auid=0 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=1020 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389203968.330:278): pid=1020 uid=0 auid=0 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=1020 suid=0 rport=33016 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389203968.358:279): pid=1033 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=1033 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389203968.358:280): pid=1033 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=1033 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389203968.360:281): pid=1032 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=1033 suid=74 rport=33017 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389203968.360:282): pid=1032 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=1033 suid=74 rport=33017 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389203968.885:283): pid=1032 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=33017 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389203968.885:284): pid=1032 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=4096 fp=8b:56:b0:3f:c8:ad:38:a6:94:f4:a7:26:83:75:cc:85 rport=33017 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_ACCT msg=audit(1389203968.890:285): pid=1032 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389203968.891:286): pid=1032 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=1033 suid=74 rport=33017 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389203968.892:287): pid=1032 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1389203968.894:288): pid=1032 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=LOGIN msg=audit(1389203968.894:289): login pid=1032 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=11 >type=USER_ROLE_CHANGE msg=audit(1389203968.933:290): pid=1032 uid=0 auid=0 ses=11 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389203968.948:291): pid=1032 uid=0 auid=0 ses=11 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1389203968.952:292): pid=1032 uid=0 auid=0 ses=11 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389203968.954:293): pid=1032 uid=0 auid=0 ses=11 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389203968.955:294): pid=1035 uid=0 auid=0 ses=11 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=1035 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389203968.955:295): pid=1035 uid=0 auid=0 ses=11 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=1035 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRED_REFR msg=audit(1389203968.961:296): pid=1035 uid=0 auid=0 ses=11 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389203972.837:297): pid=1032 uid=0 auid=0 ses=11 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRED_DISP msg=audit(1389203972.839:298): pid=1032 uid=0 auid=0 ses=11 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389203972.842:299): pid=1032 uid=0 auid=0 ses=11 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1389203972.843:300): pid=1032 uid=0 auid=0 ses=11 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389203972.844:301): pid=1032 uid=0 auid=0 ses=11 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=1032 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389203972.844:302): pid=1032 uid=0 auid=0 ses=11 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=1032 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389203972.844:303): pid=1032 uid=0 auid=0 ses=11 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=1032 suid=0 rport=33017 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389203972.862:304): pid=1049 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=1049 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389203972.862:305): pid=1049 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=1049 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389203972.864:306): pid=1048 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=1049 suid=74 rport=33020 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389203972.864:307): pid=1048 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=1049 suid=74 rport=33020 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389203973.379:308): pid=1048 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=33020 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389203973.379:309): pid=1048 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=4096 fp=8b:56:b0:3f:c8:ad:38:a6:94:f4:a7:26:83:75:cc:85 rport=33020 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_ACCT msg=audit(1389203973.384:310): pid=1048 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389203973.385:311): pid=1048 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=1049 suid=74 rport=33020 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389203973.386:312): pid=1048 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1389203973.388:313): pid=1048 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=LOGIN msg=audit(1389203973.388:314): login pid=1048 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=12 >type=USER_ROLE_CHANGE msg=audit(1389203973.427:315): pid=1048 uid=0 auid=0 ses=12 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389203973.443:316): pid=1048 uid=0 auid=0 ses=12 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1389203973.447:317): pid=1048 uid=0 auid=0 ses=12 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389203973.449:318): pid=1048 uid=0 auid=0 ses=12 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389203973.450:319): pid=1051 uid=0 auid=0 ses=12 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=1051 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389203973.450:320): pid=1051 uid=0 auid=0 ses=12 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=1051 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRED_REFR msg=audit(1389203973.452:321): pid=1051 uid=0 auid=0 ses=12 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389203973.481:322): pid=1048 uid=0 auid=0 ses=12 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRED_DISP msg=audit(1389203973.486:323): pid=1048 uid=0 auid=0 ses=12 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389203973.489:324): pid=1048 uid=0 auid=0 ses=12 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1389203973.491:325): pid=1048 uid=0 auid=0 ses=12 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389203973.491:326): pid=1048 uid=0 auid=0 ses=12 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=1048 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389203973.491:327): pid=1048 uid=0 auid=0 ses=12 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=1048 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389203973.491:328): pid=1048 uid=0 auid=0 ses=12 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=1048 suid=0 rport=33020 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389203973.492:329): pid=1060 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=1060 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389203973.492:330): pid=1060 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=1060 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389203973.494:331): pid=1058 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=1060 suid=74 rport=33021 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389203973.494:332): pid=1058 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=1060 suid=74 rport=33021 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389203974.023:333): pid=1058 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=33021 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389203974.023:334): pid=1058 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=4096 fp=8b:56:b0:3f:c8:ad:38:a6:94:f4:a7:26:83:75:cc:85 rport=33021 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_ACCT msg=audit(1389203974.028:335): pid=1058 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389203974.029:336): pid=1058 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=1060 suid=74 rport=33021 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389203974.030:337): pid=1058 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1389203974.032:338): pid=1058 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=LOGIN msg=audit(1389203974.032:339): login pid=1058 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=13 >type=USER_ROLE_CHANGE msg=audit(1389203974.071:340): pid=1058 uid=0 auid=0 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389203974.086:341): pid=1058 uid=0 auid=0 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1389203974.091:342): pid=1058 uid=0 auid=0 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389203974.093:343): pid=1058 uid=0 auid=0 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389203974.094:344): pid=1062 uid=0 auid=0 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=1062 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389203974.094:345): pid=1062 uid=0 auid=0 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=1062 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRED_REFR msg=audit(1389203974.096:346): pid=1062 uid=0 auid=0 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389203974.215:347): pid=1058 uid=0 auid=0 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRED_DISP msg=audit(1389203974.217:348): pid=1058 uid=0 auid=0 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389203974.219:349): pid=1058 uid=0 auid=0 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1389203974.222:350): pid=1058 uid=0 auid=0 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389203974.222:351): pid=1058 uid=0 auid=0 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=1058 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389203974.222:352): pid=1058 uid=0 auid=0 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=1058 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389203974.222:353): pid=1058 uid=0 auid=0 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=1058 suid=0 rport=33021 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389203974.229:354): pid=1070 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=1070 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389203974.229:355): pid=1070 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=1070 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389203974.234:356): pid=1068 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=1070 suid=74 rport=33022 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389203974.234:357): pid=1068 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=1070 suid=74 rport=33022 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389203974.769:358): pid=1068 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=33022 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389203974.769:359): pid=1068 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=4096 fp=8b:56:b0:3f:c8:ad:38:a6:94:f4:a7:26:83:75:cc:85 rport=33022 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_ACCT msg=audit(1389203974.773:360): pid=1068 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389203974.774:361): pid=1068 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=1070 suid=74 rport=33022 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389203974.775:362): pid=1068 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1389203974.777:363): pid=1068 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=LOGIN msg=audit(1389203974.777:364): login pid=1068 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=14 >type=USER_ROLE_CHANGE msg=audit(1389203974.816:365): pid=1068 uid=0 auid=0 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389203974.830:366): pid=1068 uid=0 auid=0 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1389203974.835:367): pid=1068 uid=0 auid=0 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389203974.837:368): pid=1068 uid=0 auid=0 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389203974.838:369): pid=1072 uid=0 auid=0 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=1072 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389203974.838:370): pid=1072 uid=0 auid=0 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=1072 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRED_REFR msg=audit(1389203974.840:371): pid=1072 uid=0 auid=0 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389203976.424:372): pid=1068 uid=0 auid=0 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRED_DISP msg=audit(1389203976.426:373): pid=1068 uid=0 auid=0 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389203976.428:374): pid=1068 uid=0 auid=0 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1389203976.430:375): pid=1068 uid=0 auid=0 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389203976.430:376): pid=1068 uid=0 auid=0 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=1068 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389203976.430:377): pid=1068 uid=0 auid=0 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=1068 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389203976.430:378): pid=1068 uid=0 auid=0 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=1068 suid=0 rport=33022 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389203976.432:379): pid=1085 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=1085 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389203976.432:380): pid=1085 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=1085 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389203976.434:381): pid=1083 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=1085 suid=74 rport=33025 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389203976.435:382): pid=1083 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=1085 suid=74 rport=33025 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389203976.968:383): pid=1083 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=33025 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389203976.968:384): pid=1083 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=4096 fp=8b:56:b0:3f:c8:ad:38:a6:94:f4:a7:26:83:75:cc:85 rport=33025 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_ACCT msg=audit(1389203976.975:385): pid=1083 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389203976.976:386): pid=1083 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=1085 suid=74 rport=33025 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389203976.977:387): pid=1083 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1389203976.980:388): pid=1083 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=LOGIN msg=audit(1389203976.981:389): login pid=1083 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=15 >type=USER_ROLE_CHANGE msg=audit(1389203977.031:390): pid=1083 uid=0 auid=0 ses=15 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389203977.049:391): pid=1083 uid=0 auid=0 ses=15 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1389203977.053:392): pid=1083 uid=0 auid=0 ses=15 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389203977.055:393): pid=1083 uid=0 auid=0 ses=15 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389203977.057:394): pid=1087 uid=0 auid=0 ses=15 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=1087 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389203977.057:395): pid=1087 uid=0 auid=0 ses=15 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=1087 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRED_REFR msg=audit(1389203977.059:396): pid=1087 uid=0 auid=0 ses=15 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=ADD_GROUP msg=audit(1389204005.035:397): pid=1148 uid=0 auid=0 ses=15 subj=unconfined_u:system_r:groupadd_t:s0-s0:c0.c1023 msg='op=adding group to /etc/group id=52 exe="/usr/sbin/groupadd" hostname=? addr=? terminal=? res=success' >type=ADD_GROUP msg=audit(1389204005.214:398): pid=1148 uid=0 auid=0 ses=15 subj=unconfined_u:system_r:groupadd_t:s0-s0:c0.c1023 msg='op=adding group to /etc/gshadow id=52 exe="/usr/sbin/groupadd" hostname=? addr=? terminal=? res=success' >type=ADD_GROUP msg=audit(1389204005.215:399): pid=1148 uid=0 auid=0 ses=15 subj=unconfined_u:system_r:groupadd_t:s0-s0:c0.c1023 msg='op= id=52 exe="/usr/sbin/groupadd" hostname=? addr=? terminal=? res=success' >type=ADD_USER msg=audit(1389204005.599:400): pid=1153 uid=0 auid=0 ses=15 subj=unconfined_u:system_r:useradd_t:s0-s0:c0.c1023 msg='op=adding user id=52 exe="/usr/sbin/useradd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1389204010.796:401): pid=1083 uid=0 auid=0 ses=15 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRED_DISP msg=audit(1389204010.800:402): pid=1083 uid=0 auid=0 ses=15 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204010.802:403): pid=1083 uid=0 auid=0 ses=15 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1389204010.804:404): pid=1083 uid=0 auid=0 ses=15 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204010.805:405): pid=1083 uid=0 auid=0 ses=15 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=1083 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204010.805:406): pid=1083 uid=0 auid=0 ses=15 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=1083 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204010.805:407): pid=1083 uid=0 auid=0 ses=15 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=1083 suid=0 rport=33025 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204010.848:408): pid=1184 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=1184 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204010.848:409): pid=1184 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=1184 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204010.851:410): pid=1183 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=1184 suid=74 rport=33048 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204010.851:411): pid=1183 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=1184 suid=74 rport=33048 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204011.373:412): pid=1183 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=33048 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204011.373:413): pid=1183 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=4096 fp=8b:56:b0:3f:c8:ad:38:a6:94:f4:a7:26:83:75:cc:85 rport=33048 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_ACCT msg=audit(1389204011.378:414): pid=1183 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204011.379:415): pid=1183 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=1184 suid=74 rport=33048 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204011.380:416): pid=1183 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1389204011.381:417): pid=1183 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=LOGIN msg=audit(1389204011.382:418): login pid=1183 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=16 >type=USER_ROLE_CHANGE msg=audit(1389204011.423:419): pid=1183 uid=0 auid=0 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204011.450:420): pid=1183 uid=0 auid=0 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1389204011.454:421): pid=1183 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204011.456:422): pid=1183 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204011.457:423): pid=1187 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=1187 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204011.457:424): pid=1187 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=1187 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRED_REFR msg=audit(1389204011.460:425): pid=1187 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204011.484:426): pid=1183 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRED_DISP msg=audit(1389204011.486:427): pid=1183 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204011.490:428): pid=1183 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1389204011.492:429): pid=1183 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204011.492:430): pid=1183 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=1183 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204011.492:431): pid=1183 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=1183 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204011.492:432): pid=1183 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=1183 suid=0 rport=33048 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204011.505:433): pid=1199 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=1199 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204011.508:434): pid=1199 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=1199 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204011.510:435): pid=1198 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=1199 suid=74 rport=33049 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204011.510:436): pid=1198 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=1199 suid=74 rport=33049 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204012.031:437): pid=1198 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=33049 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204012.031:438): pid=1198 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=4096 fp=8b:56:b0:3f:c8:ad:38:a6:94:f4:a7:26:83:75:cc:85 rport=33049 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_ACCT msg=audit(1389204012.037:439): pid=1198 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204012.038:440): pid=1198 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=1199 suid=74 rport=33049 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204012.038:441): pid=1198 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1389204012.041:442): pid=1198 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=LOGIN msg=audit(1389204012.041:443): login pid=1198 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=17 >type=USER_ROLE_CHANGE msg=audit(1389204012.080:444): pid=1198 uid=0 auid=0 ses=17 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204012.095:445): pid=1198 uid=0 auid=0 ses=17 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1389204012.100:446): pid=1198 uid=0 auid=0 ses=17 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204012.102:447): pid=1198 uid=0 auid=0 ses=17 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204012.103:448): pid=1201 uid=0 auid=0 ses=17 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=1201 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204012.103:449): pid=1201 uid=0 auid=0 ses=17 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=1201 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRED_REFR msg=audit(1389204012.105:450): pid=1201 uid=0 auid=0 ses=17 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204012.125:451): pid=1198 uid=0 auid=0 ses=17 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRED_DISP msg=audit(1389204012.127:452): pid=1198 uid=0 auid=0 ses=17 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204012.129:453): pid=1198 uid=0 auid=0 ses=17 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1389204012.133:454): pid=1198 uid=0 auid=0 ses=17 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204012.133:455): pid=1198 uid=0 auid=0 ses=17 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=1198 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204012.133:456): pid=1198 uid=0 auid=0 ses=17 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=1198 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204012.133:457): pid=1198 uid=0 auid=0 ses=17 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=1198 suid=0 rport=33049 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204012.138:458): pid=1212 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=1212 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204012.140:459): pid=1212 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=1212 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204012.141:460): pid=1210 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=1212 suid=74 rport=33050 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204012.144:461): pid=1210 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=1212 suid=74 rport=33050 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204012.667:462): pid=1210 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=33050 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204012.667:463): pid=1210 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=4096 fp=8b:56:b0:3f:c8:ad:38:a6:94:f4:a7:26:83:75:cc:85 rport=33050 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_ACCT msg=audit(1389204012.672:464): pid=1210 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204012.673:465): pid=1210 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=1212 suid=74 rport=33050 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204012.674:466): pid=1210 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1389204012.676:467): pid=1210 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=LOGIN msg=audit(1389204012.676:468): login pid=1210 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=18 >type=USER_ROLE_CHANGE msg=audit(1389204012.717:469): pid=1210 uid=0 auid=0 ses=18 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204012.737:470): pid=1210 uid=0 auid=0 ses=18 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1389204012.742:471): pid=1210 uid=0 auid=0 ses=18 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204012.744:472): pid=1210 uid=0 auid=0 ses=18 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204012.745:473): pid=1214 uid=0 auid=0 ses=18 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=1214 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204012.745:474): pid=1214 uid=0 auid=0 ses=18 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=1214 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRED_REFR msg=audit(1389204012.748:475): pid=1214 uid=0 auid=0 ses=18 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204015.205:476): pid=1210 uid=0 auid=0 ses=18 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRED_DISP msg=audit(1389204015.207:477): pid=1210 uid=0 auid=0 ses=18 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204015.212:478): pid=1210 uid=0 auid=0 ses=18 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1389204015.215:479): pid=1210 uid=0 auid=0 ses=18 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204015.215:480): pid=1210 uid=0 auid=0 ses=18 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=1210 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204015.215:481): pid=1210 uid=0 auid=0 ses=18 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=1210 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204015.215:482): pid=1210 uid=0 auid=0 ses=18 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=1210 suid=0 rport=33050 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204015.223:483): pid=1223 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=1223 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204015.229:484): pid=1223 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=1223 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204015.233:485): pid=1221 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=1223 suid=74 rport=33051 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204015.233:486): pid=1221 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=1223 suid=74 rport=33051 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204015.765:487): pid=1221 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=33051 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204015.765:488): pid=1221 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=4096 fp=8b:56:b0:3f:c8:ad:38:a6:94:f4:a7:26:83:75:cc:85 rport=33051 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_ACCT msg=audit(1389204015.770:489): pid=1221 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204015.771:490): pid=1221 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=1223 suid=74 rport=33051 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204015.772:491): pid=1221 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1389204015.775:492): pid=1221 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=LOGIN msg=audit(1389204015.775:493): login pid=1221 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=19 >type=USER_ROLE_CHANGE msg=audit(1389204015.813:494): pid=1221 uid=0 auid=0 ses=19 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204015.829:495): pid=1221 uid=0 auid=0 ses=19 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1389204015.833:496): pid=1221 uid=0 auid=0 ses=19 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204015.835:497): pid=1221 uid=0 auid=0 ses=19 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204015.836:498): pid=1225 uid=0 auid=0 ses=19 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=1225 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204015.836:499): pid=1225 uid=0 auid=0 ses=19 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=1225 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRED_REFR msg=audit(1389204015.839:500): pid=1225 uid=0 auid=0 ses=19 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204015.857:501): pid=1221 uid=0 auid=0 ses=19 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRED_DISP msg=audit(1389204015.859:502): pid=1221 uid=0 auid=0 ses=19 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204015.861:503): pid=1221 uid=0 auid=0 ses=19 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1389204015.862:504): pid=1221 uid=0 auid=0 ses=19 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204015.862:505): pid=1221 uid=0 auid=0 ses=19 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=1221 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204015.863:506): pid=1221 uid=0 auid=0 ses=19 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=1221 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204015.863:507): pid=1221 uid=0 auid=0 ses=19 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=1221 suid=0 rport=33051 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204015.885:508): pid=1238 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=1238 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204015.885:509): pid=1238 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=1238 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204015.887:510): pid=1236 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=1238 suid=74 rport=33052 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204015.887:511): pid=1236 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=1238 suid=74 rport=33052 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204016.422:512): pid=1236 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=33052 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204016.422:513): pid=1236 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=4096 fp=8b:56:b0:3f:c8:ad:38:a6:94:f4:a7:26:83:75:cc:85 rport=33052 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_ACCT msg=audit(1389204016.428:514): pid=1236 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204016.429:515): pid=1236 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=1238 suid=74 rport=33052 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204016.430:516): pid=1236 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1389204016.433:517): pid=1236 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=LOGIN msg=audit(1389204016.433:518): login pid=1236 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=20 >type=USER_ROLE_CHANGE msg=audit(1389204016.508:519): pid=1236 uid=0 auid=0 ses=20 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204016.529:520): pid=1236 uid=0 auid=0 ses=20 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1389204016.534:521): pid=1236 uid=0 auid=0 ses=20 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204016.536:522): pid=1236 uid=0 auid=0 ses=20 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204016.536:523): pid=1245 uid=0 auid=0 ses=20 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=1245 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204016.537:524): pid=1245 uid=0 auid=0 ses=20 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=1245 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRED_REFR msg=audit(1389204016.539:525): pid=1245 uid=0 auid=0 ses=20 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204016.559:526): pid=1236 uid=0 auid=0 ses=20 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRED_DISP msg=audit(1389204016.561:527): pid=1236 uid=0 auid=0 ses=20 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204016.564:528): pid=1236 uid=0 auid=0 ses=20 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1389204016.565:529): pid=1236 uid=0 auid=0 ses=20 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204016.566:530): pid=1236 uid=0 auid=0 ses=20 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=1236 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204016.566:531): pid=1236 uid=0 auid=0 ses=20 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=1236 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204016.566:532): pid=1236 uid=0 auid=0 ses=20 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=1236 suid=0 rport=33052 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204019.569:533): pid=1258 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=1258 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204019.570:534): pid=1258 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=1258 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204019.571:535): pid=1257 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=1258 suid=74 rport=33059 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204019.571:536): pid=1257 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=1258 suid=74 rport=33059 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204020.099:537): pid=1257 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=33059 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204020.099:538): pid=1257 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=4096 fp=8b:56:b0:3f:c8:ad:38:a6:94:f4:a7:26:83:75:cc:85 rport=33059 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_ACCT msg=audit(1389204020.104:539): pid=1257 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204020.106:540): pid=1257 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=1258 suid=74 rport=33059 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204020.106:541): pid=1257 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1389204020.108:542): pid=1257 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=LOGIN msg=audit(1389204020.109:543): login pid=1257 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=21 >type=USER_ROLE_CHANGE msg=audit(1389204020.150:544): pid=1257 uid=0 auid=0 ses=21 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204020.165:545): pid=1257 uid=0 auid=0 ses=21 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1389204020.170:546): pid=1257 uid=0 auid=0 ses=21 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204020.172:547): pid=1257 uid=0 auid=0 ses=21 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204020.173:548): pid=1260 uid=0 auid=0 ses=21 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=1260 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204020.173:549): pid=1260 uid=0 auid=0 ses=21 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=1260 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRED_REFR msg=audit(1389204020.175:550): pid=1260 uid=0 auid=0 ses=21 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204020.193:551): pid=1257 uid=0 auid=0 ses=21 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRED_DISP msg=audit(1389204020.195:552): pid=1257 uid=0 auid=0 ses=21 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204020.198:553): pid=1257 uid=0 auid=0 ses=21 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1389204020.200:554): pid=1257 uid=0 auid=0 ses=21 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204020.200:555): pid=1257 uid=0 auid=0 ses=21 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=1257 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204020.200:556): pid=1257 uid=0 auid=0 ses=21 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=1257 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204020.200:557): pid=1257 uid=0 auid=0 ses=21 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=1257 suid=0 rport=33059 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204023.203:558): pid=1269 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=1269 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204023.203:559): pid=1269 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=1269 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204023.205:560): pid=1268 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=1269 suid=74 rport=33074 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204023.205:561): pid=1268 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=1269 suid=74 rport=33074 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204023.744:562): pid=1268 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=33074 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204023.744:563): pid=1268 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=4096 fp=8b:56:b0:3f:c8:ad:38:a6:94:f4:a7:26:83:75:cc:85 rport=33074 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_ACCT msg=audit(1389204023.749:564): pid=1268 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204023.750:565): pid=1268 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=1269 suid=74 rport=33074 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204023.751:566): pid=1268 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1389204023.753:567): pid=1268 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=LOGIN msg=audit(1389204023.753:568): login pid=1268 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=22 >type=USER_ROLE_CHANGE msg=audit(1389204023.792:569): pid=1268 uid=0 auid=0 ses=22 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204023.809:570): pid=1268 uid=0 auid=0 ses=22 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1389204023.813:571): pid=1268 uid=0 auid=0 ses=22 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204023.816:572): pid=1268 uid=0 auid=0 ses=22 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204023.817:573): pid=1271 uid=0 auid=0 ses=22 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=1271 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204023.817:574): pid=1271 uid=0 auid=0 ses=22 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=1271 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRED_REFR msg=audit(1389204023.820:575): pid=1271 uid=0 auid=0 ses=22 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204023.840:576): pid=1268 uid=0 auid=0 ses=22 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRED_DISP msg=audit(1389204023.842:577): pid=1268 uid=0 auid=0 ses=22 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204023.845:578): pid=1268 uid=0 auid=0 ses=22 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1389204023.847:579): pid=1268 uid=0 auid=0 ses=22 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204023.847:580): pid=1268 uid=0 auid=0 ses=22 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=1268 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204023.847:581): pid=1268 uid=0 auid=0 ses=22 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=1268 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204023.848:582): pid=1268 uid=0 auid=0 ses=22 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=1268 suid=0 rport=33074 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=NETFILTER_CFG msg=audit(1389204026.606:583): table=filter family=2 entries=0 >type=SYSCALL msg=audit(1389204026.606:583): arch=c000003e syscall=272 success=yes exit=0 a0=40000000 a1=c0 a2=0 a3=7fff1f7b90e0 items=0 ppid=1387 pid=1394 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=19 tty=(none) comm="ip" exe="/usr/sbin/ip" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null) >type=CRYPTO_KEY_USER msg=audit(1389204026.851:584): pid=1405 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=1405 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204026.851:585): pid=1405 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=1405 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204026.853:586): pid=1404 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=1405 suid=74 rport=33080 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204026.854:587): pid=1404 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=1405 suid=74 rport=33080 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=NETFILTER_CFG msg=audit(1389204026.626:588): table=filter family=2 entries=0 >type=SYSCALL msg=audit(1389204026.626:588): arch=c000003e syscall=272 success=yes exit=0 a0=40000000 a1=c0 a2=0 a3=7fff2b9436c0 items=0 ppid=1387 pid=1400 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=19 tty=(none) comm="ip" exe="/usr/sbin/ip" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null) >type=NETFILTER_CFG msg=audit(1389204026.884:589): table=filter family=2 entries=0 >type=SYSCALL msg=audit(1389204026.884:589): arch=c000003e syscall=272 success=yes exit=0 a0=40000000 a1=c0 a2=0 a3=7fff3b823ce0 items=0 ppid=1387 pid=1407 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=19 tty=(none) comm="ip" exe="/usr/sbin/ip" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null) >type=USER_AUTH msg=audit(1389204027.402:590): pid=1404 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=33080 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204027.402:591): pid=1404 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=4096 fp=8b:56:b0:3f:c8:ad:38:a6:94:f4:a7:26:83:75:cc:85 rport=33080 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_ACCT msg=audit(1389204027.409:592): pid=1404 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204027.411:593): pid=1404 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=1405 suid=74 rport=33080 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204027.413:594): pid=1404 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1389204027.415:595): pid=1404 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=LOGIN msg=audit(1389204027.415:596): login pid=1404 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=23 >type=USER_ROLE_CHANGE msg=audit(1389204027.461:597): pid=1404 uid=0 auid=0 ses=23 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204027.479:598): pid=1404 uid=0 auid=0 ses=23 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1389204027.485:599): pid=1404 uid=0 auid=0 ses=23 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204027.487:600): pid=1404 uid=0 auid=0 ses=23 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204027.488:601): pid=1427 uid=0 auid=0 ses=23 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=1427 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204027.489:602): pid=1427 uid=0 auid=0 ses=23 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=1427 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRED_REFR msg=audit(1389204027.491:603): pid=1427 uid=0 auid=0 ses=23 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204027.510:604): pid=1404 uid=0 auid=0 ses=23 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRED_DISP msg=audit(1389204027.512:605): pid=1404 uid=0 auid=0 ses=23 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204027.514:606): pid=1404 uid=0 auid=0 ses=23 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1389204027.516:607): pid=1404 uid=0 auid=0 ses=23 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204027.516:608): pid=1404 uid=0 auid=0 ses=23 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=1404 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204027.516:609): pid=1404 uid=0 auid=0 ses=23 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=1404 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204027.516:610): pid=1404 uid=0 auid=0 ses=23 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=1404 suid=0 rport=33080 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204030.527:611): pid=1450 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=1450 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204030.529:612): pid=1450 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=1450 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204030.531:613): pid=1449 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=1450 suid=74 rport=33081 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204030.531:614): pid=1449 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=1450 suid=74 rport=33081 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204031.058:615): pid=1449 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=33081 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204031.058:616): pid=1449 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=4096 fp=8b:56:b0:3f:c8:ad:38:a6:94:f4:a7:26:83:75:cc:85 rport=33081 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_ACCT msg=audit(1389204031.063:617): pid=1449 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204031.064:618): pid=1449 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=1450 suid=74 rport=33081 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204031.065:619): pid=1449 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1389204031.067:620): pid=1449 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=LOGIN msg=audit(1389204031.067:621): login pid=1449 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=24 >type=USER_ROLE_CHANGE msg=audit(1389204031.109:622): pid=1449 uid=0 auid=0 ses=24 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204031.130:623): pid=1449 uid=0 auid=0 ses=24 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1389204031.135:624): pid=1449 uid=0 auid=0 ses=24 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204031.137:625): pid=1449 uid=0 auid=0 ses=24 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204031.138:626): pid=1456 uid=0 auid=0 ses=24 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=1456 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204031.138:627): pid=1456 uid=0 auid=0 ses=24 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=1456 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRED_REFR msg=audit(1389204031.140:628): pid=1456 uid=0 auid=0 ses=24 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204031.164:629): pid=1449 uid=0 auid=0 ses=24 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRED_DISP msg=audit(1389204031.166:630): pid=1449 uid=0 auid=0 ses=24 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204031.167:631): pid=1449 uid=0 auid=0 ses=24 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1389204031.169:632): pid=1449 uid=0 auid=0 ses=24 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204031.169:633): pid=1449 uid=0 auid=0 ses=24 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=1449 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204031.169:634): pid=1449 uid=0 auid=0 ses=24 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=1449 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204031.170:635): pid=1449 uid=0 auid=0 ses=24 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=1449 suid=0 rport=33081 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204034.177:636): pid=1482 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=1482 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204034.177:637): pid=1482 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=1482 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204034.179:638): pid=1481 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=1482 suid=74 rport=33092 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204034.179:639): pid=1481 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=1482 suid=74 rport=33092 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204034.700:640): pid=1481 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=33092 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204034.700:641): pid=1481 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=4096 fp=8b:56:b0:3f:c8:ad:38:a6:94:f4:a7:26:83:75:cc:85 rport=33092 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_ACCT msg=audit(1389204034.706:642): pid=1481 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204034.707:643): pid=1481 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=1482 suid=74 rport=33092 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204034.708:644): pid=1481 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1389204034.711:645): pid=1481 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=LOGIN msg=audit(1389204034.711:646): login pid=1481 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=25 >type=USER_ROLE_CHANGE msg=audit(1389204034.752:647): pid=1481 uid=0 auid=0 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204034.772:648): pid=1481 uid=0 auid=0 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1389204034.777:649): pid=1481 uid=0 auid=0 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204034.779:650): pid=1481 uid=0 auid=0 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204034.780:651): pid=1484 uid=0 auid=0 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=1484 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204034.781:652): pid=1484 uid=0 auid=0 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=1484 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRED_REFR msg=audit(1389204034.783:653): pid=1484 uid=0 auid=0 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204034.804:654): pid=1481 uid=0 auid=0 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRED_DISP msg=audit(1389204034.806:655): pid=1481 uid=0 auid=0 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204034.808:656): pid=1481 uid=0 auid=0 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1389204034.811:657): pid=1481 uid=0 auid=0 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204034.811:658): pid=1481 uid=0 auid=0 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=1481 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204034.811:659): pid=1481 uid=0 auid=0 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=1481 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204034.811:660): pid=1481 uid=0 auid=0 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=1481 suid=0 rport=33092 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204037.815:661): pid=1494 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=1494 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204037.815:662): pid=1494 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=1494 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204037.817:663): pid=1493 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=1494 suid=74 rport=33102 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204037.817:664): pid=1493 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=1494 suid=74 rport=33102 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204038.344:665): pid=1493 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=33102 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204038.344:666): pid=1493 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=4096 fp=8b:56:b0:3f:c8:ad:38:a6:94:f4:a7:26:83:75:cc:85 rport=33102 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_ACCT msg=audit(1389204038.350:667): pid=1493 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204038.352:668): pid=1493 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=1494 suid=74 rport=33102 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204038.353:669): pid=1493 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1389204038.355:670): pid=1493 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=LOGIN msg=audit(1389204038.355:671): login pid=1493 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=26 >type=USER_ROLE_CHANGE msg=audit(1389204038.405:672): pid=1493 uid=0 auid=0 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204038.423:673): pid=1493 uid=0 auid=0 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1389204038.427:674): pid=1493 uid=0 auid=0 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204038.429:675): pid=1493 uid=0 auid=0 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204038.430:676): pid=1496 uid=0 auid=0 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=1496 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204038.430:677): pid=1496 uid=0 auid=0 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=1496 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRED_REFR msg=audit(1389204038.433:678): pid=1496 uid=0 auid=0 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204038.451:679): pid=1493 uid=0 auid=0 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRED_DISP msg=audit(1389204038.453:680): pid=1493 uid=0 auid=0 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204038.456:681): pid=1493 uid=0 auid=0 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1389204038.458:682): pid=1493 uid=0 auid=0 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204038.458:683): pid=1493 uid=0 auid=0 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=1493 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204038.458:684): pid=1493 uid=0 auid=0 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=1493 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204038.458:685): pid=1493 uid=0 auid=0 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=1493 suid=0 rport=33102 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=NETFILTER_CFG msg=audit(1389204040.594:686): table=filter family=2 entries=0 >type=SYSCALL msg=audit(1389204040.594:686): arch=c000003e syscall=272 success=yes exit=0 a0=40000000 a1=c0 a2=0 a3=7fffc5debe10 items=0 ppid=1612 pid=1619 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=19 tty=(none) comm="ip" exe="/usr/sbin/ip" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null) >type=NETFILTER_CFG msg=audit(1389204040.610:687): table=filter family=2 entries=0 >type=SYSCALL msg=audit(1389204040.610:687): arch=c000003e syscall=272 success=yes exit=0 a0=40000000 a1=c0 a2=0 a3=7ffff4255dd0 items=0 ppid=1612 pid=1625 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=19 tty=(none) comm="ip" exe="/usr/sbin/ip" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null) >type=NETFILTER_CFG msg=audit(1389204040.868:688): table=filter family=2 entries=0 >type=SYSCALL msg=audit(1389204040.868:688): arch=c000003e syscall=272 success=yes exit=0 a0=40000000 a1=c0 a2=0 a3=7fff0ff26bc0 items=0 ppid=1612 pid=1627 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=19 tty=(none) comm="ip" exe="/usr/sbin/ip" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null) >type=CRYPTO_KEY_USER msg=audit(1389204041.463:689): pid=1646 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=1646 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204041.463:690): pid=1646 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=1646 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204041.465:691): pid=1645 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=1646 suid=74 rport=33109 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204041.465:692): pid=1645 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=1646 suid=74 rport=33109 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204042.023:693): pid=1645 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=33109 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204042.023:694): pid=1645 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=4096 fp=8b:56:b0:3f:c8:ad:38:a6:94:f4:a7:26:83:75:cc:85 rport=33109 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_ACCT msg=audit(1389204042.029:695): pid=1645 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204042.030:696): pid=1645 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=1646 suid=74 rport=33109 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204042.031:697): pid=1645 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1389204042.033:698): pid=1645 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=LOGIN msg=audit(1389204042.033:699): login pid=1645 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=27 >type=USER_ROLE_CHANGE msg=audit(1389204042.113:700): pid=1645 uid=0 auid=0 ses=27 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204042.132:701): pid=1645 uid=0 auid=0 ses=27 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1389204042.136:702): pid=1645 uid=0 auid=0 ses=27 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204042.138:703): pid=1645 uid=0 auid=0 ses=27 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204042.139:704): pid=1669 uid=0 auid=0 ses=27 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=1669 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204042.139:705): pid=1669 uid=0 auid=0 ses=27 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=1669 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRED_REFR msg=audit(1389204042.141:706): pid=1669 uid=0 auid=0 ses=27 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204042.167:707): pid=1645 uid=0 auid=0 ses=27 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRED_DISP msg=audit(1389204042.169:708): pid=1645 uid=0 auid=0 ses=27 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204042.171:709): pid=1645 uid=0 auid=0 ses=27 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1389204042.173:710): pid=1645 uid=0 auid=0 ses=27 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204042.173:711): pid=1645 uid=0 auid=0 ses=27 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=1645 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204042.173:712): pid=1645 uid=0 auid=0 ses=27 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=1645 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204042.173:713): pid=1645 uid=0 auid=0 ses=27 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=1645 suid=0 rport=33109 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204045.191:714): pid=1678 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=1678 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204045.191:715): pid=1678 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=1678 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204045.193:716): pid=1677 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=1678 suid=74 rport=33110 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204045.193:717): pid=1677 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=1678 suid=74 rport=33110 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204045.716:718): pid=1677 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=33110 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204045.716:719): pid=1677 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=4096 fp=8b:56:b0:3f:c8:ad:38:a6:94:f4:a7:26:83:75:cc:85 rport=33110 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_ACCT msg=audit(1389204045.722:720): pid=1677 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204045.723:721): pid=1677 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=1678 suid=74 rport=33110 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204045.724:722): pid=1677 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1389204045.726:723): pid=1677 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=LOGIN msg=audit(1389204045.726:724): login pid=1677 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=28 >type=USER_ROLE_CHANGE msg=audit(1389204045.812:725): pid=1677 uid=0 auid=0 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204045.839:726): pid=1677 uid=0 auid=0 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1389204045.847:727): pid=1677 uid=0 auid=0 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204045.849:728): pid=1677 uid=0 auid=0 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204045.851:729): pid=1680 uid=0 auid=0 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=1680 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204045.851:730): pid=1680 uid=0 auid=0 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=1680 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRED_REFR msg=audit(1389204045.855:731): pid=1680 uid=0 auid=0 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204045.883:732): pid=1677 uid=0 auid=0 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRED_DISP msg=audit(1389204045.885:733): pid=1677 uid=0 auid=0 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204045.887:734): pid=1677 uid=0 auid=0 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1389204045.890:735): pid=1677 uid=0 auid=0 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204045.890:736): pid=1677 uid=0 auid=0 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=1677 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204045.890:737): pid=1677 uid=0 auid=0 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=1677 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204045.890:738): pid=1677 uid=0 auid=0 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=1677 suid=0 rport=33110 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204048.894:739): pid=1691 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=1691 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204048.894:740): pid=1691 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=1691 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204048.897:741): pid=1690 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=1691 suid=74 rport=33111 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204048.897:742): pid=1690 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=1691 suid=74 rport=33111 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204049.426:743): pid=1690 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=33111 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204049.426:744): pid=1690 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=4096 fp=8b:56:b0:3f:c8:ad:38:a6:94:f4:a7:26:83:75:cc:85 rport=33111 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_ACCT msg=audit(1389204049.431:745): pid=1690 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204049.432:746): pid=1690 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=1691 suid=74 rport=33111 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204049.433:747): pid=1690 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1389204049.435:748): pid=1690 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=LOGIN msg=audit(1389204049.435:749): login pid=1690 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=29 >type=USER_ROLE_CHANGE msg=audit(1389204049.474:750): pid=1690 uid=0 auid=0 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204049.489:751): pid=1690 uid=0 auid=0 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1389204049.494:752): pid=1690 uid=0 auid=0 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204049.496:753): pid=1690 uid=0 auid=0 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204049.497:754): pid=1693 uid=0 auid=0 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=1693 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204049.497:755): pid=1693 uid=0 auid=0 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=1693 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRED_REFR msg=audit(1389204049.499:756): pid=1693 uid=0 auid=0 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204049.517:757): pid=1690 uid=0 auid=0 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRED_DISP msg=audit(1389204049.519:758): pid=1690 uid=0 auid=0 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204049.521:759): pid=1690 uid=0 auid=0 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1389204049.526:760): pid=1690 uid=0 auid=0 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204049.526:761): pid=1690 uid=0 auid=0 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=1690 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204049.526:762): pid=1690 uid=0 auid=0 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=1690 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204049.526:763): pid=1690 uid=0 auid=0 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=1690 suid=0 rport=33111 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204049.532:764): pid=1700 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=1700 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204049.533:765): pid=1700 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=1700 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204049.535:766): pid=1698 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=1700 suid=74 rport=33112 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204049.539:767): pid=1698 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=1700 suid=74 rport=33112 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204050.063:768): pid=1698 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=33112 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204050.063:769): pid=1698 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=4096 fp=8b:56:b0:3f:c8:ad:38:a6:94:f4:a7:26:83:75:cc:85 rport=33112 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_ACCT msg=audit(1389204050.068:770): pid=1698 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204050.069:771): pid=1698 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=1700 suid=74 rport=33112 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204050.070:772): pid=1698 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1389204050.073:773): pid=1698 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=LOGIN msg=audit(1389204050.073:774): login pid=1698 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=30 >type=USER_ROLE_CHANGE msg=audit(1389204050.112:775): pid=1698 uid=0 auid=0 ses=30 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204050.127:776): pid=1698 uid=0 auid=0 ses=30 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1389204050.132:777): pid=1698 uid=0 auid=0 ses=30 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204050.135:778): pid=1698 uid=0 auid=0 ses=30 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204050.136:779): pid=1702 uid=0 auid=0 ses=30 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=1702 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204050.136:780): pid=1702 uid=0 auid=0 ses=30 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=1702 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRED_REFR msg=audit(1389204050.138:781): pid=1702 uid=0 auid=0 ses=30 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204050.157:782): pid=1698 uid=0 auid=0 ses=30 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRED_DISP msg=audit(1389204050.159:783): pid=1698 uid=0 auid=0 ses=30 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204050.161:784): pid=1698 uid=0 auid=0 ses=30 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1389204050.167:785): pid=1698 uid=0 auid=0 ses=30 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204050.167:786): pid=1698 uid=0 auid=0 ses=30 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=1698 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204050.167:787): pid=1698 uid=0 auid=0 ses=30 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=1698 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204050.167:788): pid=1698 uid=0 auid=0 ses=30 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=1698 suid=0 rport=33112 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204050.172:789): pid=1713 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=1713 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204050.174:790): pid=1713 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=1713 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204050.176:791): pid=1712 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=1713 suid=74 rport=33113 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204050.176:792): pid=1712 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=1713 suid=74 rport=33113 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204050.705:793): pid=1712 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=33113 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204050.705:794): pid=1712 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=4096 fp=8b:56:b0:3f:c8:ad:38:a6:94:f4:a7:26:83:75:cc:85 rport=33113 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_ACCT msg=audit(1389204050.710:795): pid=1712 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204050.711:796): pid=1712 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=1713 suid=74 rport=33113 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204050.712:797): pid=1712 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1389204050.715:798): pid=1712 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=LOGIN msg=audit(1389204050.715:799): login pid=1712 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=31 >type=USER_ROLE_CHANGE msg=audit(1389204050.757:800): pid=1712 uid=0 auid=0 ses=31 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204050.773:801): pid=1712 uid=0 auid=0 ses=31 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1389204050.777:802): pid=1712 uid=0 auid=0 ses=31 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204050.779:803): pid=1712 uid=0 auid=0 ses=31 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204050.781:804): pid=1724 uid=0 auid=0 ses=31 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=1724 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204050.781:805): pid=1724 uid=0 auid=0 ses=31 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=1724 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRED_REFR msg=audit(1389204050.783:806): pid=1724 uid=0 auid=0 ses=31 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204050.803:807): pid=1712 uid=0 auid=0 ses=31 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRED_DISP msg=audit(1389204050.805:808): pid=1712 uid=0 auid=0 ses=31 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204050.807:809): pid=1712 uid=0 auid=0 ses=31 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1389204050.808:810): pid=1712 uid=0 auid=0 ses=31 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204050.808:811): pid=1712 uid=0 auid=0 ses=31 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=1712 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204050.808:812): pid=1712 uid=0 auid=0 ses=31 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=1712 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204050.809:813): pid=1712 uid=0 auid=0 ses=31 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=1712 suid=0 rport=33113 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204050.816:814): pid=1736 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=1736 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204050.816:815): pid=1736 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=1736 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204050.818:816): pid=1735 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=1736 suid=74 rport=33115 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204050.818:817): pid=1735 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=1736 suid=74 rport=33115 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204051.347:818): pid=1735 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=33115 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204051.347:819): pid=1735 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=4096 fp=8b:56:b0:3f:c8:ad:38:a6:94:f4:a7:26:83:75:cc:85 rport=33115 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_ACCT msg=audit(1389204051.353:820): pid=1735 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204051.354:821): pid=1735 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=1736 suid=74 rport=33115 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204051.355:822): pid=1735 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1389204051.357:823): pid=1735 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=LOGIN msg=audit(1389204051.357:824): login pid=1735 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=32 >type=USER_ROLE_CHANGE msg=audit(1389204051.401:825): pid=1735 uid=0 auid=0 ses=32 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204051.420:826): pid=1735 uid=0 auid=0 ses=32 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1389204051.424:827): pid=1735 uid=0 auid=0 ses=32 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204051.426:828): pid=1735 uid=0 auid=0 ses=32 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204051.427:829): pid=1738 uid=0 auid=0 ses=32 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=1738 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204051.427:830): pid=1738 uid=0 auid=0 ses=32 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=1738 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRED_REFR msg=audit(1389204051.430:831): pid=1738 uid=0 auid=0 ses=32 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204051.449:832): pid=1735 uid=0 auid=0 ses=32 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRED_DISP msg=audit(1389204051.451:833): pid=1735 uid=0 auid=0 ses=32 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204051.453:834): pid=1735 uid=0 auid=0 ses=32 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1389204051.455:835): pid=1735 uid=0 auid=0 ses=32 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204051.456:836): pid=1735 uid=0 auid=0 ses=32 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=1735 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204051.456:837): pid=1735 uid=0 auid=0 ses=32 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=1735 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204051.456:838): pid=1735 uid=0 auid=0 ses=32 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=1735 suid=0 rport=33115 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204054.460:839): pid=1747 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=1747 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204054.460:840): pid=1747 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=1747 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204054.462:841): pid=1746 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=1747 suid=74 rport=33123 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204054.462:842): pid=1746 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=1747 suid=74 rport=33123 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204054.985:843): pid=1746 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=33123 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204054.985:844): pid=1746 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=4096 fp=8b:56:b0:3f:c8:ad:38:a6:94:f4:a7:26:83:75:cc:85 rport=33123 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_ACCT msg=audit(1389204054.990:845): pid=1746 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204054.991:846): pid=1746 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=1747 suid=74 rport=33123 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204054.992:847): pid=1746 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1389204054.995:848): pid=1746 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=LOGIN msg=audit(1389204054.995:849): login pid=1746 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=33 >type=USER_ROLE_CHANGE msg=audit(1389204055.036:850): pid=1746 uid=0 auid=0 ses=33 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204055.051:851): pid=1746 uid=0 auid=0 ses=33 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1389204055.056:852): pid=1746 uid=0 auid=0 ses=33 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204055.057:853): pid=1746 uid=0 auid=0 ses=33 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204055.059:854): pid=1749 uid=0 auid=0 ses=33 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=1749 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204055.059:855): pid=1749 uid=0 auid=0 ses=33 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=1749 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRED_REFR msg=audit(1389204055.062:856): pid=1749 uid=0 auid=0 ses=33 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204055.082:857): pid=1746 uid=0 auid=0 ses=33 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRED_DISP msg=audit(1389204055.084:858): pid=1746 uid=0 auid=0 ses=33 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204055.086:859): pid=1746 uid=0 auid=0 ses=33 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1389204055.088:860): pid=1746 uid=0 auid=0 ses=33 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204055.088:861): pid=1746 uid=0 auid=0 ses=33 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=1746 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204055.088:862): pid=1746 uid=0 auid=0 ses=33 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=1746 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204055.088:863): pid=1746 uid=0 auid=0 ses=33 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=1746 suid=0 rport=33123 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204058.093:864): pid=1758 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=1758 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204058.094:865): pid=1758 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=1758 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204058.096:866): pid=1757 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=1758 suid=74 rport=33136 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204058.096:867): pid=1757 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=1758 suid=74 rport=33136 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204058.621:868): pid=1757 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=33136 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204058.621:869): pid=1757 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=4096 fp=8b:56:b0:3f:c8:ad:38:a6:94:f4:a7:26:83:75:cc:85 rport=33136 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_ACCT msg=audit(1389204058.626:870): pid=1757 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204058.628:871): pid=1757 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=1758 suid=74 rport=33136 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204058.628:872): pid=1757 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1389204058.630:873): pid=1757 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=LOGIN msg=audit(1389204058.630:874): login pid=1757 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=34 >type=USER_ROLE_CHANGE msg=audit(1389204058.669:875): pid=1757 uid=0 auid=0 ses=34 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204058.685:876): pid=1757 uid=0 auid=0 ses=34 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1389204058.689:877): pid=1757 uid=0 auid=0 ses=34 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204058.691:878): pid=1757 uid=0 auid=0 ses=34 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204058.692:879): pid=1760 uid=0 auid=0 ses=34 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=1760 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204058.692:880): pid=1760 uid=0 auid=0 ses=34 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=1760 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRED_REFR msg=audit(1389204058.695:881): pid=1760 uid=0 auid=0 ses=34 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204058.713:882): pid=1757 uid=0 auid=0 ses=34 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRED_DISP msg=audit(1389204058.715:883): pid=1757 uid=0 auid=0 ses=34 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204058.717:884): pid=1757 uid=0 auid=0 ses=34 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1389204058.719:885): pid=1757 uid=0 auid=0 ses=34 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204058.719:886): pid=1757 uid=0 auid=0 ses=34 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=1757 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204058.719:887): pid=1757 uid=0 auid=0 ses=34 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=1757 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204058.719:888): pid=1757 uid=0 auid=0 ses=34 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=1757 suid=0 rport=33136 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=NETFILTER_CFG msg=audit(1389204060.397:889): table=filter family=2 entries=0 >type=SYSCALL msg=audit(1389204060.397:889): arch=c000003e syscall=272 success=yes exit=0 a0=40000000 a1=c0 a2=0 a3=7fff14ee8150 items=0 ppid=1876 pid=1883 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=30 tty=(none) comm="ip" exe="/usr/sbin/ip" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null) >type=NETFILTER_CFG msg=audit(1389204060.412:890): table=filter family=2 entries=0 >type=SYSCALL msg=audit(1389204060.412:890): arch=c000003e syscall=272 success=yes exit=0 a0=40000000 a1=c0 a2=0 a3=7ffff20648d0 items=0 ppid=1876 pid=1889 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=30 tty=(none) comm="ip" exe="/usr/sbin/ip" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null) >type=NETFILTER_CFG msg=audit(1389204060.669:891): table=filter family=2 entries=0 >type=SYSCALL msg=audit(1389204060.669:891): arch=c000003e syscall=272 success=yes exit=0 a0=40000000 a1=c0 a2=0 a3=7fffb2375950 items=0 ppid=1876 pid=1891 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=30 tty=(none) comm="ip" exe="/usr/sbin/ip" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null) >type=USER_ACCT msg=audit(1389204061.674:892): pid=1906 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1389204061.674:893): pid=1906 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1389204061.675:894): login pid=1906 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=35 >type=USER_START msg=audit(1389204061.684:895): pid=1906 uid=0 auid=0 ses=35 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1389204061.686:896): pid=1906 uid=0 auid=0 ses=35 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRYPTO_KEY_USER msg=audit(1389204061.732:897): pid=1924 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=1924 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204061.733:898): pid=1924 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=1924 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204061.738:899): pid=1920 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=1924 suid=74 rport=33142 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204061.739:900): pid=1920 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=1924 suid=74 rport=33142 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRED_DISP msg=audit(1389204061.991:901): pid=1906 uid=0 auid=0 ses=35 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1389204061.992:902): pid=1906 uid=0 auid=0 ses=35 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_AUTH msg=audit(1389204062.268:903): pid=1920 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=33142 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204062.268:904): pid=1920 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=4096 fp=8b:56:b0:3f:c8:ad:38:a6:94:f4:a7:26:83:75:cc:85 rport=33142 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_ACCT msg=audit(1389204062.273:905): pid=1920 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204062.274:906): pid=1920 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=1924 suid=74 rport=33142 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204062.275:907): pid=1920 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1389204062.278:908): pid=1920 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=LOGIN msg=audit(1389204062.278:909): login pid=1920 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=36 >type=USER_ROLE_CHANGE msg=audit(1389204062.367:910): pid=1920 uid=0 auid=0 ses=36 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204062.389:911): pid=1920 uid=0 auid=0 ses=36 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1389204062.393:912): pid=1920 uid=0 auid=0 ses=36 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204062.395:913): pid=1920 uid=0 auid=0 ses=36 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204062.396:914): pid=1946 uid=0 auid=0 ses=36 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=1946 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204062.396:915): pid=1946 uid=0 auid=0 ses=36 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=1946 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRED_REFR msg=audit(1389204062.398:916): pid=1946 uid=0 auid=0 ses=36 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204062.422:917): pid=1920 uid=0 auid=0 ses=36 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRED_DISP msg=audit(1389204062.424:918): pid=1920 uid=0 auid=0 ses=36 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204062.426:919): pid=1920 uid=0 auid=0 ses=36 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1389204062.428:920): pid=1920 uid=0 auid=0 ses=36 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204062.428:921): pid=1920 uid=0 auid=0 ses=36 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=1920 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204062.428:922): pid=1920 uid=0 auid=0 ses=36 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=1920 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204062.428:923): pid=1920 uid=0 auid=0 ses=36 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=1920 suid=0 rport=33142 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204065.431:924): pid=1965 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=1965 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204065.431:925): pid=1965 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=1965 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204065.433:926): pid=1964 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=1965 suid=74 rport=33148 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204065.434:927): pid=1964 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=1965 suid=74 rport=33148 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204065.961:928): pid=1964 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=33148 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204065.962:929): pid=1964 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=4096 fp=8b:56:b0:3f:c8:ad:38:a6:94:f4:a7:26:83:75:cc:85 rport=33148 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_ACCT msg=audit(1389204065.967:930): pid=1964 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204065.968:931): pid=1964 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=1965 suid=74 rport=33148 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204065.969:932): pid=1964 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1389204065.971:933): pid=1964 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=LOGIN msg=audit(1389204065.971:934): login pid=1964 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=37 >type=USER_ROLE_CHANGE msg=audit(1389204066.023:935): pid=1964 uid=0 auid=0 ses=37 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204066.039:936): pid=1964 uid=0 auid=0 ses=37 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1389204066.044:937): pid=1964 uid=0 auid=0 ses=37 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204066.045:938): pid=1964 uid=0 auid=0 ses=37 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204066.046:939): pid=1967 uid=0 auid=0 ses=37 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=1967 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204066.046:940): pid=1967 uid=0 auid=0 ses=37 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=1967 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRED_REFR msg=audit(1389204066.049:941): pid=1967 uid=0 auid=0 ses=37 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204066.068:942): pid=1964 uid=0 auid=0 ses=37 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRED_DISP msg=audit(1389204066.070:943): pid=1964 uid=0 auid=0 ses=37 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204066.072:944): pid=1964 uid=0 auid=0 ses=37 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1389204066.074:945): pid=1964 uid=0 auid=0 ses=37 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204066.074:946): pid=1964 uid=0 auid=0 ses=37 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=1964 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204066.074:947): pid=1964 uid=0 auid=0 ses=37 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=1964 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204066.075:948): pid=1964 uid=0 auid=0 ses=37 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=1964 suid=0 rport=33148 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204069.079:949): pid=1976 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=1976 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204069.079:950): pid=1976 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=1976 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204069.081:951): pid=1975 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=1976 suid=74 rport=33155 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204069.081:952): pid=1975 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=1976 suid=74 rport=33155 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204069.672:953): pid=1975 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=33155 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204069.672:954): pid=1975 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=4096 fp=8b:56:b0:3f:c8:ad:38:a6:94:f4:a7:26:83:75:cc:85 rport=33155 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_ACCT msg=audit(1389204069.678:955): pid=1975 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204069.679:956): pid=1975 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=1976 suid=74 rport=33155 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204069.679:957): pid=1975 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1389204069.681:958): pid=1975 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=LOGIN msg=audit(1389204069.682:959): login pid=1975 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=38 >type=USER_ROLE_CHANGE msg=audit(1389204069.724:960): pid=1975 uid=0 auid=0 ses=38 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204069.742:961): pid=1975 uid=0 auid=0 ses=38 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1389204069.746:962): pid=1975 uid=0 auid=0 ses=38 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204069.749:963): pid=1975 uid=0 auid=0 ses=38 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204069.750:964): pid=1978 uid=0 auid=0 ses=38 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=1978 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204069.750:965): pid=1978 uid=0 auid=0 ses=38 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=1978 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRED_REFR msg=audit(1389204069.753:966): pid=1978 uid=0 auid=0 ses=38 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204069.774:967): pid=1975 uid=0 auid=0 ses=38 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRED_DISP msg=audit(1389204069.777:968): pid=1975 uid=0 auid=0 ses=38 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204069.780:969): pid=1975 uid=0 auid=0 ses=38 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1389204069.782:970): pid=1975 uid=0 auid=0 ses=38 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204069.782:971): pid=1975 uid=0 auid=0 ses=38 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=1975 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204069.783:972): pid=1975 uid=0 auid=0 ses=38 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=1975 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204069.783:973): pid=1975 uid=0 auid=0 ses=38 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=1975 suid=0 rport=33155 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204072.783:974): pid=1987 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=1987 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204072.783:975): pid=1987 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=1987 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204072.786:976): pid=1986 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=1987 suid=74 rport=33168 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204072.786:977): pid=1986 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=1987 suid=74 rport=33168 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204073.312:978): pid=1986 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=33168 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204073.312:979): pid=1986 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=4096 fp=8b:56:b0:3f:c8:ad:38:a6:94:f4:a7:26:83:75:cc:85 rport=33168 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_ACCT msg=audit(1389204073.317:980): pid=1986 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204073.318:981): pid=1986 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=1987 suid=74 rport=33168 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204073.319:982): pid=1986 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1389204073.321:983): pid=1986 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=LOGIN msg=audit(1389204073.321:984): login pid=1986 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=39 >type=USER_ROLE_CHANGE msg=audit(1389204073.382:985): pid=1986 uid=0 auid=0 ses=39 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204073.402:986): pid=1986 uid=0 auid=0 ses=39 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1389204073.405:987): pid=1986 uid=0 auid=0 ses=39 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204073.408:988): pid=1986 uid=0 auid=0 ses=39 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204073.408:989): pid=2016 uid=0 auid=0 ses=39 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=2016 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204073.408:990): pid=2016 uid=0 auid=0 ses=39 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=2016 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRED_REFR msg=audit(1389204073.410:991): pid=2016 uid=0 auid=0 ses=39 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204073.430:992): pid=1986 uid=0 auid=0 ses=39 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRED_DISP msg=audit(1389204073.432:993): pid=1986 uid=0 auid=0 ses=39 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204073.434:994): pid=1986 uid=0 auid=0 ses=39 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1389204073.436:995): pid=1986 uid=0 auid=0 ses=39 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204073.436:996): pid=1986 uid=0 auid=0 ses=39 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=1986 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204073.436:997): pid=1986 uid=0 auid=0 ses=39 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=1986 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204073.436:998): pid=1986 uid=0 auid=0 ses=39 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=1986 suid=0 rport=33168 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=NETFILTER_CFG msg=audit(1389204073.607:999): table=filter family=2 entries=0 >type=SYSCALL msg=audit(1389204073.607:999): arch=c000003e syscall=272 success=yes exit=0 a0=40000000 a1=c0 a2=0 a3=7fffda40a580 items=0 ppid=2107 pid=2114 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=30 tty=(none) comm="ip" exe="/usr/sbin/ip" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null) >type=NETFILTER_CFG msg=audit(1389204073.623:1000): table=filter family=2 entries=0 >type=SYSCALL msg=audit(1389204073.623:1000): arch=c000003e syscall=272 success=yes exit=0 a0=40000000 a1=c0 a2=0 a3=7fff0b249d50 items=0 ppid=2107 pid=2120 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=30 tty=(none) comm="ip" exe="/usr/sbin/ip" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null) >type=NETFILTER_CFG msg=audit(1389204073.881:1001): table=filter family=2 entries=0 >type=SYSCALL msg=audit(1389204073.881:1001): arch=c000003e syscall=272 success=yes exit=0 a0=40000000 a1=c0 a2=0 a3=7fff12ac9480 items=0 ppid=2107 pid=2122 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=30 tty=(none) comm="ip" exe="/usr/sbin/ip" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null) >type=CRYPTO_KEY_USER msg=audit(1389204076.449:1002): pid=2167 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=2167 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204076.449:1003): pid=2167 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=2167 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204076.453:1004): pid=2166 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=2167 suid=74 rport=33171 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204076.453:1005): pid=2166 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=2167 suid=74 rport=33171 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204077.060:1006): pid=2166 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=33171 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204077.060:1007): pid=2166 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=4096 fp=8b:56:b0:3f:c8:ad:38:a6:94:f4:a7:26:83:75:cc:85 rport=33171 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_ACCT msg=audit(1389204077.066:1008): pid=2166 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204077.068:1009): pid=2166 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=2167 suid=74 rport=33171 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204077.069:1010): pid=2166 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1389204077.071:1011): pid=2166 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=LOGIN msg=audit(1389204077.071:1012): login pid=2166 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=40 >type=USER_ROLE_CHANGE msg=audit(1389204077.165:1013): pid=2166 uid=0 auid=0 ses=40 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204077.190:1014): pid=2166 uid=0 auid=0 ses=40 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1389204077.195:1015): pid=2166 uid=0 auid=0 ses=40 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204077.197:1016): pid=2166 uid=0 auid=0 ses=40 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204077.199:1017): pid=2169 uid=0 auid=0 ses=40 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=2169 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204077.199:1018): pid=2169 uid=0 auid=0 ses=40 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=2169 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRED_REFR msg=audit(1389204077.201:1019): pid=2169 uid=0 auid=0 ses=40 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204077.228:1020): pid=2166 uid=0 auid=0 ses=40 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRED_DISP msg=audit(1389204077.230:1021): pid=2166 uid=0 auid=0 ses=40 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204077.232:1022): pid=2166 uid=0 auid=0 ses=40 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1389204077.234:1023): pid=2166 uid=0 auid=0 ses=40 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204077.234:1024): pid=2166 uid=0 auid=0 ses=40 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=2166 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204077.234:1025): pid=2166 uid=0 auid=0 ses=40 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=2166 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204077.235:1026): pid=2166 uid=0 auid=0 ses=40 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=2166 suid=0 rport=33171 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=NETFILTER_CFG msg=audit(1389204080.012:1027): table=filter family=2 entries=4 >type=SYSCALL msg=audit(1389204080.012:1027): arch=c000003e syscall=54 success=yes exit=0 a0=3 a1=0 a2=40 a3=14eb5a0 items=0 ppid=1711 pid=2188 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=30 tty=(none) comm="iptables" exe="/usr/sbin/xtables-multi" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null) >type=CRYPTO_KEY_USER msg=audit(1389204080.241:1028): pid=2234 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=2234 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204080.241:1029): pid=2234 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=2234 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204080.243:1030): pid=2233 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=2234 suid=74 rport=33173 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204080.243:1031): pid=2233 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=2234 suid=74 rport=33173 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204080.774:1032): pid=2233 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=33173 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204080.774:1033): pid=2233 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=4096 fp=8b:56:b0:3f:c8:ad:38:a6:94:f4:a7:26:83:75:cc:85 rport=33173 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_ACCT msg=audit(1389204080.778:1034): pid=2233 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204080.780:1035): pid=2233 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=2234 suid=74 rport=33173 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204080.780:1036): pid=2233 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1389204080.782:1037): pid=2233 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=LOGIN msg=audit(1389204080.782:1038): login pid=2233 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=41 >type=USER_ROLE_CHANGE msg=audit(1389204080.826:1039): pid=2233 uid=0 auid=0 ses=41 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204080.844:1040): pid=2233 uid=0 auid=0 ses=41 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1389204080.848:1041): pid=2233 uid=0 auid=0 ses=41 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204080.850:1042): pid=2233 uid=0 auid=0 ses=41 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204080.851:1043): pid=2291 uid=0 auid=0 ses=41 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=2291 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204080.851:1044): pid=2291 uid=0 auid=0 ses=41 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=2291 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRED_REFR msg=audit(1389204080.853:1045): pid=2291 uid=0 auid=0 ses=41 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204080.872:1046): pid=2233 uid=0 auid=0 ses=41 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRED_DISP msg=audit(1389204080.874:1047): pid=2233 uid=0 auid=0 ses=41 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204080.876:1048): pid=2233 uid=0 auid=0 ses=41 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1389204080.877:1049): pid=2233 uid=0 auid=0 ses=41 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204080.878:1050): pid=2233 uid=0 auid=0 ses=41 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=2233 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204080.878:1051): pid=2233 uid=0 auid=0 ses=41 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=2233 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204080.878:1052): pid=2233 uid=0 auid=0 ses=41 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=2233 suid=0 rport=33173 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204083.886:1053): pid=2521 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=2521 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204083.886:1054): pid=2521 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=2521 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204083.889:1055): pid=2520 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=2521 suid=74 rport=33174 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204083.889:1056): pid=2520 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=2521 suid=74 rport=33174 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=SERVICE_START msg=audit(1389204084.289:1057): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="mysqld" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=USER_AUTH msg=audit(1389204084.471:1058): pid=2520 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=33174 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204084.471:1059): pid=2520 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=4096 fp=8b:56:b0:3f:c8:ad:38:a6:94:f4:a7:26:83:75:cc:85 rport=33174 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_ACCT msg=audit(1389204084.475:1060): pid=2520 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204084.476:1061): pid=2520 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=2521 suid=74 rport=33174 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204084.477:1062): pid=2520 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1389204084.479:1063): pid=2520 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=LOGIN msg=audit(1389204084.479:1064): login pid=2520 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=42 >type=USER_ROLE_CHANGE msg=audit(1389204084.521:1065): pid=2520 uid=0 auid=0 ses=42 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204084.537:1066): pid=2520 uid=0 auid=0 ses=42 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1389204084.542:1067): pid=2520 uid=0 auid=0 ses=42 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204084.544:1068): pid=2520 uid=0 auid=0 ses=42 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204084.545:1069): pid=2560 uid=0 auid=0 ses=42 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=2560 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204084.545:1070): pid=2560 uid=0 auid=0 ses=42 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=2560 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRED_REFR msg=audit(1389204084.548:1071): pid=2560 uid=0 auid=0 ses=42 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204084.566:1072): pid=2520 uid=0 auid=0 ses=42 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRED_DISP msg=audit(1389204084.568:1073): pid=2520 uid=0 auid=0 ses=42 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204084.570:1074): pid=2520 uid=0 auid=0 ses=42 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1389204084.572:1075): pid=2520 uid=0 auid=0 ses=42 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204084.572:1076): pid=2520 uid=0 auid=0 ses=42 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=2520 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204084.572:1077): pid=2520 uid=0 auid=0 ses=42 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=2520 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204084.572:1078): pid=2520 uid=0 auid=0 ses=42 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=2520 suid=0 rport=33174 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=SERVICE_STOP msg=audit(1389204085.338:1079): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="mysqld" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1389204087.410:1080): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="mysqld" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204087.579:1081): pid=3017 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=3017 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204087.579:1082): pid=3017 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=3017 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204087.581:1083): pid=3016 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=3017 suid=74 rport=33175 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204087.581:1084): pid=3016 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=3017 suid=74 rport=33175 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204088.116:1085): pid=3016 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=33175 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204088.116:1086): pid=3016 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=4096 fp=8b:56:b0:3f:c8:ad:38:a6:94:f4:a7:26:83:75:cc:85 rport=33175 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_ACCT msg=audit(1389204088.127:1087): pid=3016 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204088.129:1088): pid=3016 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=3017 suid=74 rport=33175 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204088.129:1089): pid=3016 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1389204088.132:1090): pid=3016 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=LOGIN msg=audit(1389204088.132:1091): login pid=3016 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=43 >type=USER_ROLE_CHANGE msg=audit(1389204088.262:1092): pid=3016 uid=0 auid=0 ses=43 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204088.293:1093): pid=3016 uid=0 auid=0 ses=43 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1389204088.298:1094): pid=3016 uid=0 auid=0 ses=43 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204088.300:1095): pid=3016 uid=0 auid=0 ses=43 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204088.300:1096): pid=3147 uid=0 auid=0 ses=43 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=3147 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204088.300:1097): pid=3147 uid=0 auid=0 ses=43 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=3147 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRED_REFR msg=audit(1389204088.303:1098): pid=3147 uid=0 auid=0 ses=43 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204088.327:1099): pid=3016 uid=0 auid=0 ses=43 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRED_DISP msg=audit(1389204088.331:1100): pid=3016 uid=0 auid=0 ses=43 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204088.333:1101): pid=3016 uid=0 auid=0 ses=43 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1389204088.335:1102): pid=3016 uid=0 auid=0 ses=43 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204088.335:1103): pid=3016 uid=0 auid=0 ses=43 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=3016 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204088.335:1104): pid=3016 uid=0 auid=0 ses=43 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=3016 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204088.335:1105): pid=3016 uid=0 auid=0 ses=43 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=3016 suid=0 rport=33175 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204091.338:1106): pid=3557 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=3557 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204091.338:1107): pid=3557 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=3557 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204091.340:1108): pid=3556 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=3557 suid=74 rport=33178 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204091.340:1109): pid=3556 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=3557 suid=74 rport=33178 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204091.863:1110): pid=3556 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=33178 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204091.863:1111): pid=3556 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=4096 fp=8b:56:b0:3f:c8:ad:38:a6:94:f4:a7:26:83:75:cc:85 rport=33178 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_ACCT msg=audit(1389204091.869:1112): pid=3556 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204091.871:1113): pid=3556 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=3557 suid=74 rport=33178 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204091.872:1114): pid=3556 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1389204091.875:1115): pid=3556 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=LOGIN msg=audit(1389204091.875:1116): login pid=3556 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=44 >type=USER_ROLE_CHANGE msg=audit(1389204091.920:1117): pid=3556 uid=0 auid=0 ses=44 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204091.937:1118): pid=3556 uid=0 auid=0 ses=44 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1389204091.942:1119): pid=3556 uid=0 auid=0 ses=44 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204091.944:1120): pid=3556 uid=0 auid=0 ses=44 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204091.945:1121): pid=3559 uid=0 auid=0 ses=44 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=3559 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204091.945:1122): pid=3559 uid=0 auid=0 ses=44 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=3559 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRED_REFR msg=audit(1389204091.948:1123): pid=3559 uid=0 auid=0 ses=44 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204091.970:1124): pid=3556 uid=0 auid=0 ses=44 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRED_DISP msg=audit(1389204091.972:1125): pid=3556 uid=0 auid=0 ses=44 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204091.974:1126): pid=3556 uid=0 auid=0 ses=44 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1389204091.976:1127): pid=3556 uid=0 auid=0 ses=44 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204091.976:1128): pid=3556 uid=0 auid=0 ses=44 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=3556 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204091.977:1129): pid=3556 uid=0 auid=0 ses=44 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=3556 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204091.977:1130): pid=3556 uid=0 auid=0 ses=44 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=3556 suid=0 rport=33178 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204094.979:1131): pid=3568 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=3568 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204094.979:1132): pid=3568 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=3568 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204094.981:1133): pid=3567 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=3568 suid=74 rport=33189 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204094.981:1134): pid=3567 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=3568 suid=74 rport=33189 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204095.519:1135): pid=3567 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=33189 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204095.519:1136): pid=3567 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=4096 fp=8b:56:b0:3f:c8:ad:38:a6:94:f4:a7:26:83:75:cc:85 rport=33189 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_ACCT msg=audit(1389204095.524:1137): pid=3567 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204095.525:1138): pid=3567 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=3568 suid=74 rport=33189 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204095.526:1139): pid=3567 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1389204095.528:1140): pid=3567 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=LOGIN msg=audit(1389204095.528:1141): login pid=3567 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=45 >type=USER_ROLE_CHANGE msg=audit(1389204095.571:1142): pid=3567 uid=0 auid=0 ses=45 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204095.589:1143): pid=3567 uid=0 auid=0 ses=45 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1389204095.594:1144): pid=3567 uid=0 auid=0 ses=45 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204095.596:1145): pid=3567 uid=0 auid=0 ses=45 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204095.597:1146): pid=3570 uid=0 auid=0 ses=45 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=3570 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204095.597:1147): pid=3570 uid=0 auid=0 ses=45 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=3570 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRED_REFR msg=audit(1389204095.599:1148): pid=3570 uid=0 auid=0 ses=45 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204095.617:1149): pid=3567 uid=0 auid=0 ses=45 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRED_DISP msg=audit(1389204095.619:1150): pid=3567 uid=0 auid=0 ses=45 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204095.621:1151): pid=3567 uid=0 auid=0 ses=45 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1389204095.624:1152): pid=3567 uid=0 auid=0 ses=45 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204095.624:1153): pid=3567 uid=0 auid=0 ses=45 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=3567 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204095.624:1154): pid=3567 uid=0 auid=0 ses=45 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=3567 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204095.624:1155): pid=3567 uid=0 auid=0 ses=45 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=3567 suid=0 rport=33189 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204095.640:1156): pid=3579 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=3579 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204095.640:1157): pid=3579 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=3579 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204095.642:1158): pid=3578 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=3579 suid=74 rport=33192 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204095.642:1159): pid=3578 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=3579 suid=74 rport=33192 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204096.160:1160): pid=3578 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=33192 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204096.160:1161): pid=3578 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=4096 fp=8b:56:b0:3f:c8:ad:38:a6:94:f4:a7:26:83:75:cc:85 rport=33192 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_ACCT msg=audit(1389204096.164:1162): pid=3578 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204096.165:1163): pid=3578 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=3579 suid=74 rport=33192 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204096.166:1164): pid=3578 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1389204096.168:1165): pid=3578 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=LOGIN msg=audit(1389204096.168:1166): login pid=3578 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=46 >type=USER_ROLE_CHANGE msg=audit(1389204096.206:1167): pid=3578 uid=0 auid=0 ses=46 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204096.222:1168): pid=3578 uid=0 auid=0 ses=46 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1389204096.226:1169): pid=3578 uid=0 auid=0 ses=46 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204096.228:1170): pid=3578 uid=0 auid=0 ses=46 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204096.230:1171): pid=3581 uid=0 auid=0 ses=46 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=3581 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204096.230:1172): pid=3581 uid=0 auid=0 ses=46 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=3581 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRED_REFR msg=audit(1389204096.233:1173): pid=3581 uid=0 auid=0 ses=46 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204096.253:1174): pid=3578 uid=0 auid=0 ses=46 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRED_DISP msg=audit(1389204096.255:1175): pid=3578 uid=0 auid=0 ses=46 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204096.258:1176): pid=3578 uid=0 auid=0 ses=46 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1389204096.260:1177): pid=3578 uid=0 auid=0 ses=46 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204096.260:1178): pid=3578 uid=0 auid=0 ses=46 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=3578 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204096.260:1179): pid=3578 uid=0 auid=0 ses=46 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=3578 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204096.260:1180): pid=3578 uid=0 auid=0 ses=46 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=3578 suid=0 rport=33192 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204099.263:1181): pid=3590 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=3590 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204099.263:1182): pid=3590 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=3590 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204099.265:1183): pid=3589 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=3590 suid=74 rport=33202 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204099.265:1184): pid=3589 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=3590 suid=74 rport=33202 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204099.786:1185): pid=3589 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=33202 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204099.786:1186): pid=3589 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=4096 fp=8b:56:b0:3f:c8:ad:38:a6:94:f4:a7:26:83:75:cc:85 rport=33202 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_ACCT msg=audit(1389204099.792:1187): pid=3589 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204099.793:1188): pid=3589 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=3590 suid=74 rport=33202 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204099.794:1189): pid=3589 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1389204099.796:1190): pid=3589 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=LOGIN msg=audit(1389204099.796:1191): login pid=3589 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=47 >type=USER_ROLE_CHANGE msg=audit(1389204099.840:1192): pid=3589 uid=0 auid=0 ses=47 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204099.859:1193): pid=3589 uid=0 auid=0 ses=47 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1389204099.865:1194): pid=3589 uid=0 auid=0 ses=47 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204099.867:1195): pid=3589 uid=0 auid=0 ses=47 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204099.869:1196): pid=3592 uid=0 auid=0 ses=47 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=3592 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204099.869:1197): pid=3592 uid=0 auid=0 ses=47 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=3592 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRED_REFR msg=audit(1389204099.872:1198): pid=3592 uid=0 auid=0 ses=47 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204099.897:1199): pid=3589 uid=0 auid=0 ses=47 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRED_DISP msg=audit(1389204099.899:1200): pid=3589 uid=0 auid=0 ses=47 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204099.902:1201): pid=3589 uid=0 auid=0 ses=47 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1389204099.904:1202): pid=3589 uid=0 auid=0 ses=47 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204099.904:1203): pid=3589 uid=0 auid=0 ses=47 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=3589 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204099.904:1204): pid=3589 uid=0 auid=0 ses=47 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=3589 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204099.904:1205): pid=3589 uid=0 auid=0 ses=47 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=3589 suid=0 rport=33202 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=NETFILTER_CFG msg=audit(1389204100.452:1206): table=filter family=2 entries=0 >type=SYSCALL msg=audit(1389204100.452:1206): arch=c000003e syscall=272 success=yes exit=0 a0=40000000 a1=c0 a2=0 a3=7fff5174a450 items=0 ppid=3708 pid=3715 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=31 tty=(none) comm="ip" exe="/usr/sbin/ip" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null) >type=NETFILTER_CFG msg=audit(1389204100.468:1207): table=filter family=2 entries=0 >type=SYSCALL msg=audit(1389204100.468:1207): arch=c000003e syscall=272 success=yes exit=0 a0=40000000 a1=c0 a2=0 a3=7fff275f1290 items=0 ppid=3708 pid=3721 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=31 tty=(none) comm="ip" exe="/usr/sbin/ip" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null) >type=NETFILTER_CFG msg=audit(1389204100.725:1208): table=filter family=2 entries=0 >type=SYSCALL msg=audit(1389204100.725:1208): arch=c000003e syscall=272 success=yes exit=0 a0=40000000 a1=c0 a2=0 a3=7fff86508190 items=0 ppid=3708 pid=3723 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=31 tty=(none) comm="ip" exe="/usr/sbin/ip" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null) >type=CRYPTO_KEY_USER msg=audit(1389204102.903:1209): pid=3772 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=3772 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204102.903:1210): pid=3772 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=3772 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204102.905:1211): pid=3771 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=3772 suid=74 rport=33206 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204102.905:1212): pid=3771 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=3772 suid=74 rport=33206 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204103.432:1213): pid=3771 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=33206 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204103.432:1214): pid=3771 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=4096 fp=8b:56:b0:3f:c8:ad:38:a6:94:f4:a7:26:83:75:cc:85 rport=33206 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_ACCT msg=audit(1389204103.436:1215): pid=3771 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204103.437:1216): pid=3771 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=3772 suid=74 rport=33206 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204103.438:1217): pid=3771 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1389204103.440:1218): pid=3771 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=LOGIN msg=audit(1389204103.441:1219): login pid=3771 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=48 >type=USER_ROLE_CHANGE msg=audit(1389204103.486:1220): pid=3771 uid=0 auid=0 ses=48 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204103.502:1221): pid=3771 uid=0 auid=0 ses=48 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1389204103.506:1222): pid=3771 uid=0 auid=0 ses=48 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204103.508:1223): pid=3771 uid=0 auid=0 ses=48 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204103.509:1224): pid=3774 uid=0 auid=0 ses=48 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=3774 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204103.509:1225): pid=3774 uid=0 auid=0 ses=48 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=3774 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRED_REFR msg=audit(1389204103.512:1226): pid=3774 uid=0 auid=0 ses=48 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204103.533:1227): pid=3771 uid=0 auid=0 ses=48 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRED_DISP msg=audit(1389204103.536:1228): pid=3771 uid=0 auid=0 ses=48 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204103.539:1229): pid=3771 uid=0 auid=0 ses=48 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1389204103.540:1230): pid=3771 uid=0 auid=0 ses=48 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204103.540:1231): pid=3771 uid=0 auid=0 ses=48 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=3771 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204103.540:1232): pid=3771 uid=0 auid=0 ses=48 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=3771 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204103.541:1233): pid=3771 uid=0 auid=0 ses=48 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=3771 suid=0 rport=33206 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204106.544:1234): pid=3783 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=3783 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204106.544:1235): pid=3783 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=3783 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204106.546:1236): pid=3782 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=3783 suid=74 rport=33219 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204106.546:1237): pid=3782 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=3783 suid=74 rport=33219 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204107.088:1238): pid=3782 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=33219 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204107.088:1239): pid=3782 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=4096 fp=8b:56:b0:3f:c8:ad:38:a6:94:f4:a7:26:83:75:cc:85 rport=33219 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_ACCT msg=audit(1389204107.094:1240): pid=3782 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204107.094:1241): pid=3782 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=3783 suid=74 rport=33219 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204107.095:1242): pid=3782 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1389204107.097:1243): pid=3782 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=LOGIN msg=audit(1389204107.097:1244): login pid=3782 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=49 >type=USER_ROLE_CHANGE msg=audit(1389204107.139:1245): pid=3782 uid=0 auid=0 ses=49 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204107.157:1246): pid=3782 uid=0 auid=0 ses=49 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1389204107.162:1247): pid=3782 uid=0 auid=0 ses=49 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204107.164:1248): pid=3782 uid=0 auid=0 ses=49 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204107.166:1249): pid=3785 uid=0 auid=0 ses=49 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=3785 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204107.166:1250): pid=3785 uid=0 auid=0 ses=49 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=3785 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRED_REFR msg=audit(1389204107.168:1251): pid=3785 uid=0 auid=0 ses=49 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204107.188:1252): pid=3782 uid=0 auid=0 ses=49 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRED_DISP msg=audit(1389204107.190:1253): pid=3782 uid=0 auid=0 ses=49 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204107.192:1254): pid=3782 uid=0 auid=0 ses=49 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1389204107.194:1255): pid=3782 uid=0 auid=0 ses=49 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204107.195:1256): pid=3782 uid=0 auid=0 ses=49 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=3782 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204107.195:1257): pid=3782 uid=0 auid=0 ses=49 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=3782 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204107.195:1258): pid=3782 uid=0 auid=0 ses=49 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=3782 suid=0 rport=33219 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204110.199:1259): pid=3794 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=3794 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204110.199:1260): pid=3794 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=3794 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204110.201:1261): pid=3793 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=3794 suid=74 rport=33223 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204110.201:1262): pid=3793 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=3794 suid=74 rport=33223 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204110.737:1263): pid=3793 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=33223 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204110.737:1264): pid=3793 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=4096 fp=8b:56:b0:3f:c8:ad:38:a6:94:f4:a7:26:83:75:cc:85 rport=33223 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_ACCT msg=audit(1389204110.743:1265): pid=3793 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204110.744:1266): pid=3793 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=3794 suid=74 rport=33223 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204110.745:1267): pid=3793 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1389204110.748:1268): pid=3793 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=LOGIN msg=audit(1389204110.748:1269): login pid=3793 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=50 >type=USER_ROLE_CHANGE msg=audit(1389204110.786:1270): pid=3793 uid=0 auid=0 ses=50 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204110.801:1271): pid=3793 uid=0 auid=0 ses=50 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1389204110.805:1272): pid=3793 uid=0 auid=0 ses=50 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204110.807:1273): pid=3793 uid=0 auid=0 ses=50 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204110.809:1274): pid=3796 uid=0 auid=0 ses=50 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=3796 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204110.809:1275): pid=3796 uid=0 auid=0 ses=50 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=3796 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRED_REFR msg=audit(1389204110.811:1276): pid=3796 uid=0 auid=0 ses=50 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204110.829:1277): pid=3793 uid=0 auid=0 ses=50 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRED_DISP msg=audit(1389204110.831:1278): pid=3793 uid=0 auid=0 ses=50 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204110.833:1279): pid=3793 uid=0 auid=0 ses=50 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1389204110.835:1280): pid=3793 uid=0 auid=0 ses=50 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204110.835:1281): pid=3793 uid=0 auid=0 ses=50 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=3793 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204110.835:1282): pid=3793 uid=0 auid=0 ses=50 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=3793 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204110.835:1283): pid=3793 uid=0 auid=0 ses=50 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=3793 suid=0 rport=33223 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204113.840:1284): pid=3825 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=3825 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204113.840:1285): pid=3825 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=3825 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204113.842:1286): pid=3824 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=3825 suid=74 rport=33233 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204113.842:1287): pid=3824 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=3825 suid=74 rport=33233 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204114.366:1288): pid=3824 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=33233 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204114.366:1289): pid=3824 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=4096 fp=8b:56:b0:3f:c8:ad:38:a6:94:f4:a7:26:83:75:cc:85 rport=33233 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_ACCT msg=audit(1389204114.372:1290): pid=3824 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204114.372:1291): pid=3824 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=3825 suid=74 rport=33233 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204114.373:1292): pid=3824 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1389204114.376:1293): pid=3824 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=LOGIN msg=audit(1389204114.376:1294): login pid=3824 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=51 >type=USER_ROLE_CHANGE msg=audit(1389204114.414:1295): pid=3824 uid=0 auid=0 ses=51 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204114.429:1296): pid=3824 uid=0 auid=0 ses=51 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1389204114.434:1297): pid=3824 uid=0 auid=0 ses=51 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204114.436:1298): pid=3824 uid=0 auid=0 ses=51 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204114.437:1299): pid=3827 uid=0 auid=0 ses=51 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=3827 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204114.437:1300): pid=3827 uid=0 auid=0 ses=51 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=3827 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRED_REFR msg=audit(1389204114.439:1301): pid=3827 uid=0 auid=0 ses=51 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204114.459:1302): pid=3824 uid=0 auid=0 ses=51 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRED_DISP msg=audit(1389204114.462:1303): pid=3824 uid=0 auid=0 ses=51 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204114.464:1304): pid=3824 uid=0 auid=0 ses=51 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1389204114.466:1305): pid=3824 uid=0 auid=0 ses=51 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204114.466:1306): pid=3824 uid=0 auid=0 ses=51 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=3824 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204114.466:1307): pid=3824 uid=0 auid=0 ses=51 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=3824 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204114.466:1308): pid=3824 uid=0 auid=0 ses=51 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=3824 suid=0 rport=33233 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=NETFILTER_CFG msg=audit(1389204114.920:1309): table=filter family=2 entries=0 >type=SYSCALL msg=audit(1389204114.920:1309): arch=c000003e syscall=272 success=yes exit=0 a0=40000000 a1=c0 a2=0 a3=7fffa8a52dd0 items=0 ppid=3925 pid=3932 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=31 tty=(none) comm="ip" exe="/usr/sbin/ip" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null) >type=NETFILTER_CFG msg=audit(1389204114.936:1310): table=filter family=2 entries=0 >type=SYSCALL msg=audit(1389204114.936:1310): arch=c000003e syscall=272 success=yes exit=0 a0=40000000 a1=c0 a2=0 a3=7fffc51e81d0 items=0 ppid=3925 pid=3938 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=31 tty=(none) comm="ip" exe="/usr/sbin/ip" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null) >type=NETFILTER_CFG msg=audit(1389204115.192:1311): table=filter family=2 entries=0 >type=SYSCALL msg=audit(1389204115.192:1311): arch=c000003e syscall=272 success=yes exit=0 a0=40000000 a1=c0 a2=0 a3=7fffedd81480 items=0 ppid=3925 pid=3940 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=31 tty=(none) comm="ip" exe="/usr/sbin/ip" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null) >type=NETFILTER_CFG msg=audit(1389204116.329:1312): table=filter family=2 entries=5 >type=SYSCALL msg=audit(1389204116.329:1312): arch=c000003e syscall=54 success=yes exit=0 a0=3 a1=0 a2=40 a3=c4fc40 items=0 ppid=3541 pid=3979 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=31 tty=(none) comm="iptables" exe="/usr/sbin/xtables-multi" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null) >type=CRYPTO_KEY_USER msg=audit(1389204117.478:1313): pid=3997 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=3997 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204117.479:1314): pid=3997 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=3997 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204117.482:1315): pid=3996 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=3997 suid=74 rport=33234 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204117.482:1316): pid=3996 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=3997 suid=74 rport=33234 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204118.022:1317): pid=3996 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=33234 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204118.022:1318): pid=3996 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=4096 fp=8b:56:b0:3f:c8:ad:38:a6:94:f4:a7:26:83:75:cc:85 rport=33234 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_ACCT msg=audit(1389204118.028:1319): pid=3996 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204118.029:1320): pid=3996 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=3997 suid=74 rport=33234 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204118.029:1321): pid=3996 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1389204118.031:1322): pid=3996 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=LOGIN msg=audit(1389204118.031:1323): login pid=3996 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=52 >type=USER_ROLE_CHANGE msg=audit(1389204118.109:1324): pid=3996 uid=0 auid=0 ses=52 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204118.129:1325): pid=3996 uid=0 auid=0 ses=52 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1389204118.137:1326): pid=3996 uid=0 auid=0 ses=52 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204118.139:1327): pid=3996 uid=0 auid=0 ses=52 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204118.140:1328): pid=3999 uid=0 auid=0 ses=52 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=3999 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204118.140:1329): pid=3999 uid=0 auid=0 ses=52 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=3999 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRED_REFR msg=audit(1389204118.143:1330): pid=3999 uid=0 auid=0 ses=52 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204118.166:1331): pid=3996 uid=0 auid=0 ses=52 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRED_DISP msg=audit(1389204118.168:1332): pid=3996 uid=0 auid=0 ses=52 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204118.170:1333): pid=3996 uid=0 auid=0 ses=52 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1389204118.172:1334): pid=3996 uid=0 auid=0 ses=52 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204118.172:1335): pid=3996 uid=0 auid=0 ses=52 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=3996 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204118.172:1336): pid=3996 uid=0 auid=0 ses=52 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=3996 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204118.172:1337): pid=3996 uid=0 auid=0 ses=52 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=3996 suid=0 rport=33234 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204121.184:1338): pid=4020 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=4020 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204121.184:1339): pid=4020 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=4020 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204121.186:1340): pid=4019 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=4020 suid=74 rport=33243 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204121.186:1341): pid=4019 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=4020 suid=74 rport=33243 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204121.990:1342): pid=4019 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=33243 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204121.990:1343): pid=4019 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=4096 fp=8b:56:b0:3f:c8:ad:38:a6:94:f4:a7:26:83:75:cc:85 rport=33243 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_ACCT msg=audit(1389204121.998:1344): pid=4019 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204122.000:1345): pid=4019 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=4020 suid=74 rport=33243 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204122.001:1346): pid=4019 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1389204122.004:1347): pid=4019 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=LOGIN msg=audit(1389204122.004:1348): login pid=4019 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=53 >type=USER_ROLE_CHANGE msg=audit(1389204122.054:1349): pid=4019 uid=0 auid=0 ses=53 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204122.074:1350): pid=4019 uid=0 auid=0 ses=53 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1389204122.081:1351): pid=4019 uid=0 auid=0 ses=53 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204122.082:1352): pid=4019 uid=0 auid=0 ses=53 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204122.084:1353): pid=4026 uid=0 auid=0 ses=53 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=4026 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204122.084:1354): pid=4026 uid=0 auid=0 ses=53 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=4026 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRED_REFR msg=audit(1389204122.087:1355): pid=4026 uid=0 auid=0 ses=53 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204122.111:1356): pid=4019 uid=0 auid=0 ses=53 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRED_DISP msg=audit(1389204122.113:1357): pid=4019 uid=0 auid=0 ses=53 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204122.116:1358): pid=4019 uid=0 auid=0 ses=53 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1389204122.118:1359): pid=4019 uid=0 auid=0 ses=53 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204122.118:1360): pid=4019 uid=0 auid=0 ses=53 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=4019 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204122.118:1361): pid=4019 uid=0 auid=0 ses=53 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=4019 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204122.119:1362): pid=4019 uid=0 auid=0 ses=53 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=4019 suid=0 rport=33243 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204125.121:1363): pid=4035 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=4035 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204125.121:1364): pid=4035 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=4035 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204125.124:1365): pid=4034 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=4035 suid=74 rport=33246 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204125.124:1366): pid=4034 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=4035 suid=74 rport=33246 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204125.653:1367): pid=4034 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=33246 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204125.653:1368): pid=4034 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=4096 fp=8b:56:b0:3f:c8:ad:38:a6:94:f4:a7:26:83:75:cc:85 rport=33246 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_ACCT msg=audit(1389204125.658:1369): pid=4034 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204125.660:1370): pid=4034 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=4035 suid=74 rport=33246 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204125.662:1371): pid=4034 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1389204125.665:1372): pid=4034 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=LOGIN msg=audit(1389204125.665:1373): login pid=4034 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=54 >type=USER_ROLE_CHANGE msg=audit(1389204125.760:1374): pid=4034 uid=0 auid=0 ses=54 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204125.784:1375): pid=4034 uid=0 auid=0 ses=54 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1389204125.789:1376): pid=4034 uid=0 auid=0 ses=54 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204125.792:1377): pid=4034 uid=0 auid=0 ses=54 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204125.793:1378): pid=4037 uid=0 auid=0 ses=54 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=4037 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204125.793:1379): pid=4037 uid=0 auid=0 ses=54 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=4037 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRED_REFR msg=audit(1389204125.796:1380): pid=4037 uid=0 auid=0 ses=54 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204125.827:1381): pid=4034 uid=0 auid=0 ses=54 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRED_DISP msg=audit(1389204125.829:1382): pid=4034 uid=0 auid=0 ses=54 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204125.835:1383): pid=4034 uid=0 auid=0 ses=54 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1389204125.837:1384): pid=4034 uid=0 auid=0 ses=54 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204125.837:1385): pid=4034 uid=0 auid=0 ses=54 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=4034 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204125.837:1386): pid=4034 uid=0 auid=0 ses=54 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=4034 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204125.837:1387): pid=4034 uid=0 auid=0 ses=54 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=4034 suid=0 rport=33246 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204128.844:1388): pid=4060 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=4060 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204128.845:1389): pid=4060 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=4060 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204128.847:1390): pid=4059 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=4060 suid=74 rport=33247 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204128.848:1391): pid=4059 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=4060 suid=74 rport=33247 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204129.363:1392): pid=4059 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=33247 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204129.363:1393): pid=4059 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=4096 fp=8b:56:b0:3f:c8:ad:38:a6:94:f4:a7:26:83:75:cc:85 rport=33247 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_ACCT msg=audit(1389204129.368:1394): pid=4059 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204129.370:1395): pid=4059 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=4060 suid=74 rport=33247 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204129.371:1396): pid=4059 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1389204129.373:1397): pid=4059 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=LOGIN msg=audit(1389204129.373:1398): login pid=4059 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=55 >type=USER_ROLE_CHANGE msg=audit(1389204129.414:1399): pid=4059 uid=0 auid=0 ses=55 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204129.429:1400): pid=4059 uid=0 auid=0 ses=55 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1389204129.433:1401): pid=4059 uid=0 auid=0 ses=55 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204129.435:1402): pid=4059 uid=0 auid=0 ses=55 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204129.436:1403): pid=4066 uid=0 auid=0 ses=55 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=4066 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204129.436:1404): pid=4066 uid=0 auid=0 ses=55 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=4066 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRED_REFR msg=audit(1389204129.438:1405): pid=4066 uid=0 auid=0 ses=55 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204129.458:1406): pid=4059 uid=0 auid=0 ses=55 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRED_DISP msg=audit(1389204129.460:1407): pid=4059 uid=0 auid=0 ses=55 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204129.462:1408): pid=4059 uid=0 auid=0 ses=55 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1389204129.464:1409): pid=4059 uid=0 auid=0 ses=55 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204129.464:1410): pid=4059 uid=0 auid=0 ses=55 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=4059 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204129.464:1411): pid=4059 uid=0 auid=0 ses=55 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=4059 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204129.464:1412): pid=4059 uid=0 auid=0 ses=55 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=4059 suid=0 rport=33247 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=ADD_GROUP msg=audit(1389204129.735:1413): pid=4064 uid=0 auid=0 ses=31 subj=unconfined_u:system_r:groupadd_t:s0-s0:c0.c1023 msg='op=adding group to /etc/group id=76 exe="/usr/sbin/groupadd" hostname=? addr=? terminal=? res=success' >type=ADD_GROUP msg=audit(1389204129.741:1414): pid=4064 uid=0 auid=0 ses=31 subj=unconfined_u:system_r:groupadd_t:s0-s0:c0.c1023 msg='op=adding group to /etc/gshadow id=76 exe="/usr/sbin/groupadd" hostname=? addr=? terminal=? res=success' >type=ADD_GROUP msg=audit(1389204129.742:1415): pid=4064 uid=0 auid=0 ses=31 subj=unconfined_u:system_r:groupadd_t:s0-s0:c0.c1023 msg='op= id=76 exe="/usr/sbin/groupadd" hostname=? addr=? terminal=? res=success' >type=ADD_USER msg=audit(1389204129.780:1416): pid=4075 uid=0 auid=0 ses=31 subj=unconfined_u:system_r:useradd_t:s0-s0:c0.c1023 msg='op=adding user id=999 exe="/usr/sbin/useradd" hostname=? addr=? terminal=? res=success' >type=ADD_GROUP msg=audit(1389204132.036:1417): pid=4116 uid=0 auid=0 ses=31 subj=unconfined_u:system_r:groupadd_t:s0-s0:c0.c1023 msg='op=adding group to /etc/group id=997 exe="/usr/sbin/groupadd" hostname=? addr=? terminal=? res=success' >type=ADD_GROUP msg=audit(1389204132.042:1418): pid=4116 uid=0 auid=0 ses=31 subj=unconfined_u:system_r:groupadd_t:s0-s0:c0.c1023 msg='op=adding group to /etc/gshadow id=997 exe="/usr/sbin/groupadd" hostname=? addr=? terminal=? res=success' >type=ADD_GROUP msg=audit(1389204132.043:1419): pid=4116 uid=0 auid=0 ses=31 subj=unconfined_u:system_r:groupadd_t:s0-s0:c0.c1023 msg='op= id=997 exe="/usr/sbin/groupadd" hostname=? addr=? terminal=? res=success' >type=ADD_USER msg=audit(1389204132.058:1420): pid=4121 uid=0 auid=0 ses=31 subj=unconfined_u:system_r:useradd_t:s0-s0:c0.c1023 msg='op=adding user id=998 exe="/usr/sbin/useradd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204132.472:1421): pid=4133 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=4133 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204132.472:1422): pid=4133 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=4133 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204132.474:1423): pid=4132 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=4133 suid=74 rport=33248 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204132.474:1424): pid=4132 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=4133 suid=74 rport=33248 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204132.997:1425): pid=4132 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=33248 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204132.997:1426): pid=4132 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=4096 fp=8b:56:b0:3f:c8:ad:38:a6:94:f4:a7:26:83:75:cc:85 rport=33248 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_ACCT msg=audit(1389204133.002:1427): pid=4132 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204133.003:1428): pid=4132 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=4133 suid=74 rport=33248 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204133.004:1429): pid=4132 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1389204133.006:1430): pid=4132 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=LOGIN msg=audit(1389204133.007:1431): login pid=4132 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=56 >type=USER_ROLE_CHANGE msg=audit(1389204133.050:1432): pid=4132 uid=0 auid=0 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204133.087:1433): pid=4132 uid=0 auid=0 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1389204133.092:1434): pid=4132 uid=0 auid=0 ses=56 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204133.094:1435): pid=4132 uid=0 auid=0 ses=56 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204133.095:1436): pid=4135 uid=0 auid=0 ses=56 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=4135 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204133.095:1437): pid=4135 uid=0 auid=0 ses=56 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=4135 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRED_REFR msg=audit(1389204133.098:1438): pid=4135 uid=0 auid=0 ses=56 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204133.124:1439): pid=4132 uid=0 auid=0 ses=56 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRED_DISP msg=audit(1389204133.127:1440): pid=4132 uid=0 auid=0 ses=56 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204133.130:1441): pid=4132 uid=0 auid=0 ses=56 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1389204133.132:1442): pid=4132 uid=0 auid=0 ses=56 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204133.132:1443): pid=4132 uid=0 auid=0 ses=56 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=4132 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204133.132:1444): pid=4132 uid=0 auid=0 ses=56 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=4132 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204133.132:1445): pid=4132 uid=0 auid=0 ses=56 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=4132 suid=0 rport=33248 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=SERVICE_START msg=audit(1389204133.570:1446): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="qpidd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204136.136:1447): pid=4200 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=4200 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204136.136:1448): pid=4200 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=4200 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204136.138:1449): pid=4199 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=4200 suid=74 rport=33249 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204136.138:1450): pid=4199 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=4200 suid=74 rport=33249 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204136.796:1451): pid=4199 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=33249 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204136.796:1452): pid=4199 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=4096 fp=8b:56:b0:3f:c8:ad:38:a6:94:f4:a7:26:83:75:cc:85 rport=33249 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_ACCT msg=audit(1389204136.801:1453): pid=4199 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204136.802:1454): pid=4199 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=4200 suid=74 rport=33249 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204136.803:1455): pid=4199 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1389204136.805:1456): pid=4199 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=LOGIN msg=audit(1389204136.805:1457): login pid=4199 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=57 >type=USER_ROLE_CHANGE msg=audit(1389204136.845:1458): pid=4199 uid=0 auid=0 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204136.860:1459): pid=4199 uid=0 auid=0 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1389204136.864:1460): pid=4199 uid=0 auid=0 ses=57 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204136.866:1461): pid=4199 uid=0 auid=0 ses=57 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204136.867:1462): pid=4202 uid=0 auid=0 ses=57 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=4202 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204136.867:1463): pid=4202 uid=0 auid=0 ses=57 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=4202 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRED_REFR msg=audit(1389204136.870:1464): pid=4202 uid=0 auid=0 ses=57 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204136.889:1465): pid=4199 uid=0 auid=0 ses=57 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRED_DISP msg=audit(1389204136.891:1466): pid=4199 uid=0 auid=0 ses=57 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204136.894:1467): pid=4199 uid=0 auid=0 ses=57 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1389204136.899:1468): pid=4199 uid=0 auid=0 ses=57 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204136.899:1469): pid=4199 uid=0 auid=0 ses=57 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=4199 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204136.899:1470): pid=4199 uid=0 auid=0 ses=57 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=4199 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204136.899:1471): pid=4199 uid=0 auid=0 ses=57 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=4199 suid=0 rport=33249 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204136.905:1472): pid=4209 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=4209 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204136.907:1473): pid=4209 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=4209 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204136.908:1474): pid=4207 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=4209 suid=74 rport=33250 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204136.909:1475): pid=4207 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=4209 suid=74 rport=33250 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204137.526:1476): pid=4207 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=33250 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204137.526:1477): pid=4207 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=4096 fp=8b:56:b0:3f:c8:ad:38:a6:94:f4:a7:26:83:75:cc:85 rport=33250 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_ACCT msg=audit(1389204137.531:1478): pid=4207 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204137.532:1479): pid=4207 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=4209 suid=74 rport=33250 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204137.533:1480): pid=4207 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1389204137.536:1481): pid=4207 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=LOGIN msg=audit(1389204137.536:1482): login pid=4207 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=58 >type=USER_ROLE_CHANGE msg=audit(1389204137.578:1483): pid=4207 uid=0 auid=0 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204137.595:1484): pid=4207 uid=0 auid=0 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1389204137.600:1485): pid=4207 uid=0 auid=0 ses=58 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204137.602:1486): pid=4207 uid=0 auid=0 ses=58 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204137.603:1487): pid=4211 uid=0 auid=0 ses=58 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=4211 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204137.603:1488): pid=4211 uid=0 auid=0 ses=58 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=4211 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRED_REFR msg=audit(1389204137.606:1489): pid=4211 uid=0 auid=0 ses=58 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204137.626:1490): pid=4207 uid=0 auid=0 ses=58 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRED_DISP msg=audit(1389204137.628:1491): pid=4207 uid=0 auid=0 ses=58 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204137.631:1492): pid=4207 uid=0 auid=0 ses=58 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1389204137.636:1493): pid=4207 uid=0 auid=0 ses=58 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204137.636:1494): pid=4207 uid=0 auid=0 ses=58 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=4207 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204137.636:1495): pid=4207 uid=0 auid=0 ses=58 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=4207 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204137.636:1496): pid=4207 uid=0 auid=0 ses=58 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=4207 suid=0 rport=33250 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204137.643:1497): pid=4223 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=4223 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204137.645:1498): pid=4223 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=4223 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204137.648:1499): pid=4221 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=4223 suid=74 rport=33251 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204137.648:1500): pid=4221 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=4223 suid=74 rport=33251 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204138.175:1501): pid=4221 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=33251 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204138.175:1502): pid=4221 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=4096 fp=8b:56:b0:3f:c8:ad:38:a6:94:f4:a7:26:83:75:cc:85 rport=33251 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_ACCT msg=audit(1389204138.179:1503): pid=4221 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204138.180:1504): pid=4221 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=4223 suid=74 rport=33251 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204138.181:1505): pid=4221 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1389204138.184:1506): pid=4221 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=LOGIN msg=audit(1389204138.184:1507): login pid=4221 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=59 >type=USER_ROLE_CHANGE msg=audit(1389204138.225:1508): pid=4221 uid=0 auid=0 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204138.241:1509): pid=4221 uid=0 auid=0 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1389204138.246:1510): pid=4221 uid=0 auid=0 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204138.248:1511): pid=4221 uid=0 auid=0 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204138.249:1512): pid=4233 uid=0 auid=0 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=4233 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204138.249:1513): pid=4233 uid=0 auid=0 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=4233 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRED_REFR msg=audit(1389204138.252:1514): pid=4233 uid=0 auid=0 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204138.272:1515): pid=4221 uid=0 auid=0 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRED_DISP msg=audit(1389204138.278:1516): pid=4221 uid=0 auid=0 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204138.281:1517): pid=4221 uid=0 auid=0 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1389204138.282:1518): pid=4221 uid=0 auid=0 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204138.282:1519): pid=4221 uid=0 auid=0 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=4221 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204138.282:1520): pid=4221 uid=0 auid=0 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=4221 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204138.282:1521): pid=4221 uid=0 auid=0 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=4221 suid=0 rport=33251 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204138.284:1522): pid=4243 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=4243 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204138.284:1523): pid=4243 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=4243 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204138.286:1524): pid=4242 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=4243 suid=74 rport=33253 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204138.286:1525): pid=4242 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=4243 suid=74 rport=33253 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204138.823:1526): pid=4242 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=33253 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204138.824:1527): pid=4242 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=4096 fp=8b:56:b0:3f:c8:ad:38:a6:94:f4:a7:26:83:75:cc:85 rport=33253 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_ACCT msg=audit(1389204138.830:1528): pid=4242 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204138.831:1529): pid=4242 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=4243 suid=74 rport=33253 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204138.832:1530): pid=4242 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1389204138.835:1531): pid=4242 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=LOGIN msg=audit(1389204138.835:1532): login pid=4242 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=60 >type=USER_ROLE_CHANGE msg=audit(1389204138.885:1533): pid=4242 uid=0 auid=0 ses=60 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204138.900:1534): pid=4242 uid=0 auid=0 ses=60 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1389204138.904:1535): pid=4242 uid=0 auid=0 ses=60 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204138.906:1536): pid=4242 uid=0 auid=0 ses=60 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204138.908:1537): pid=4245 uid=0 auid=0 ses=60 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=4245 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204138.908:1538): pid=4245 uid=0 auid=0 ses=60 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=4245 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRED_REFR msg=audit(1389204138.910:1539): pid=4245 uid=0 auid=0 ses=60 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204138.931:1540): pid=4242 uid=0 auid=0 ses=60 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRED_DISP msg=audit(1389204138.933:1541): pid=4242 uid=0 auid=0 ses=60 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204138.935:1542): pid=4242 uid=0 auid=0 ses=60 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1389204138.940:1543): pid=4242 uid=0 auid=0 ses=60 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204138.940:1544): pid=4242 uid=0 auid=0 ses=60 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=4242 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204138.940:1545): pid=4242 uid=0 auid=0 ses=60 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=4242 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204138.940:1546): pid=4242 uid=0 auid=0 ses=60 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=4242 suid=0 rport=33253 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204138.946:1547): pid=4257 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=4257 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204138.946:1548): pid=4257 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=4257 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204138.948:1549): pid=4256 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=4257 suid=74 rport=33255 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204138.948:1550): pid=4256 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=4257 suid=74 rport=33255 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204139.487:1551): pid=4256 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=33255 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204139.487:1552): pid=4256 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=4096 fp=8b:56:b0:3f:c8:ad:38:a6:94:f4:a7:26:83:75:cc:85 rport=33255 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_ACCT msg=audit(1389204139.492:1553): pid=4256 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204139.493:1554): pid=4256 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=4257 suid=74 rport=33255 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204139.494:1555): pid=4256 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1389204139.496:1556): pid=4256 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=LOGIN msg=audit(1389204139.496:1557): login pid=4256 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=61 >type=USER_ROLE_CHANGE msg=audit(1389204139.534:1558): pid=4256 uid=0 auid=0 ses=61 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204139.549:1559): pid=4256 uid=0 auid=0 ses=61 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1389204139.554:1560): pid=4256 uid=0 auid=0 ses=61 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204139.556:1561): pid=4256 uid=0 auid=0 ses=61 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204139.557:1562): pid=4259 uid=0 auid=0 ses=61 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=4259 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204139.558:1563): pid=4259 uid=0 auid=0 ses=61 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=4259 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRED_REFR msg=audit(1389204139.560:1564): pid=4259 uid=0 auid=0 ses=61 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204139.580:1565): pid=4256 uid=0 auid=0 ses=61 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRED_DISP msg=audit(1389204139.581:1566): pid=4256 uid=0 auid=0 ses=61 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204139.584:1567): pid=4256 uid=0 auid=0 ses=61 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1389204139.585:1568): pid=4256 uid=0 auid=0 ses=61 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204139.586:1569): pid=4256 uid=0 auid=0 ses=61 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=4256 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204139.586:1570): pid=4256 uid=0 auid=0 ses=61 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=4256 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204139.586:1571): pid=4256 uid=0 auid=0 ses=61 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=4256 suid=0 rport=33255 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204142.591:1572): pid=4268 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=4268 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204142.591:1573): pid=4268 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=4268 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204142.593:1574): pid=4267 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=4268 suid=74 rport=33262 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204142.593:1575): pid=4267 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=4268 suid=74 rport=33262 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204143.197:1576): pid=4267 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=33262 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204143.197:1577): pid=4267 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=4096 fp=8b:56:b0:3f:c8:ad:38:a6:94:f4:a7:26:83:75:cc:85 rport=33262 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_ACCT msg=audit(1389204143.202:1578): pid=4267 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204143.203:1579): pid=4267 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=4268 suid=74 rport=33262 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204143.204:1580): pid=4267 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1389204143.206:1581): pid=4267 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=LOGIN msg=audit(1389204143.206:1582): login pid=4267 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=62 >type=USER_ROLE_CHANGE msg=audit(1389204143.245:1583): pid=4267 uid=0 auid=0 ses=62 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204143.262:1584): pid=4267 uid=0 auid=0 ses=62 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1389204143.267:1585): pid=4267 uid=0 auid=0 ses=62 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204143.269:1586): pid=4267 uid=0 auid=0 ses=62 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204143.270:1587): pid=4270 uid=0 auid=0 ses=62 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=4270 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204143.270:1588): pid=4270 uid=0 auid=0 ses=62 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=4270 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRED_REFR msg=audit(1389204143.272:1589): pid=4270 uid=0 auid=0 ses=62 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204143.291:1590): pid=4267 uid=0 auid=0 ses=62 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRED_DISP msg=audit(1389204143.292:1591): pid=4267 uid=0 auid=0 ses=62 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204143.294:1592): pid=4267 uid=0 auid=0 ses=62 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1389204143.296:1593): pid=4267 uid=0 auid=0 ses=62 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204143.296:1594): pid=4267 uid=0 auid=0 ses=62 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=4267 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204143.296:1595): pid=4267 uid=0 auid=0 ses=62 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=4267 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204143.296:1596): pid=4267 uid=0 auid=0 ses=62 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=4267 suid=0 rport=33262 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204146.301:1597): pid=4279 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=4279 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204146.302:1598): pid=4279 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=4279 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204146.304:1599): pid=4278 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=4279 suid=74 rport=33265 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204146.304:1600): pid=4278 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=4279 suid=74 rport=33265 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204146.826:1601): pid=4278 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=33265 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204146.826:1602): pid=4278 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=4096 fp=8b:56:b0:3f:c8:ad:38:a6:94:f4:a7:26:83:75:cc:85 rport=33265 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_ACCT msg=audit(1389204146.831:1603): pid=4278 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204146.832:1604): pid=4278 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=4279 suid=74 rport=33265 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204146.833:1605): pid=4278 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1389204146.835:1606): pid=4278 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=LOGIN msg=audit(1389204146.835:1607): login pid=4278 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=63 >type=USER_ROLE_CHANGE msg=audit(1389204146.873:1608): pid=4278 uid=0 auid=0 ses=63 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204146.888:1609): pid=4278 uid=0 auid=0 ses=63 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1389204146.892:1610): pid=4278 uid=0 auid=0 ses=63 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204146.895:1611): pid=4278 uid=0 auid=0 ses=63 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204146.896:1612): pid=4281 uid=0 auid=0 ses=63 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=4281 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204146.896:1613): pid=4281 uid=0 auid=0 ses=63 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=4281 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRED_REFR msg=audit(1389204146.898:1614): pid=4281 uid=0 auid=0 ses=63 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204146.918:1615): pid=4278 uid=0 auid=0 ses=63 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRED_DISP msg=audit(1389204146.920:1616): pid=4278 uid=0 auid=0 ses=63 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204146.922:1617): pid=4278 uid=0 auid=0 ses=63 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1389204146.924:1618): pid=4278 uid=0 auid=0 ses=63 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204146.924:1619): pid=4278 uid=0 auid=0 ses=63 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=4278 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204146.924:1620): pid=4278 uid=0 auid=0 ses=63 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=4278 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204146.924:1621): pid=4278 uid=0 auid=0 ses=63 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=4278 suid=0 rport=33265 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204149.928:1622): pid=4290 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=4290 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204149.928:1623): pid=4290 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=4290 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204149.930:1624): pid=4289 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=4290 suid=74 rport=33278 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204149.930:1625): pid=4289 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=4290 suid=74 rport=33278 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204150.464:1626): pid=4289 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=33278 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204150.464:1627): pid=4289 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=4096 fp=8b:56:b0:3f:c8:ad:38:a6:94:f4:a7:26:83:75:cc:85 rport=33278 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_ACCT msg=audit(1389204150.469:1628): pid=4289 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204150.470:1629): pid=4289 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=4290 suid=74 rport=33278 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204150.471:1630): pid=4289 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1389204150.474:1631): pid=4289 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=LOGIN msg=audit(1389204150.475:1632): login pid=4289 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=64 >type=USER_ROLE_CHANGE msg=audit(1389204150.517:1633): pid=4289 uid=0 auid=0 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204150.535:1634): pid=4289 uid=0 auid=0 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1389204150.542:1635): pid=4289 uid=0 auid=0 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204150.544:1636): pid=4289 uid=0 auid=0 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204150.546:1637): pid=4292 uid=0 auid=0 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=4292 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204150.546:1638): pid=4292 uid=0 auid=0 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=4292 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRED_REFR msg=audit(1389204150.549:1639): pid=4292 uid=0 auid=0 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204150.573:1640): pid=4289 uid=0 auid=0 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRED_DISP msg=audit(1389204150.576:1641): pid=4289 uid=0 auid=0 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204150.578:1642): pid=4289 uid=0 auid=0 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1389204150.580:1643): pid=4289 uid=0 auid=0 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204150.581:1644): pid=4289 uid=0 auid=0 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=4289 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204150.581:1645): pid=4289 uid=0 auid=0 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=4289 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204150.581:1646): pid=4289 uid=0 auid=0 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=4289 suid=0 rport=33278 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=NETFILTER_CFG msg=audit(1389204151.368:1647): table=filter family=2 entries=0 >type=SYSCALL msg=audit(1389204151.368:1647): arch=c000003e syscall=272 success=yes exit=0 a0=40000000 a1=c0 a2=0 a3=7fff9da50830 items=0 ppid=4408 pid=4415 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=58 tty=(none) comm="ip" exe="/usr/sbin/ip" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null) >type=NETFILTER_CFG msg=audit(1389204151.384:1648): table=filter family=2 entries=0 >type=SYSCALL msg=audit(1389204151.384:1648): arch=c000003e syscall=272 success=yes exit=0 a0=40000000 a1=c0 a2=0 a3=7ffff8aa6530 items=0 ppid=4408 pid=4421 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=58 tty=(none) comm="ip" exe="/usr/sbin/ip" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null) >type=NETFILTER_CFG msg=audit(1389204151.641:1649): table=filter family=2 entries=0 >type=SYSCALL msg=audit(1389204151.641:1649): arch=c000003e syscall=272 success=yes exit=0 a0=40000000 a1=c0 a2=0 a3=7fff383dcf60 items=0 ppid=4408 pid=4423 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=58 tty=(none) comm="ip" exe="/usr/sbin/ip" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null) >type=CRYPTO_KEY_USER msg=audit(1389204153.593:1650): pid=4468 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=4468 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204153.593:1651): pid=4468 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=4468 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204153.595:1652): pid=4467 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=4468 suid=74 rport=33282 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204153.595:1653): pid=4467 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=4468 suid=74 rport=33282 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204154.123:1654): pid=4467 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=33282 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204154.123:1655): pid=4467 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=4096 fp=8b:56:b0:3f:c8:ad:38:a6:94:f4:a7:26:83:75:cc:85 rport=33282 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_ACCT msg=audit(1389204154.129:1656): pid=4467 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204154.130:1657): pid=4467 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=4468 suid=74 rport=33282 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204154.131:1658): pid=4467 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1389204154.134:1659): pid=4467 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=LOGIN msg=audit(1389204154.134:1660): login pid=4467 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=65 >type=USER_ROLE_CHANGE msg=audit(1389204154.178:1661): pid=4467 uid=0 auid=0 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204154.193:1662): pid=4467 uid=0 auid=0 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1389204154.197:1663): pid=4467 uid=0 auid=0 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204154.199:1664): pid=4467 uid=0 auid=0 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204154.200:1665): pid=4470 uid=0 auid=0 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=4470 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204154.200:1666): pid=4470 uid=0 auid=0 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=4470 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRED_REFR msg=audit(1389204154.203:1667): pid=4470 uid=0 auid=0 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204154.222:1668): pid=4467 uid=0 auid=0 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRED_DISP msg=audit(1389204154.223:1669): pid=4467 uid=0 auid=0 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204154.225:1670): pid=4467 uid=0 auid=0 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1389204154.227:1671): pid=4467 uid=0 auid=0 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204154.227:1672): pid=4467 uid=0 auid=0 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=4467 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204154.227:1673): pid=4467 uid=0 auid=0 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=4467 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204154.227:1674): pid=4467 uid=0 auid=0 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=4467 suid=0 rport=33282 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204157.229:1675): pid=4483 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=4483 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204157.229:1676): pid=4483 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=4483 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204157.231:1677): pid=4482 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=4483 suid=74 rport=33287 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204157.231:1678): pid=4482 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=4483 suid=74 rport=33287 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204157.752:1679): pid=4482 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=33287 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204157.752:1680): pid=4482 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=4096 fp=8b:56:b0:3f:c8:ad:38:a6:94:f4:a7:26:83:75:cc:85 rport=33287 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_ACCT msg=audit(1389204157.758:1681): pid=4482 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204157.759:1682): pid=4482 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=4483 suid=74 rport=33287 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204157.760:1683): pid=4482 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1389204157.763:1684): pid=4482 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=LOGIN msg=audit(1389204157.763:1685): login pid=4482 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=66 >type=USER_ROLE_CHANGE msg=audit(1389204157.805:1686): pid=4482 uid=0 auid=0 ses=66 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204157.822:1687): pid=4482 uid=0 auid=0 ses=66 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1389204157.826:1688): pid=4482 uid=0 auid=0 ses=66 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204157.827:1689): pid=4482 uid=0 auid=0 ses=66 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204157.829:1690): pid=4485 uid=0 auid=0 ses=66 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=4485 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204157.829:1691): pid=4485 uid=0 auid=0 ses=66 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=4485 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRED_REFR msg=audit(1389204157.831:1692): pid=4485 uid=0 auid=0 ses=66 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204157.852:1693): pid=4482 uid=0 auid=0 ses=66 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRED_DISP msg=audit(1389204157.854:1694): pid=4482 uid=0 auid=0 ses=66 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204157.856:1695): pid=4482 uid=0 auid=0 ses=66 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1389204157.858:1696): pid=4482 uid=0 auid=0 ses=66 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204157.858:1697): pid=4482 uid=0 auid=0 ses=66 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=4482 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204157.858:1698): pid=4482 uid=0 auid=0 ses=66 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=4482 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204157.858:1699): pid=4482 uid=0 auid=0 ses=66 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=4482 suid=0 rport=33287 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204160.861:1700): pid=4494 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=4494 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204160.862:1701): pid=4494 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=4494 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204160.864:1702): pid=4493 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=4494 suid=74 rport=33295 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204160.864:1703): pid=4493 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=4494 suid=74 rport=33295 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204161.381:1704): pid=4493 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=33295 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204161.381:1705): pid=4493 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=4096 fp=8b:56:b0:3f:c8:ad:38:a6:94:f4:a7:26:83:75:cc:85 rport=33295 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_ACCT msg=audit(1389204161.386:1706): pid=4493 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204161.387:1707): pid=4493 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=4494 suid=74 rport=33295 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204161.388:1708): pid=4493 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1389204161.390:1709): pid=4493 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=LOGIN msg=audit(1389204161.390:1710): login pid=4493 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=67 >type=USER_ROLE_CHANGE msg=audit(1389204161.429:1711): pid=4493 uid=0 auid=0 ses=67 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204161.445:1712): pid=4493 uid=0 auid=0 ses=67 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1389204161.450:1713): pid=4493 uid=0 auid=0 ses=67 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204161.451:1714): pid=4493 uid=0 auid=0 ses=67 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204161.453:1715): pid=4496 uid=0 auid=0 ses=67 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=4496 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204161.453:1716): pid=4496 uid=0 auid=0 ses=67 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=4496 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRED_REFR msg=audit(1389204161.455:1717): pid=4496 uid=0 auid=0 ses=67 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204161.474:1718): pid=4493 uid=0 auid=0 ses=67 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRED_DISP msg=audit(1389204161.476:1719): pid=4493 uid=0 auid=0 ses=67 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204161.479:1720): pid=4493 uid=0 auid=0 ses=67 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1389204161.481:1721): pid=4493 uid=0 auid=0 ses=67 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204161.481:1722): pid=4493 uid=0 auid=0 ses=67 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=4493 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204161.481:1723): pid=4493 uid=0 auid=0 ses=67 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=4493 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204161.481:1724): pid=4493 uid=0 auid=0 ses=67 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=4493 suid=0 rport=33295 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204164.483:1725): pid=4505 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=4505 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204164.483:1726): pid=4505 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=4505 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204164.485:1727): pid=4504 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=4505 suid=74 rport=33308 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204164.485:1728): pid=4504 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=4505 suid=74 rport=33308 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204165.017:1729): pid=4504 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=33308 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204165.017:1730): pid=4504 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=4096 fp=8b:56:b0:3f:c8:ad:38:a6:94:f4:a7:26:83:75:cc:85 rport=33308 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_ACCT msg=audit(1389204165.023:1731): pid=4504 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204165.023:1732): pid=4504 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=4505 suid=74 rport=33308 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204165.024:1733): pid=4504 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1389204165.027:1734): pid=4504 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=LOGIN msg=audit(1389204165.027:1735): login pid=4504 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=68 >type=USER_ROLE_CHANGE msg=audit(1389204165.069:1736): pid=4504 uid=0 auid=0 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204165.086:1737): pid=4504 uid=0 auid=0 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1389204165.090:1738): pid=4504 uid=0 auid=0 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204165.093:1739): pid=4504 uid=0 auid=0 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204165.094:1740): pid=4507 uid=0 auid=0 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=4507 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204165.094:1741): pid=4507 uid=0 auid=0 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=4507 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRED_REFR msg=audit(1389204165.096:1742): pid=4507 uid=0 auid=0 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204165.117:1743): pid=4504 uid=0 auid=0 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRED_DISP msg=audit(1389204165.119:1744): pid=4504 uid=0 auid=0 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204165.121:1745): pid=4504 uid=0 auid=0 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1389204165.122:1746): pid=4504 uid=0 auid=0 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204165.122:1747): pid=4504 uid=0 auid=0 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=4504 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204165.122:1748): pid=4504 uid=0 auid=0 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=4504 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204165.122:1749): pid=4504 uid=0 auid=0 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=4504 suid=0 rport=33308 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=NETFILTER_CFG msg=audit(1389204165.697:1750): table=filter family=2 entries=0 >type=SYSCALL msg=audit(1389204165.697:1750): arch=c000003e syscall=272 success=yes exit=0 a0=40000000 a1=c0 a2=0 a3=7fff9a475650 items=0 ppid=4625 pid=4632 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=58 tty=(none) comm="ip" exe="/usr/sbin/ip" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null) >type=NETFILTER_CFG msg=audit(1389204165.713:1751): table=filter family=2 entries=0 >type=SYSCALL msg=audit(1389204165.713:1751): arch=c000003e syscall=272 success=yes exit=0 a0=40000000 a1=c0 a2=0 a3=7fff96161850 items=0 ppid=4625 pid=4638 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=58 tty=(none) comm="ip" exe="/usr/sbin/ip" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null) >type=NETFILTER_CFG msg=audit(1389204165.971:1752): table=filter family=2 entries=0 >type=SYSCALL msg=audit(1389204165.971:1752): arch=c000003e syscall=272 success=yes exit=0 a0=40000000 a1=c0 a2=0 a3=7fff820d8450 items=0 ppid=4625 pid=4640 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=58 tty=(none) comm="ip" exe="/usr/sbin/ip" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null) >type=CRYPTO_KEY_USER msg=audit(1389204168.141:1753): pid=4674 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=4674 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204168.141:1754): pid=4674 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=4674 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204168.144:1755): pid=4673 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=4674 suid=74 rport=33311 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204168.144:1756): pid=4673 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=4674 suid=74 rport=33311 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=NETFILTER_CFG msg=audit(1389204168.280:1757): table=filter family=2 entries=6 >type=SYSCALL msg=audit(1389204168.280:1757): arch=c000003e syscall=54 success=yes exit=0 a0=3 a1=0 a2=40 a3=26010a0 items=0 ppid=4220 pid=4689 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=58 tty=(none) comm="iptables" exe="/usr/sbin/xtables-multi" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null) >type=USER_AUTH msg=audit(1389204168.682:1758): pid=4673 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=33311 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204168.682:1759): pid=4673 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=4096 fp=8b:56:b0:3f:c8:ad:38:a6:94:f4:a7:26:83:75:cc:85 rport=33311 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_ACCT msg=audit(1389204168.688:1760): pid=4673 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204168.689:1761): pid=4673 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=4674 suid=74 rport=33311 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204168.690:1762): pid=4673 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1389204168.692:1763): pid=4673 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=LOGIN msg=audit(1389204168.692:1764): login pid=4673 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=69 >type=USER_ROLE_CHANGE msg=audit(1389204168.772:1765): pid=4673 uid=0 auid=0 ses=69 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204168.793:1766): pid=4673 uid=0 auid=0 ses=69 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1389204168.798:1767): pid=4673 uid=0 auid=0 ses=69 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204168.799:1768): pid=4673 uid=0 auid=0 ses=69 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204168.801:1769): pid=4699 uid=0 auid=0 ses=69 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=4699 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204168.801:1770): pid=4699 uid=0 auid=0 ses=69 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=4699 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRED_REFR msg=audit(1389204168.803:1771): pid=4699 uid=0 auid=0 ses=69 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204168.828:1772): pid=4673 uid=0 auid=0 ses=69 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRED_DISP msg=audit(1389204168.830:1773): pid=4673 uid=0 auid=0 ses=69 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204168.832:1774): pid=4673 uid=0 auid=0 ses=69 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1389204168.834:1775): pid=4673 uid=0 auid=0 ses=69 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204168.834:1776): pid=4673 uid=0 auid=0 ses=69 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=4673 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204168.834:1777): pid=4673 uid=0 auid=0 ses=69 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=4673 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204168.834:1778): pid=4673 uid=0 auid=0 ses=69 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=4673 suid=0 rport=33311 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204171.840:1779): pid=4718 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=4718 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204171.840:1780): pid=4718 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=4718 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204171.843:1781): pid=4717 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=4718 suid=74 rport=33317 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204171.843:1782): pid=4717 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=4718 suid=74 rport=33317 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204172.425:1783): pid=4717 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=33317 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204172.425:1784): pid=4717 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=4096 fp=8b:56:b0:3f:c8:ad:38:a6:94:f4:a7:26:83:75:cc:85 rport=33317 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_ACCT msg=audit(1389204172.431:1785): pid=4717 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204172.432:1786): pid=4717 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=4718 suid=74 rport=33317 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204172.433:1787): pid=4717 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1389204172.435:1788): pid=4717 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=LOGIN msg=audit(1389204172.435:1789): login pid=4717 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=70 >type=USER_ROLE_CHANGE msg=audit(1389204172.479:1790): pid=4717 uid=0 auid=0 ses=70 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204172.496:1791): pid=4717 uid=0 auid=0 ses=70 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1389204172.500:1792): pid=4717 uid=0 auid=0 ses=70 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204172.503:1793): pid=4717 uid=0 auid=0 ses=70 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204172.504:1794): pid=4724 uid=0 auid=0 ses=70 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=4724 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204172.504:1795): pid=4724 uid=0 auid=0 ses=70 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=4724 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRED_REFR msg=audit(1389204172.507:1796): pid=4724 uid=0 auid=0 ses=70 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204172.528:1797): pid=4717 uid=0 auid=0 ses=70 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRED_DISP msg=audit(1389204172.531:1798): pid=4717 uid=0 auid=0 ses=70 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204172.533:1799): pid=4717 uid=0 auid=0 ses=70 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1389204172.536:1800): pid=4717 uid=0 auid=0 ses=70 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204172.536:1801): pid=4717 uid=0 auid=0 ses=70 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=4717 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204172.536:1802): pid=4717 uid=0 auid=0 ses=70 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=4717 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204172.536:1803): pid=4717 uid=0 auid=0 ses=70 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=4717 suid=0 rport=33317 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204175.540:1804): pid=4739 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=4739 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204175.540:1805): pid=4739 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=4739 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204175.542:1806): pid=4738 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=4739 suid=74 rport=33328 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204175.543:1807): pid=4738 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=4739 suid=74 rport=33328 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204176.172:1808): pid=4738 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=33328 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204176.172:1809): pid=4738 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=4096 fp=8b:56:b0:3f:c8:ad:38:a6:94:f4:a7:26:83:75:cc:85 rport=33328 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_ACCT msg=audit(1389204176.178:1810): pid=4738 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204176.179:1811): pid=4738 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=4739 suid=74 rport=33328 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204176.180:1812): pid=4738 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1389204176.182:1813): pid=4738 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=LOGIN msg=audit(1389204176.182:1814): login pid=4738 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=71 >type=USER_ROLE_CHANGE msg=audit(1389204176.229:1815): pid=4738 uid=0 auid=0 ses=71 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204176.246:1816): pid=4738 uid=0 auid=0 ses=71 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1389204176.250:1817): pid=4738 uid=0 auid=0 ses=71 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204176.252:1818): pid=4738 uid=0 auid=0 ses=71 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204176.254:1819): pid=4743 uid=0 auid=0 ses=71 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=4743 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204176.254:1820): pid=4743 uid=0 auid=0 ses=71 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=4743 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRED_REFR msg=audit(1389204176.256:1821): pid=4743 uid=0 auid=0 ses=71 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204176.277:1822): pid=4738 uid=0 auid=0 ses=71 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRED_DISP msg=audit(1389204176.280:1823): pid=4738 uid=0 auid=0 ses=71 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204176.282:1824): pid=4738 uid=0 auid=0 ses=71 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1389204176.284:1825): pid=4738 uid=0 auid=0 ses=71 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204176.284:1826): pid=4738 uid=0 auid=0 ses=71 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=4738 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204176.284:1827): pid=4738 uid=0 auid=0 ses=71 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=4738 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204176.284:1828): pid=4738 uid=0 auid=0 ses=71 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=4738 suid=0 rport=33328 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204179.288:1829): pid=4752 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=4752 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204179.288:1830): pid=4752 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=4752 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204179.290:1831): pid=4751 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=4752 suid=74 rport=33332 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204179.290:1832): pid=4751 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=4752 suid=74 rport=33332 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204179.833:1833): pid=4751 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=33332 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204179.833:1834): pid=4751 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=4096 fp=8b:56:b0:3f:c8:ad:38:a6:94:f4:a7:26:83:75:cc:85 rport=33332 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_ACCT msg=audit(1389204179.840:1835): pid=4751 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204179.841:1836): pid=4751 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=4752 suid=74 rport=33332 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204179.842:1837): pid=4751 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1389204179.846:1838): pid=4751 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=LOGIN msg=audit(1389204179.846:1839): login pid=4751 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=72 >type=USER_ROLE_CHANGE msg=audit(1389204179.890:1840): pid=4751 uid=0 auid=0 ses=72 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204179.911:1841): pid=4751 uid=0 auid=0 ses=72 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1389204179.917:1842): pid=4751 uid=0 auid=0 ses=72 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204179.920:1843): pid=4751 uid=0 auid=0 ses=72 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204179.921:1844): pid=4754 uid=0 auid=0 ses=72 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=4754 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204179.921:1845): pid=4754 uid=0 auid=0 ses=72 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=4754 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRED_REFR msg=audit(1389204179.924:1846): pid=4754 uid=0 auid=0 ses=72 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204179.944:1847): pid=4751 uid=0 auid=0 ses=72 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRED_DISP msg=audit(1389204179.946:1848): pid=4751 uid=0 auid=0 ses=72 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204179.948:1849): pid=4751 uid=0 auid=0 ses=72 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1389204179.951:1850): pid=4751 uid=0 auid=0 ses=72 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204179.951:1851): pid=4751 uid=0 auid=0 ses=72 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=4751 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204179.951:1852): pid=4751 uid=0 auid=0 ses=72 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=4751 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204179.951:1853): pid=4751 uid=0 auid=0 ses=72 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=4751 suid=0 rport=33332 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204182.962:1854): pid=4781 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=4781 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204182.962:1855): pid=4781 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=4781 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204182.964:1856): pid=4780 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=4781 suid=74 rport=33333 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204182.965:1857): pid=4780 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=4781 suid=74 rport=33333 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204183.496:1858): pid=4780 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=33333 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204183.496:1859): pid=4780 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=4096 fp=8b:56:b0:3f:c8:ad:38:a6:94:f4:a7:26:83:75:cc:85 rport=33333 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_ACCT msg=audit(1389204183.501:1860): pid=4780 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204183.502:1861): pid=4780 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=4781 suid=74 rport=33333 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204183.503:1862): pid=4780 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1389204183.506:1863): pid=4780 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=LOGIN msg=audit(1389204183.506:1864): login pid=4780 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=73 >type=USER_ROLE_CHANGE msg=audit(1389204183.587:1865): pid=4780 uid=0 auid=0 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204183.606:1866): pid=4780 uid=0 auid=0 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1389204183.610:1867): pid=4780 uid=0 auid=0 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204183.612:1868): pid=4780 uid=0 auid=0 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204183.613:1869): pid=4783 uid=0 auid=0 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=4783 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204183.613:1870): pid=4783 uid=0 auid=0 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=4783 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRED_REFR msg=audit(1389204183.616:1871): pid=4783 uid=0 auid=0 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204183.642:1872): pid=4780 uid=0 auid=0 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRED_DISP msg=audit(1389204183.644:1873): pid=4780 uid=0 auid=0 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204183.646:1874): pid=4780 uid=0 auid=0 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1389204183.648:1875): pid=4780 uid=0 auid=0 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204183.648:1876): pid=4780 uid=0 auid=0 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=4780 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204183.648:1877): pid=4780 uid=0 auid=0 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=4780 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204183.648:1878): pid=4780 uid=0 auid=0 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=4780 suid=0 rport=33333 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204186.652:1879): pid=4793 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=4793 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204186.652:1880): pid=4793 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=4793 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204186.654:1881): pid=4792 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=4793 suid=74 rport=33334 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204186.654:1882): pid=4792 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=4793 suid=74 rport=33334 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204187.175:1883): pid=4792 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=33334 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204187.175:1884): pid=4792 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=4096 fp=8b:56:b0:3f:c8:ad:38:a6:94:f4:a7:26:83:75:cc:85 rport=33334 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_ACCT msg=audit(1389204187.180:1885): pid=4792 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204187.182:1886): pid=4792 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=4793 suid=74 rport=33334 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204187.182:1887): pid=4792 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1389204187.184:1888): pid=4792 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=LOGIN msg=audit(1389204187.184:1889): login pid=4792 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=74 >type=USER_ROLE_CHANGE msg=audit(1389204187.226:1890): pid=4792 uid=0 auid=0 ses=74 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204187.242:1891): pid=4792 uid=0 auid=0 ses=74 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1389204187.246:1892): pid=4792 uid=0 auid=0 ses=74 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204187.251:1893): pid=4792 uid=0 auid=0 ses=74 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204187.252:1894): pid=4795 uid=0 auid=0 ses=74 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=4795 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204187.252:1895): pid=4795 uid=0 auid=0 ses=74 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=4795 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRED_REFR msg=audit(1389204187.255:1896): pid=4795 uid=0 auid=0 ses=74 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204187.276:1897): pid=4792 uid=0 auid=0 ses=74 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRED_DISP msg=audit(1389204187.277:1898): pid=4792 uid=0 auid=0 ses=74 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204187.280:1899): pid=4792 uid=0 auid=0 ses=74 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1389204187.281:1900): pid=4792 uid=0 auid=0 ses=74 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204187.281:1901): pid=4792 uid=0 auid=0 ses=74 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=4792 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204187.282:1902): pid=4792 uid=0 auid=0 ses=74 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=4792 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204187.282:1903): pid=4792 uid=0 auid=0 ses=74 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=4792 suid=0 rport=33334 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=ADD_GROUP msg=audit(1389204188.809:1904): pid=4802 uid=0 auid=0 ses=58 subj=unconfined_u:system_r:groupadd_t:s0-s0:c0.c1023 msg='op=adding group to /etc/group id=163 exe="/usr/sbin/groupadd" hostname=? addr=? terminal=? res=success' >type=ADD_GROUP msg=audit(1389204188.816:1905): pid=4802 uid=0 auid=0 ses=58 subj=unconfined_u:system_r:groupadd_t:s0-s0:c0.c1023 msg='op=adding group to /etc/gshadow id=163 exe="/usr/sbin/groupadd" hostname=? addr=? terminal=? res=success' >type=ADD_GROUP msg=audit(1389204188.817:1906): pid=4802 uid=0 auid=0 ses=58 subj=unconfined_u:system_r:groupadd_t:s0-s0:c0.c1023 msg='op= id=163 exe="/usr/sbin/groupadd" hostname=? addr=? terminal=? res=success' >type=ADD_USER msg=audit(1389204188.837:1907): pid=4807 uid=0 auid=0 ses=58 subj=unconfined_u:system_r:useradd_t:s0-s0:c0.c1023 msg='op=adding user id=163 exe="/usr/sbin/useradd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204190.291:1908): pid=4826 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=4826 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204190.291:1909): pid=4826 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=4826 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204190.293:1910): pid=4825 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=4826 suid=74 rport=33335 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204190.293:1911): pid=4825 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=4826 suid=74 rport=33335 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204190.825:1912): pid=4825 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=33335 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204190.825:1913): pid=4825 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=4096 fp=8b:56:b0:3f:c8:ad:38:a6:94:f4:a7:26:83:75:cc:85 rport=33335 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_ACCT msg=audit(1389204190.831:1914): pid=4825 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204190.832:1915): pid=4825 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=4826 suid=74 rport=33335 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204190.833:1916): pid=4825 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1389204190.835:1917): pid=4825 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=LOGIN msg=audit(1389204190.836:1918): login pid=4825 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=75 >type=USER_ROLE_CHANGE msg=audit(1389204190.924:1919): pid=4825 uid=0 auid=0 ses=75 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204190.970:1920): pid=4825 uid=0 auid=0 ses=75 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1389204190.974:1921): pid=4825 uid=0 auid=0 ses=75 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204190.976:1922): pid=4825 uid=0 auid=0 ses=75 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204190.977:1923): pid=4831 uid=0 auid=0 ses=75 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=4831 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204190.978:1924): pid=4831 uid=0 auid=0 ses=75 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=4831 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRED_REFR msg=audit(1389204190.980:1925): pid=4831 uid=0 auid=0 ses=75 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204190.998:1926): pid=4825 uid=0 auid=0 ses=75 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRED_DISP msg=audit(1389204191.000:1927): pid=4825 uid=0 auid=0 ses=75 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204191.002:1928): pid=4825 uid=0 auid=0 ses=75 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1389204191.008:1929): pid=4825 uid=0 auid=0 ses=75 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204191.008:1930): pid=4825 uid=0 auid=0 ses=75 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=4825 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204191.008:1931): pid=4825 uid=0 auid=0 ses=75 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=4825 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204191.008:1932): pid=4825 uid=0 auid=0 ses=75 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=4825 suid=0 rport=33335 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204194.027:1933): pid=4894 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=4894 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204194.029:1934): pid=4894 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=4894 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204194.032:1935): pid=4893 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=4894 suid=74 rport=33340 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204194.032:1936): pid=4893 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=4894 suid=74 rport=33340 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204194.557:1937): pid=4893 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=33340 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204194.557:1938): pid=4893 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=4096 fp=8b:56:b0:3f:c8:ad:38:a6:94:f4:a7:26:83:75:cc:85 rport=33340 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_ACCT msg=audit(1389204194.562:1939): pid=4893 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204194.563:1940): pid=4893 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=4894 suid=74 rport=33340 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204194.564:1941): pid=4893 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1389204194.568:1942): pid=4893 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=LOGIN msg=audit(1389204194.568:1943): login pid=4893 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=76 >type=USER_ROLE_CHANGE msg=audit(1389204194.652:1944): pid=4893 uid=0 auid=0 ses=76 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204194.673:1945): pid=4893 uid=0 auid=0 ses=76 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1389204194.678:1946): pid=4893 uid=0 auid=0 ses=76 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204194.679:1947): pid=4893 uid=0 auid=0 ses=76 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204194.680:1948): pid=4900 uid=0 auid=0 ses=76 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=4900 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204194.681:1949): pid=4900 uid=0 auid=0 ses=76 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=4900 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRED_REFR msg=audit(1389204194.683:1950): pid=4900 uid=0 auid=0 ses=76 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204194.706:1951): pid=4893 uid=0 auid=0 ses=76 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRED_DISP msg=audit(1389204194.708:1952): pid=4893 uid=0 auid=0 ses=76 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204194.710:1953): pid=4893 uid=0 auid=0 ses=76 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1389204194.712:1954): pid=4893 uid=0 auid=0 ses=76 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204194.712:1955): pid=4893 uid=0 auid=0 ses=76 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=4893 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204194.712:1956): pid=4893 uid=0 auid=0 ses=76 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=4893 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204194.712:1957): pid=4893 uid=0 auid=0 ses=76 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=4893 suid=0 rport=33340 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=SERVICE_START msg=audit(1389204194.729:1958): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="openstack-keystone" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204197.730:1959): pid=5050 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=5050 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204197.732:1960): pid=5050 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=5050 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204197.734:1961): pid=5049 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=5050 suid=74 rport=33357 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204197.735:1962): pid=5049 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=5050 suid=74 rport=33357 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204198.261:1963): pid=5049 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=33357 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204198.261:1964): pid=5049 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=4096 fp=8b:56:b0:3f:c8:ad:38:a6:94:f4:a7:26:83:75:cc:85 rport=33357 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_ACCT msg=audit(1389204198.268:1965): pid=5049 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204198.268:1966): pid=5049 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=5050 suid=74 rport=33357 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204198.269:1967): pid=5049 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1389204198.271:1968): pid=5049 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=LOGIN msg=audit(1389204198.271:1969): login pid=5049 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=77 >type=USER_ROLE_CHANGE msg=audit(1389204198.352:1970): pid=5049 uid=0 auid=0 ses=77 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204198.410:1971): pid=5049 uid=0 auid=0 ses=77 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1389204198.417:1972): pid=5049 uid=0 auid=0 ses=77 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204198.419:1973): pid=5049 uid=0 auid=0 ses=77 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204198.420:1974): pid=5079 uid=0 auid=0 ses=77 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=5079 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204198.421:1975): pid=5079 uid=0 auid=0 ses=77 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=5079 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRED_REFR msg=audit(1389204198.423:1976): pid=5079 uid=0 auid=0 ses=77 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204198.453:1977): pid=5049 uid=0 auid=0 ses=77 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRED_DISP msg=audit(1389204198.455:1978): pid=5049 uid=0 auid=0 ses=77 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204198.457:1979): pid=5049 uid=0 auid=0 ses=77 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1389204198.458:1980): pid=5049 uid=0 auid=0 ses=77 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204198.458:1981): pid=5049 uid=0 auid=0 ses=77 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=5049 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204198.459:1982): pid=5049 uid=0 auid=0 ses=77 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=5049 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204198.459:1983): pid=5049 uid=0 auid=0 ses=77 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=5049 suid=0 rport=33357 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204201.473:1984): pid=5227 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=5227 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204201.475:1985): pid=5227 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=5227 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204201.477:1986): pid=5226 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=5227 suid=74 rport=33388 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204201.478:1987): pid=5226 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=5227 suid=74 rport=33388 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204202.014:1988): pid=5226 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=33388 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204202.014:1989): pid=5226 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=4096 fp=8b:56:b0:3f:c8:ad:38:a6:94:f4:a7:26:83:75:cc:85 rport=33388 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_ACCT msg=audit(1389204202.020:1990): pid=5226 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204202.021:1991): pid=5226 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=5227 suid=74 rport=33388 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204202.021:1992): pid=5226 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1389204202.023:1993): pid=5226 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=LOGIN msg=audit(1389204202.023:1994): login pid=5226 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=78 >type=USER_ROLE_CHANGE msg=audit(1389204202.100:1995): pid=5226 uid=0 auid=0 ses=78 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204202.119:1996): pid=5226 uid=0 auid=0 ses=78 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1389204202.124:1997): pid=5226 uid=0 auid=0 ses=78 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204202.126:1998): pid=5226 uid=0 auid=0 ses=78 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204202.126:1999): pid=5260 uid=0 auid=0 ses=78 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=5260 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204202.126:2000): pid=5260 uid=0 auid=0 ses=78 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=5260 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRED_REFR msg=audit(1389204202.128:2001): pid=5260 uid=0 auid=0 ses=78 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204202.152:2002): pid=5226 uid=0 auid=0 ses=78 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRED_DISP msg=audit(1389204202.154:2003): pid=5226 uid=0 auid=0 ses=78 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204202.156:2004): pid=5226 uid=0 auid=0 ses=78 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1389204202.158:2005): pid=5226 uid=0 auid=0 ses=78 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204202.158:2006): pid=5226 uid=0 auid=0 ses=78 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=5226 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204202.158:2007): pid=5226 uid=0 auid=0 ses=78 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=5226 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204202.158:2008): pid=5226 uid=0 auid=0 ses=78 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=5226 suid=0 rport=33388 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204205.169:2009): pid=5415 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=5415 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204205.169:2010): pid=5415 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=5415 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204205.171:2011): pid=5414 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=5415 suid=74 rport=33420 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204205.171:2012): pid=5414 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=5415 suid=74 rport=33420 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204205.697:2013): pid=5414 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=33420 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204205.697:2014): pid=5414 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=4096 fp=8b:56:b0:3f:c8:ad:38:a6:94:f4:a7:26:83:75:cc:85 rport=33420 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_ACCT msg=audit(1389204205.703:2015): pid=5414 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204205.703:2016): pid=5414 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=5415 suid=74 rport=33420 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204205.704:2017): pid=5414 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1389204205.706:2018): pid=5414 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=LOGIN msg=audit(1389204205.707:2019): login pid=5414 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=79 >type=USER_ROLE_CHANGE msg=audit(1389204205.793:2020): pid=5414 uid=0 auid=0 ses=79 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204205.812:2021): pid=5414 uid=0 auid=0 ses=79 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1389204205.816:2022): pid=5414 uid=0 auid=0 ses=79 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204205.818:2023): pid=5414 uid=0 auid=0 ses=79 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204205.819:2024): pid=5444 uid=0 auid=0 ses=79 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=5444 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204205.819:2025): pid=5444 uid=0 auid=0 ses=79 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=5444 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRED_REFR msg=audit(1389204205.822:2026): pid=5444 uid=0 auid=0 ses=79 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204205.850:2027): pid=5414 uid=0 auid=0 ses=79 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRED_DISP msg=audit(1389204205.852:2028): pid=5414 uid=0 auid=0 ses=79 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204205.854:2029): pid=5414 uid=0 auid=0 ses=79 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1389204205.856:2030): pid=5414 uid=0 auid=0 ses=79 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204205.856:2031): pid=5414 uid=0 auid=0 ses=79 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=5414 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204205.856:2032): pid=5414 uid=0 auid=0 ses=79 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=5414 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204205.856:2033): pid=5414 uid=0 auid=0 ses=79 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=5414 suid=0 rport=33420 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204208.866:2034): pid=5597 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=5597 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204208.866:2035): pid=5597 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=5597 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204208.868:2036): pid=5596 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=5597 suid=74 rport=33454 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204208.868:2037): pid=5596 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=5597 suid=74 rport=33454 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204209.387:2038): pid=5596 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=33454 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204209.387:2039): pid=5596 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=4096 fp=8b:56:b0:3f:c8:ad:38:a6:94:f4:a7:26:83:75:cc:85 rport=33454 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_ACCT msg=audit(1389204209.392:2040): pid=5596 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204209.393:2041): pid=5596 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=5597 suid=74 rport=33454 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204209.394:2042): pid=5596 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1389204209.396:2043): pid=5596 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=LOGIN msg=audit(1389204209.396:2044): login pid=5596 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=80 >type=USER_ROLE_CHANGE msg=audit(1389204209.475:2045): pid=5596 uid=0 auid=0 ses=80 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204209.495:2046): pid=5596 uid=0 auid=0 ses=80 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1389204209.499:2047): pid=5596 uid=0 auid=0 ses=80 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204209.501:2048): pid=5596 uid=0 auid=0 ses=80 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204209.502:2049): pid=5617 uid=0 auid=0 ses=80 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=5617 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204209.502:2050): pid=5617 uid=0 auid=0 ses=80 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=5617 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRED_REFR msg=audit(1389204209.504:2051): pid=5617 uid=0 auid=0 ses=80 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204209.527:2052): pid=5596 uid=0 auid=0 ses=80 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRED_DISP msg=audit(1389204209.528:2053): pid=5596 uid=0 auid=0 ses=80 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204209.530:2054): pid=5596 uid=0 auid=0 ses=80 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1389204209.532:2055): pid=5596 uid=0 auid=0 ses=80 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204209.532:2056): pid=5596 uid=0 auid=0 ses=80 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=5596 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204209.532:2057): pid=5596 uid=0 auid=0 ses=80 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=5596 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204209.532:2058): pid=5596 uid=0 auid=0 ses=80 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=5596 suid=0 rport=33454 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204212.544:2059): pid=5755 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=5755 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204212.544:2060): pid=5755 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=5755 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204212.549:2061): pid=5754 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=5755 suid=74 rport=33481 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204212.549:2062): pid=5754 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=5755 suid=74 rport=33481 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204213.080:2063): pid=5754 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=33481 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204213.080:2064): pid=5754 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=4096 fp=8b:56:b0:3f:c8:ad:38:a6:94:f4:a7:26:83:75:cc:85 rport=33481 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_ACCT msg=audit(1389204213.085:2065): pid=5754 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204213.086:2066): pid=5754 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=5755 suid=74 rport=33481 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204213.087:2067): pid=5754 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1389204213.089:2068): pid=5754 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=LOGIN msg=audit(1389204213.089:2069): login pid=5754 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=81 >type=USER_ROLE_CHANGE msg=audit(1389204213.163:2070): pid=5754 uid=0 auid=0 ses=81 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204213.184:2071): pid=5754 uid=0 auid=0 ses=81 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1389204213.188:2072): pid=5754 uid=0 auid=0 ses=81 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204213.190:2073): pid=5754 uid=0 auid=0 ses=81 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204213.190:2074): pid=5788 uid=0 auid=0 ses=81 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=5788 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204213.190:2075): pid=5788 uid=0 auid=0 ses=81 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=5788 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRED_REFR msg=audit(1389204213.193:2076): pid=5788 uid=0 auid=0 ses=81 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204213.216:2077): pid=5754 uid=0 auid=0 ses=81 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRED_DISP msg=audit(1389204213.218:2078): pid=5754 uid=0 auid=0 ses=81 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204213.220:2079): pid=5754 uid=0 auid=0 ses=81 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1389204213.222:2080): pid=5754 uid=0 auid=0 ses=81 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204213.222:2081): pid=5754 uid=0 auid=0 ses=81 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=5754 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204213.222:2082): pid=5754 uid=0 auid=0 ses=81 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=5754 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204213.222:2083): pid=5754 uid=0 auid=0 ses=81 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=5754 suid=0 rport=33481 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204216.234:2084): pid=5911 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=5911 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204216.238:2085): pid=5911 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=5911 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204216.240:2086): pid=5910 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=5911 suid=74 rport=33508 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204216.240:2087): pid=5910 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=5911 suid=74 rport=33508 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204216.762:2088): pid=5910 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=33508 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204216.762:2089): pid=5910 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=4096 fp=8b:56:b0:3f:c8:ad:38:a6:94:f4:a7:26:83:75:cc:85 rport=33508 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_ACCT msg=audit(1389204216.767:2090): pid=5910 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204216.768:2091): pid=5910 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=5911 suid=74 rport=33508 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204216.768:2092): pid=5910 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1389204216.770:2093): pid=5910 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=LOGIN msg=audit(1389204216.771:2094): login pid=5910 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=82 >type=USER_ROLE_CHANGE msg=audit(1389204216.810:2095): pid=5910 uid=0 auid=0 ses=82 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204216.826:2096): pid=5910 uid=0 auid=0 ses=82 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1389204216.830:2097): pid=5910 uid=0 auid=0 ses=82 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204216.832:2098): pid=5910 uid=0 auid=0 ses=82 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204216.833:2099): pid=5921 uid=0 auid=0 ses=82 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=5921 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204216.833:2100): pid=5921 uid=0 auid=0 ses=82 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=5921 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRED_REFR msg=audit(1389204216.836:2101): pid=5921 uid=0 auid=0 ses=82 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204216.858:2102): pid=5910 uid=0 auid=0 ses=82 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRED_DISP msg=audit(1389204216.860:2103): pid=5910 uid=0 auid=0 ses=82 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204216.862:2104): pid=5910 uid=0 auid=0 ses=82 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1389204216.864:2105): pid=5910 uid=0 auid=0 ses=82 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204216.864:2106): pid=5910 uid=0 auid=0 ses=82 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=5910 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204216.864:2107): pid=5910 uid=0 auid=0 ses=82 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=5910 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204216.864:2108): pid=5910 uid=0 auid=0 ses=82 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=5910 suid=0 rport=33508 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204216.880:2109): pid=5930 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=5930 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204216.880:2110): pid=5930 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=5930 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204216.882:2111): pid=5929 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=5930 suid=74 rport=33510 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204216.882:2112): pid=5929 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=5930 suid=74 rport=33510 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204217.402:2113): pid=5929 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=33510 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204217.402:2114): pid=5929 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=4096 fp=8b:56:b0:3f:c8:ad:38:a6:94:f4:a7:26:83:75:cc:85 rport=33510 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_ACCT msg=audit(1389204217.408:2115): pid=5929 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204217.409:2116): pid=5929 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=5930 suid=74 rport=33510 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204217.411:2117): pid=5929 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1389204217.414:2118): pid=5929 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=LOGIN msg=audit(1389204217.414:2119): login pid=5929 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=83 >type=USER_ROLE_CHANGE msg=audit(1389204217.470:2120): pid=5929 uid=0 auid=0 ses=83 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204217.494:2121): pid=5929 uid=0 auid=0 ses=83 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1389204217.499:2122): pid=5929 uid=0 auid=0 ses=83 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204217.501:2123): pid=5929 uid=0 auid=0 ses=83 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204217.503:2124): pid=5932 uid=0 auid=0 ses=83 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=5932 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204217.503:2125): pid=5932 uid=0 auid=0 ses=83 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=5932 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRED_REFR msg=audit(1389204217.505:2126): pid=5932 uid=0 auid=0 ses=83 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204217.535:2127): pid=5929 uid=0 auid=0 ses=83 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRED_DISP msg=audit(1389204217.537:2128): pid=5929 uid=0 auid=0 ses=83 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204217.540:2129): pid=5929 uid=0 auid=0 ses=83 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1389204217.542:2130): pid=5929 uid=0 auid=0 ses=83 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204217.542:2131): pid=5929 uid=0 auid=0 ses=83 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=5929 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204217.542:2132): pid=5929 uid=0 auid=0 ses=83 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=5929 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204217.542:2133): pid=5929 uid=0 auid=0 ses=83 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=5929 suid=0 rport=33510 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204220.543:2134): pid=5941 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=5941 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204220.543:2135): pid=5941 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=5941 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204220.545:2136): pid=5940 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=5941 suid=74 rport=33516 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204220.545:2137): pid=5940 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=5941 suid=74 rport=33516 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204221.071:2138): pid=5940 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=33516 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204221.071:2139): pid=5940 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=4096 fp=8b:56:b0:3f:c8:ad:38:a6:94:f4:a7:26:83:75:cc:85 rport=33516 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_ACCT msg=audit(1389204221.076:2140): pid=5940 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204221.077:2141): pid=5940 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=5941 suid=74 rport=33516 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204221.078:2142): pid=5940 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1389204221.080:2143): pid=5940 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=LOGIN msg=audit(1389204221.080:2144): login pid=5940 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=84 >type=USER_ROLE_CHANGE msg=audit(1389204221.123:2145): pid=5940 uid=0 auid=0 ses=84 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204221.138:2146): pid=5940 uid=0 auid=0 ses=84 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1389204221.142:2147): pid=5940 uid=0 auid=0 ses=84 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204221.144:2148): pid=5940 uid=0 auid=0 ses=84 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204221.145:2149): pid=5943 uid=0 auid=0 ses=84 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=5943 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204221.145:2150): pid=5943 uid=0 auid=0 ses=84 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=5943 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRED_REFR msg=audit(1389204221.147:2151): pid=5943 uid=0 auid=0 ses=84 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204221.167:2152): pid=5940 uid=0 auid=0 ses=84 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRED_DISP msg=audit(1389204221.169:2153): pid=5940 uid=0 auid=0 ses=84 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204221.171:2154): pid=5940 uid=0 auid=0 ses=84 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1389204221.173:2155): pid=5940 uid=0 auid=0 ses=84 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204221.173:2156): pid=5940 uid=0 auid=0 ses=84 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=5940 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204221.173:2157): pid=5940 uid=0 auid=0 ses=84 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=5940 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204221.173:2158): pid=5940 uid=0 auid=0 ses=84 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=5940 suid=0 rport=33516 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204224.179:2159): pid=5969 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=5969 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204224.179:2160): pid=5969 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=5969 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204224.181:2161): pid=5968 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=5969 suid=74 rport=33525 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204224.181:2162): pid=5968 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=5969 suid=74 rport=33525 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204224.711:2163): pid=5968 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=33525 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204224.711:2164): pid=5968 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=4096 fp=8b:56:b0:3f:c8:ad:38:a6:94:f4:a7:26:83:75:cc:85 rport=33525 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_ACCT msg=audit(1389204224.716:2165): pid=5968 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204224.717:2166): pid=5968 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=5969 suid=74 rport=33525 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204224.718:2167): pid=5968 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1389204224.720:2168): pid=5968 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=LOGIN msg=audit(1389204224.720:2169): login pid=5968 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=85 >type=USER_ROLE_CHANGE msg=audit(1389204224.759:2170): pid=5968 uid=0 auid=0 ses=85 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204224.774:2171): pid=5968 uid=0 auid=0 ses=85 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1389204224.778:2172): pid=5968 uid=0 auid=0 ses=85 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204224.780:2173): pid=5968 uid=0 auid=0 ses=85 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204224.781:2174): pid=5972 uid=0 auid=0 ses=85 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=5972 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204224.782:2175): pid=5972 uid=0 auid=0 ses=85 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=5972 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRED_REFR msg=audit(1389204224.784:2176): pid=5972 uid=0 auid=0 ses=85 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204224.804:2177): pid=5968 uid=0 auid=0 ses=85 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRED_DISP msg=audit(1389204224.806:2178): pid=5968 uid=0 auid=0 ses=85 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204224.808:2179): pid=5968 uid=0 auid=0 ses=85 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1389204224.810:2180): pid=5968 uid=0 auid=0 ses=85 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204224.810:2181): pid=5968 uid=0 auid=0 ses=85 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=5968 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204224.810:2182): pid=5968 uid=0 auid=0 ses=85 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=5968 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204224.810:2183): pid=5968 uid=0 auid=0 ses=85 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=5968 suid=0 rport=33525 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204227.821:2184): pid=6093 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=6093 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204227.826:2185): pid=6093 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=6093 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204227.828:2186): pid=6092 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=6093 suid=74 rport=33537 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204227.828:2187): pid=6092 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=6093 suid=74 rport=33537 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=NETFILTER_CFG msg=audit(1389204227.863:2188): table=filter family=2 entries=0 >type=SYSCALL msg=audit(1389204227.863:2188): arch=c000003e syscall=272 success=yes exit=0 a0=40000000 a1=c0 a2=0 a3=7fff4dc797b0 items=0 ppid=6088 pid=6100 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=59 tty=(none) comm="ip" exe="/usr/sbin/ip" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null) >type=NETFILTER_CFG msg=audit(1389204227.882:2189): table=filter family=2 entries=0 >type=SYSCALL msg=audit(1389204227.882:2189): arch=c000003e syscall=272 success=yes exit=0 a0=40000000 a1=c0 a2=0 a3=7fff1ad7e190 items=0 ppid=6088 pid=6106 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=59 tty=(none) comm="ip" exe="/usr/sbin/ip" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null) >type=NETFILTER_CFG msg=audit(1389204228.140:2190): table=filter family=2 entries=0 >type=SYSCALL msg=audit(1389204228.140:2190): arch=c000003e syscall=272 success=yes exit=0 a0=40000000 a1=c0 a2=0 a3=7fff21441320 items=0 ppid=6088 pid=6108 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=59 tty=(none) comm="ip" exe="/usr/sbin/ip" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null) >type=USER_AUTH msg=audit(1389204228.355:2191): pid=6092 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=33537 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204228.355:2192): pid=6092 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=4096 fp=8b:56:b0:3f:c8:ad:38:a6:94:f4:a7:26:83:75:cc:85 rport=33537 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_ACCT msg=audit(1389204228.360:2193): pid=6092 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204228.362:2194): pid=6092 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=6093 suid=74 rport=33537 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204228.362:2195): pid=6092 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1389204228.365:2196): pid=6092 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=LOGIN msg=audit(1389204228.365:2197): login pid=6092 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=86 >type=USER_ROLE_CHANGE msg=audit(1389204228.404:2198): pid=6092 uid=0 auid=0 ses=86 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204228.420:2199): pid=6092 uid=0 auid=0 ses=86 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1389204228.424:2200): pid=6092 uid=0 auid=0 ses=86 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204228.426:2201): pid=6092 uid=0 auid=0 ses=86 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204228.427:2202): pid=6124 uid=0 auid=0 ses=86 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=6124 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204228.427:2203): pid=6124 uid=0 auid=0 ses=86 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=6124 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRED_REFR msg=audit(1389204228.429:2204): pid=6124 uid=0 auid=0 ses=86 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204228.448:2205): pid=6092 uid=0 auid=0 ses=86 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRED_DISP msg=audit(1389204228.450:2206): pid=6092 uid=0 auid=0 ses=86 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204228.452:2207): pid=6092 uid=0 auid=0 ses=86 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1389204228.454:2208): pid=6092 uid=0 auid=0 ses=86 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204228.454:2209): pid=6092 uid=0 auid=0 ses=86 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=6092 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204228.454:2210): pid=6092 uid=0 auid=0 ses=86 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=6092 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204228.454:2211): pid=6092 uid=0 auid=0 ses=86 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=6092 suid=0 rport=33537 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204231.468:2212): pid=6157 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=6157 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204231.468:2213): pid=6157 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=6157 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204231.472:2214): pid=6156 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=6157 suid=74 rport=33538 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204231.472:2215): pid=6156 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=6157 suid=74 rport=33538 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204232.005:2216): pid=6156 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=33538 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204232.005:2217): pid=6156 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=4096 fp=8b:56:b0:3f:c8:ad:38:a6:94:f4:a7:26:83:75:cc:85 rport=33538 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_ACCT msg=audit(1389204232.010:2218): pid=6156 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204232.011:2219): pid=6156 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=6157 suid=74 rport=33538 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204232.012:2220): pid=6156 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1389204232.017:2221): pid=6156 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=LOGIN msg=audit(1389204232.017:2222): login pid=6156 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=87 >type=USER_ROLE_CHANGE msg=audit(1389204232.067:2223): pid=6156 uid=0 auid=0 ses=87 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204232.087:2224): pid=6156 uid=0 auid=0 ses=87 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1389204232.093:2225): pid=6156 uid=0 auid=0 ses=87 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204232.095:2226): pid=6156 uid=0 auid=0 ses=87 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204232.097:2227): pid=6163 uid=0 auid=0 ses=87 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=6163 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204232.097:2228): pid=6163 uid=0 auid=0 ses=87 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=6163 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRED_REFR msg=audit(1389204232.099:2229): pid=6163 uid=0 auid=0 ses=87 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204232.120:2230): pid=6156 uid=0 auid=0 ses=87 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRED_DISP msg=audit(1389204232.123:2231): pid=6156 uid=0 auid=0 ses=87 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204232.125:2232): pid=6156 uid=0 auid=0 ses=87 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1389204232.128:2233): pid=6156 uid=0 auid=0 ses=87 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204232.128:2234): pid=6156 uid=0 auid=0 ses=87 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=6156 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204232.128:2235): pid=6156 uid=0 auid=0 ses=87 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=6156 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204232.128:2236): pid=6156 uid=0 auid=0 ses=87 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=6156 suid=0 rport=33538 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204235.137:2237): pid=6172 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=6172 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204235.137:2238): pid=6172 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=6172 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204235.139:2239): pid=6171 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=6172 suid=74 rport=33543 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204235.139:2240): pid=6171 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=6172 suid=74 rport=33543 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204235.663:2241): pid=6171 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=33543 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204235.663:2242): pid=6171 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=4096 fp=8b:56:b0:3f:c8:ad:38:a6:94:f4:a7:26:83:75:cc:85 rport=33543 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_ACCT msg=audit(1389204235.667:2243): pid=6171 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204235.669:2244): pid=6171 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=6172 suid=74 rport=33543 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204235.670:2245): pid=6171 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1389204235.672:2246): pid=6171 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=LOGIN msg=audit(1389204235.672:2247): login pid=6171 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=88 >type=USER_ROLE_CHANGE msg=audit(1389204235.711:2248): pid=6171 uid=0 auid=0 ses=88 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204235.729:2249): pid=6171 uid=0 auid=0 ses=88 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1389204235.733:2250): pid=6171 uid=0 auid=0 ses=88 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204235.736:2251): pid=6171 uid=0 auid=0 ses=88 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204235.737:2252): pid=6174 uid=0 auid=0 ses=88 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=6174 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204235.737:2253): pid=6174 uid=0 auid=0 ses=88 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=6174 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRED_REFR msg=audit(1389204235.739:2254): pid=6174 uid=0 auid=0 ses=88 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204235.760:2255): pid=6171 uid=0 auid=0 ses=88 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRED_DISP msg=audit(1389204235.762:2256): pid=6171 uid=0 auid=0 ses=88 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204235.765:2257): pid=6171 uid=0 auid=0 ses=88 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1389204235.766:2258): pid=6171 uid=0 auid=0 ses=88 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204235.766:2259): pid=6171 uid=0 auid=0 ses=88 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=6171 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204235.767:2260): pid=6171 uid=0 auid=0 ses=88 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=6171 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204235.767:2261): pid=6171 uid=0 auid=0 ses=88 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=6171 suid=0 rport=33543 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204238.770:2262): pid=6183 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=6183 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204238.770:2263): pid=6183 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=6183 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204238.772:2264): pid=6182 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=6183 suid=74 rport=33556 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204238.773:2265): pid=6182 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=6183 suid=74 rport=33556 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204239.300:2266): pid=6182 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=33556 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204239.300:2267): pid=6182 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=4096 fp=8b:56:b0:3f:c8:ad:38:a6:94:f4:a7:26:83:75:cc:85 rport=33556 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_ACCT msg=audit(1389204239.305:2268): pid=6182 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204239.306:2269): pid=6182 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=6183 suid=74 rport=33556 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204239.307:2270): pid=6182 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1389204239.309:2271): pid=6182 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=LOGIN msg=audit(1389204239.309:2272): login pid=6182 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=89 >type=USER_ROLE_CHANGE msg=audit(1389204239.351:2273): pid=6182 uid=0 auid=0 ses=89 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204239.367:2274): pid=6182 uid=0 auid=0 ses=89 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1389204239.372:2275): pid=6182 uid=0 auid=0 ses=89 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204239.374:2276): pid=6182 uid=0 auid=0 ses=89 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204239.376:2277): pid=6185 uid=0 auid=0 ses=89 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=6185 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204239.376:2278): pid=6185 uid=0 auid=0 ses=89 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=6185 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRED_REFR msg=audit(1389204239.378:2279): pid=6185 uid=0 auid=0 ses=89 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204239.397:2280): pid=6182 uid=0 auid=0 ses=89 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRED_DISP msg=audit(1389204239.399:2281): pid=6182 uid=0 auid=0 ses=89 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204239.401:2282): pid=6182 uid=0 auid=0 ses=89 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1389204239.402:2283): pid=6182 uid=0 auid=0 ses=89 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204239.402:2284): pid=6182 uid=0 auid=0 ses=89 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=6182 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204239.402:2285): pid=6182 uid=0 auid=0 ses=89 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=6182 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204239.402:2286): pid=6182 uid=0 auid=0 ses=89 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=6182 suid=0 rport=33556 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204242.408:2287): pid=6194 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=6194 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204242.408:2288): pid=6194 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=6194 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204242.410:2289): pid=6193 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=6194 suid=74 rport=33564 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204242.410:2290): pid=6193 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=6194 suid=74 rport=33564 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204242.933:2291): pid=6193 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=33564 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204242.933:2292): pid=6193 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=4096 fp=8b:56:b0:3f:c8:ad:38:a6:94:f4:a7:26:83:75:cc:85 rport=33564 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_ACCT msg=audit(1389204242.939:2293): pid=6193 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204242.940:2294): pid=6193 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=6194 suid=74 rport=33564 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204242.941:2295): pid=6193 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1389204242.943:2296): pid=6193 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=LOGIN msg=audit(1389204242.943:2297): login pid=6193 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=90 >type=USER_ROLE_CHANGE msg=audit(1389204242.982:2298): pid=6193 uid=0 auid=0 ses=90 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204242.999:2299): pid=6193 uid=0 auid=0 ses=90 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1389204243.003:2300): pid=6193 uid=0 auid=0 ses=90 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204243.005:2301): pid=6193 uid=0 auid=0 ses=90 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204243.006:2302): pid=6196 uid=0 auid=0 ses=90 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=6196 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204243.006:2303): pid=6196 uid=0 auid=0 ses=90 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=6196 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRED_REFR msg=audit(1389204243.009:2304): pid=6196 uid=0 auid=0 ses=90 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204243.034:2305): pid=6193 uid=0 auid=0 ses=90 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRED_DISP msg=audit(1389204243.036:2306): pid=6193 uid=0 auid=0 ses=90 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204243.039:2307): pid=6193 uid=0 auid=0 ses=90 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1389204243.041:2308): pid=6193 uid=0 auid=0 ses=90 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204243.041:2309): pid=6193 uid=0 auid=0 ses=90 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=6193 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204243.041:2310): pid=6193 uid=0 auid=0 ses=90 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=6193 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204243.041:2311): pid=6193 uid=0 auid=0 ses=90 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=6193 suid=0 rport=33564 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=NETFILTER_CFG msg=audit(1389204244.604:2312): table=filter family=2 entries=0 >type=SYSCALL msg=audit(1389204244.604:2312): arch=c000003e syscall=272 success=yes exit=0 a0=40000000 a1=c0 a2=0 a3=7fffa30d3b20 items=0 ppid=6314 pid=6321 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=59 tty=(none) comm="ip" exe="/usr/sbin/ip" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null) >type=NETFILTER_CFG msg=audit(1389204244.621:2313): table=filter family=2 entries=0 >type=SYSCALL msg=audit(1389204244.621:2313): arch=c000003e syscall=272 success=yes exit=0 a0=40000000 a1=c0 a2=0 a3=7fff5d470c50 items=0 ppid=6314 pid=6327 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=59 tty=(none) comm="ip" exe="/usr/sbin/ip" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null) >type=NETFILTER_CFG msg=audit(1389204244.879:2314): table=filter family=2 entries=0 >type=SYSCALL msg=audit(1389204244.879:2314): arch=c000003e syscall=272 success=yes exit=0 a0=40000000 a1=c0 a2=0 a3=7fff9b2b24c0 items=0 ppid=6314 pid=6329 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=59 tty=(none) comm="ip" exe="/usr/sbin/ip" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null) >type=CRYPTO_KEY_USER msg=audit(1389204246.051:2315): pid=6363 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=6363 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204246.051:2316): pid=6363 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=6363 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204246.054:2317): pid=6362 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=6363 suid=74 rport=33567 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204246.054:2318): pid=6362 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=6363 suid=74 rport=33567 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204246.629:2319): pid=6362 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=33567 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204246.629:2320): pid=6362 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=4096 fp=8b:56:b0:3f:c8:ad:38:a6:94:f4:a7:26:83:75:cc:85 rport=33567 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_ACCT msg=audit(1389204246.637:2321): pid=6362 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204246.637:2322): pid=6362 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=6363 suid=74 rport=33567 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204246.639:2323): pid=6362 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1389204246.641:2324): pid=6362 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=LOGIN msg=audit(1389204246.641:2325): login pid=6362 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=91 >type=USER_ROLE_CHANGE msg=audit(1389204246.727:2326): pid=6362 uid=0 auid=0 ses=91 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204246.748:2327): pid=6362 uid=0 auid=0 ses=91 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1389204246.753:2328): pid=6362 uid=0 auid=0 ses=91 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204246.755:2329): pid=6362 uid=0 auid=0 ses=91 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204246.756:2330): pid=6376 uid=0 auid=0 ses=91 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=6376 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204246.756:2331): pid=6376 uid=0 auid=0 ses=91 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=6376 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRED_REFR msg=audit(1389204246.759:2332): pid=6376 uid=0 auid=0 ses=91 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204246.786:2333): pid=6362 uid=0 auid=0 ses=91 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRED_DISP msg=audit(1389204246.788:2334): pid=6362 uid=0 auid=0 ses=91 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204246.790:2335): pid=6362 uid=0 auid=0 ses=91 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1389204246.792:2336): pid=6362 uid=0 auid=0 ses=91 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204246.793:2337): pid=6362 uid=0 auid=0 ses=91 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=6362 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204246.793:2338): pid=6362 uid=0 auid=0 ses=91 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=6362 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204246.793:2339): pid=6362 uid=0 auid=0 ses=91 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=6362 suid=0 rport=33567 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204249.812:2340): pid=6397 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=6397 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204249.812:2341): pid=6397 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=6397 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204249.815:2342): pid=6396 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=6397 suid=74 rport=33575 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204249.815:2343): pid=6396 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=6397 suid=74 rport=33575 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204250.218:2344): pid=6396 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=33575 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204250.218:2345): pid=6396 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=4096 fp=8b:56:b0:3f:c8:ad:38:a6:94:f4:a7:26:83:75:cc:85 rport=33575 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_ACCT msg=audit(1389204250.223:2346): pid=6396 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204250.224:2347): pid=6396 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=6397 suid=74 rport=33575 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204250.225:2348): pid=6396 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1389204250.228:2349): pid=6396 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=LOGIN msg=audit(1389204250.228:2350): login pid=6396 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=92 >type=USER_ROLE_CHANGE msg=audit(1389204250.274:2351): pid=6396 uid=0 auid=0 ses=92 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204250.291:2352): pid=6396 uid=0 auid=0 ses=92 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1389204250.295:2353): pid=6396 uid=0 auid=0 ses=92 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204250.298:2354): pid=6396 uid=0 auid=0 ses=92 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204250.299:2355): pid=6401 uid=0 auid=0 ses=92 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=6401 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204250.299:2356): pid=6401 uid=0 auid=0 ses=92 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=6401 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRED_REFR msg=audit(1389204250.302:2357): pid=6401 uid=0 auid=0 ses=92 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204250.322:2358): pid=6396 uid=0 auid=0 ses=92 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRED_DISP msg=audit(1389204250.327:2359): pid=6396 uid=0 auid=0 ses=92 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204250.330:2360): pid=6396 uid=0 auid=0 ses=92 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1389204250.332:2361): pid=6396 uid=0 auid=0 ses=92 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204250.332:2362): pid=6396 uid=0 auid=0 ses=92 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=6396 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204250.332:2363): pid=6396 uid=0 auid=0 ses=92 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=6396 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204250.332:2364): pid=6396 uid=0 auid=0 ses=92 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=6396 suid=0 rport=33575 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204253.343:2365): pid=6414 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=6414 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204253.343:2366): pid=6414 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=6414 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204253.345:2367): pid=6413 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=6414 suid=74 rport=33582 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204253.345:2368): pid=6413 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=6414 suid=74 rport=33582 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204253.872:2369): pid=6413 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=33582 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204253.872:2370): pid=6413 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=4096 fp=8b:56:b0:3f:c8:ad:38:a6:94:f4:a7:26:83:75:cc:85 rport=33582 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_ACCT msg=audit(1389204253.877:2371): pid=6413 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204253.878:2372): pid=6413 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=6414 suid=74 rport=33582 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204253.879:2373): pid=6413 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1389204253.881:2374): pid=6413 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=LOGIN msg=audit(1389204253.881:2375): login pid=6413 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=93 >type=USER_ROLE_CHANGE msg=audit(1389204253.926:2376): pid=6413 uid=0 auid=0 ses=93 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204253.944:2377): pid=6413 uid=0 auid=0 ses=93 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1389204253.949:2378): pid=6413 uid=0 auid=0 ses=93 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204253.951:2379): pid=6413 uid=0 auid=0 ses=93 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204253.953:2380): pid=6416 uid=0 auid=0 ses=93 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=6416 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204253.953:2381): pid=6416 uid=0 auid=0 ses=93 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=6416 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRED_REFR msg=audit(1389204253.955:2382): pid=6416 uid=0 auid=0 ses=93 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204253.982:2383): pid=6413 uid=0 auid=0 ses=93 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRED_DISP msg=audit(1389204253.984:2384): pid=6413 uid=0 auid=0 ses=93 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204253.986:2385): pid=6413 uid=0 auid=0 ses=93 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1389204253.988:2386): pid=6413 uid=0 auid=0 ses=93 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204253.989:2387): pid=6413 uid=0 auid=0 ses=93 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=6413 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204253.989:2388): pid=6413 uid=0 auid=0 ses=93 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=6413 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204253.989:2389): pid=6413 uid=0 auid=0 ses=93 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=6413 suid=0 rport=33582 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204256.996:2390): pid=6428 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=6428 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=ADD_GROUP msg=audit(1389204256.996:2391): pid=6425 uid=0 auid=0 ses=59 subj=unconfined_u:system_r:groupadd_t:s0-s0:c0.c1023 msg='op=adding group to /etc/group id=161 exe="/usr/sbin/groupadd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204256.998:2392): pid=6428 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=6428 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204257.000:2393): pid=6427 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=6428 suid=74 rport=33583 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204257.001:2394): pid=6427 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=6428 suid=74 rport=33583 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=ADD_GROUP msg=audit(1389204257.002:2395): pid=6425 uid=0 auid=0 ses=59 subj=unconfined_u:system_r:groupadd_t:s0-s0:c0.c1023 msg='op=adding group to /etc/gshadow id=161 exe="/usr/sbin/groupadd" hostname=? addr=? terminal=? res=success' >type=ADD_GROUP msg=audit(1389204257.003:2396): pid=6425 uid=0 auid=0 ses=59 subj=unconfined_u:system_r:groupadd_t:s0-s0:c0.c1023 msg='op= id=161 exe="/usr/sbin/groupadd" hostname=? addr=? terminal=? res=success' >type=ADD_USER msg=audit(1389204257.015:2397): pid=6433 uid=0 auid=0 ses=59 subj=unconfined_u:system_r:useradd_t:s0-s0:c0.c1023 msg='op=adding user id=161 exe="/usr/sbin/useradd" hostname=? addr=? terminal=? res=success' >type=USER_AUTH msg=audit(1389204257.525:2398): pid=6427 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=33583 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204257.525:2399): pid=6427 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=4096 fp=8b:56:b0:3f:c8:ad:38:a6:94:f4:a7:26:83:75:cc:85 rport=33583 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_ACCT msg=audit(1389204257.531:2400): pid=6427 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204257.533:2401): pid=6427 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=6428 suid=74 rport=33583 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204257.534:2402): pid=6427 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1389204257.536:2403): pid=6427 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=LOGIN msg=audit(1389204257.536:2404): login pid=6427 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=94 >type=USER_ROLE_CHANGE msg=audit(1389204257.594:2405): pid=6427 uid=0 auid=0 ses=94 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204257.636:2406): pid=6427 uid=0 auid=0 ses=94 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1389204257.643:2407): pid=6427 uid=0 auid=0 ses=94 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204257.645:2408): pid=6427 uid=0 auid=0 ses=94 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204257.647:2409): pid=6449 uid=0 auid=0 ses=94 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=6449 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204257.647:2410): pid=6449 uid=0 auid=0 ses=94 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=6449 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRED_REFR msg=audit(1389204257.649:2411): pid=6449 uid=0 auid=0 ses=94 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204257.671:2412): pid=6427 uid=0 auid=0 ses=94 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRED_DISP msg=audit(1389204257.673:2413): pid=6427 uid=0 auid=0 ses=94 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204257.675:2414): pid=6427 uid=0 auid=0 ses=94 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1389204257.679:2415): pid=6427 uid=0 auid=0 ses=94 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204257.679:2416): pid=6427 uid=0 auid=0 ses=94 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=6427 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204257.679:2417): pid=6427 uid=0 auid=0 ses=94 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=6427 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204257.679:2418): pid=6427 uid=0 auid=0 ses=94 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=6427 suid=0 rport=33583 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=NETFILTER_CFG msg=audit(1389204258.468:2419): table=filter family=2 entries=7 >type=SYSCALL msg=audit(1389204258.468:2419): arch=c000003e syscall=54 success=yes exit=0 a0=3 a1=0 a2=40 a3=1c234f0 items=0 ppid=5903 pid=6466 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=59 tty=(none) comm="iptables" exe="/usr/sbin/xtables-multi" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null) >type=SERVICE_START msg=audit(1389204260.539:2420): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="openstack-glance-registry" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204260.697:2421): pid=6537 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=6537 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204260.699:2422): pid=6537 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=6537 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204260.702:2423): pid=6534 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=6537 suid=74 rport=33589 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204260.703:2424): pid=6534 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=6537 suid=74 rport=33589 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=SERVICE_START msg=audit(1389204260.788:2425): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="openstack-glance-api" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=USER_AUTH msg=audit(1389204261.239:2426): pid=6534 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=33589 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204261.239:2427): pid=6534 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=4096 fp=8b:56:b0:3f:c8:ad:38:a6:94:f4:a7:26:83:75:cc:85 rport=33589 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_ACCT msg=audit(1389204261.247:2428): pid=6534 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204261.249:2429): pid=6534 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=6537 suid=74 rport=33589 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204261.250:2430): pid=6534 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1389204261.255:2431): pid=6534 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=LOGIN msg=audit(1389204261.255:2432): login pid=6534 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=95 >type=USER_ROLE_CHANGE msg=audit(1389204261.431:2433): pid=6534 uid=0 auid=0 ses=95 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204261.541:2434): pid=6534 uid=0 auid=0 ses=95 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1389204261.547:2435): pid=6534 uid=0 auid=0 ses=95 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204261.551:2436): pid=6534 uid=0 auid=0 ses=95 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204261.553:2437): pid=6582 uid=0 auid=0 ses=95 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=6582 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204261.553:2438): pid=6582 uid=0 auid=0 ses=95 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=6582 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRED_REFR msg=audit(1389204261.556:2439): pid=6582 uid=0 auid=0 ses=95 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204261.597:2440): pid=6534 uid=0 auid=0 ses=95 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRED_DISP msg=audit(1389204261.598:2441): pid=6534 uid=0 auid=0 ses=95 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204261.600:2442): pid=6534 uid=0 auid=0 ses=95 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1389204261.602:2443): pid=6534 uid=0 auid=0 ses=95 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204261.602:2444): pid=6534 uid=0 auid=0 ses=95 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=6534 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204261.602:2445): pid=6534 uid=0 auid=0 ses=95 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=6534 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204261.602:2446): pid=6534 uid=0 auid=0 ses=95 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=6534 suid=0 rport=33589 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204264.610:2447): pid=6605 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=6605 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204264.611:2448): pid=6605 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=6605 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204264.612:2449): pid=6604 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=6605 suid=74 rport=33592 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204264.613:2450): pid=6604 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=6605 suid=74 rport=33592 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204265.159:2451): pid=6604 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=33592 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204265.159:2452): pid=6604 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=4096 fp=8b:56:b0:3f:c8:ad:38:a6:94:f4:a7:26:83:75:cc:85 rport=33592 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_ACCT msg=audit(1389204265.164:2453): pid=6604 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204265.165:2454): pid=6604 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=6605 suid=74 rport=33592 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204265.165:2455): pid=6604 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1389204265.168:2456): pid=6604 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=LOGIN msg=audit(1389204265.168:2457): login pid=6604 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=96 >type=USER_ROLE_CHANGE msg=audit(1389204265.210:2458): pid=6604 uid=0 auid=0 ses=96 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204265.226:2459): pid=6604 uid=0 auid=0 ses=96 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1389204265.230:2460): pid=6604 uid=0 auid=0 ses=96 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204265.231:2461): pid=6604 uid=0 auid=0 ses=96 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204265.233:2462): pid=6607 uid=0 auid=0 ses=96 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=6607 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204265.233:2463): pid=6607 uid=0 auid=0 ses=96 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=6607 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRED_REFR msg=audit(1389204265.235:2464): pid=6607 uid=0 auid=0 ses=96 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204265.252:2465): pid=6604 uid=0 auid=0 ses=96 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRED_DISP msg=audit(1389204265.254:2466): pid=6604 uid=0 auid=0 ses=96 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204265.256:2467): pid=6604 uid=0 auid=0 ses=96 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1389204265.258:2468): pid=6604 uid=0 auid=0 ses=96 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204265.258:2469): pid=6604 uid=0 auid=0 ses=96 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=6604 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204265.258:2470): pid=6604 uid=0 auid=0 ses=96 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=6604 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204265.258:2471): pid=6604 uid=0 auid=0 ses=96 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=6604 suid=0 rport=33592 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204265.276:2472): pid=6616 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=6616 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204265.276:2473): pid=6616 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=6616 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204265.278:2474): pid=6615 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=6616 suid=74 rport=33595 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204265.278:2475): pid=6615 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=6616 suid=74 rport=33595 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204265.804:2476): pid=6615 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=33595 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204265.804:2477): pid=6615 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=4096 fp=8b:56:b0:3f:c8:ad:38:a6:94:f4:a7:26:83:75:cc:85 rport=33595 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_ACCT msg=audit(1389204265.811:2478): pid=6615 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204265.812:2479): pid=6615 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=6616 suid=74 rport=33595 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204265.813:2480): pid=6615 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1389204265.815:2481): pid=6615 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=LOGIN msg=audit(1389204265.815:2482): login pid=6615 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=97 >type=USER_ROLE_CHANGE msg=audit(1389204265.860:2483): pid=6615 uid=0 auid=0 ses=97 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204265.879:2484): pid=6615 uid=0 auid=0 ses=97 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1389204265.885:2485): pid=6615 uid=0 auid=0 ses=97 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204265.887:2486): pid=6615 uid=0 auid=0 ses=97 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204265.888:2487): pid=6618 uid=0 auid=0 ses=97 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=6618 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204265.888:2488): pid=6618 uid=0 auid=0 ses=97 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=6618 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRED_REFR msg=audit(1389204265.890:2489): pid=6618 uid=0 auid=0 ses=97 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204265.912:2490): pid=6615 uid=0 auid=0 ses=97 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRED_DISP msg=audit(1389204265.914:2491): pid=6615 uid=0 auid=0 ses=97 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204265.917:2492): pid=6615 uid=0 auid=0 ses=97 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1389204265.919:2493): pid=6615 uid=0 auid=0 ses=97 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204265.919:2494): pid=6615 uid=0 auid=0 ses=97 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=6615 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204265.919:2495): pid=6615 uid=0 auid=0 ses=97 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=6615 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204265.919:2496): pid=6615 uid=0 auid=0 ses=97 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=6615 suid=0 rport=33595 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204268.922:2497): pid=6627 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=6627 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204268.922:2498): pid=6627 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=6627 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204268.925:2499): pid=6626 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=6627 suid=74 rport=33605 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204268.925:2500): pid=6626 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=6627 suid=74 rport=33605 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204269.451:2501): pid=6626 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=33605 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204269.451:2502): pid=6626 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=4096 fp=8b:56:b0:3f:c8:ad:38:a6:94:f4:a7:26:83:75:cc:85 rport=33605 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_ACCT msg=audit(1389204269.457:2503): pid=6626 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204269.458:2504): pid=6626 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=6627 suid=74 rport=33605 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204269.459:2505): pid=6626 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1389204269.462:2506): pid=6626 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=LOGIN msg=audit(1389204269.462:2507): login pid=6626 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=98 >type=USER_ROLE_CHANGE msg=audit(1389204269.511:2508): pid=6626 uid=0 auid=0 ses=98 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204269.531:2509): pid=6626 uid=0 auid=0 ses=98 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1389204269.537:2510): pid=6626 uid=0 auid=0 ses=98 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204269.540:2511): pid=6626 uid=0 auid=0 ses=98 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204269.541:2512): pid=6629 uid=0 auid=0 ses=98 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=6629 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204269.542:2513): pid=6629 uid=0 auid=0 ses=98 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=6629 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRED_REFR msg=audit(1389204269.545:2514): pid=6629 uid=0 auid=0 ses=98 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204269.572:2515): pid=6626 uid=0 auid=0 ses=98 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRED_DISP msg=audit(1389204269.575:2516): pid=6626 uid=0 auid=0 ses=98 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204269.577:2517): pid=6626 uid=0 auid=0 ses=98 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1389204269.580:2518): pid=6626 uid=0 auid=0 ses=98 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204269.580:2519): pid=6626 uid=0 auid=0 ses=98 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=6626 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204269.580:2520): pid=6626 uid=0 auid=0 ses=98 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=6626 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204269.580:2521): pid=6626 uid=0 auid=0 ses=98 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=6626 suid=0 rport=33605 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204272.584:2522): pid=6638 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=6638 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204272.584:2523): pid=6638 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=6638 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204272.586:2524): pid=6637 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=6638 suid=74 rport=33614 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204272.586:2525): pid=6637 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=6638 suid=74 rport=33614 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204273.116:2526): pid=6637 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=33614 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204273.116:2527): pid=6637 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=4096 fp=8b:56:b0:3f:c8:ad:38:a6:94:f4:a7:26:83:75:cc:85 rport=33614 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_ACCT msg=audit(1389204273.121:2528): pid=6637 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204273.122:2529): pid=6637 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=6638 suid=74 rport=33614 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204273.123:2530): pid=6637 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1389204273.126:2531): pid=6637 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=LOGIN msg=audit(1389204273.126:2532): login pid=6637 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=99 >type=USER_ROLE_CHANGE msg=audit(1389204273.165:2533): pid=6637 uid=0 auid=0 ses=99 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204273.181:2534): pid=6637 uid=0 auid=0 ses=99 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1389204273.185:2535): pid=6637 uid=0 auid=0 ses=99 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204273.187:2536): pid=6637 uid=0 auid=0 ses=99 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204273.188:2537): pid=6640 uid=0 auid=0 ses=99 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=6640 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204273.188:2538): pid=6640 uid=0 auid=0 ses=99 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=6640 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRED_REFR msg=audit(1389204273.190:2539): pid=6640 uid=0 auid=0 ses=99 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204273.209:2540): pid=6637 uid=0 auid=0 ses=99 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRED_DISP msg=audit(1389204273.211:2541): pid=6637 uid=0 auid=0 ses=99 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204273.213:2542): pid=6637 uid=0 auid=0 ses=99 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1389204273.215:2543): pid=6637 uid=0 auid=0 ses=99 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204273.215:2544): pid=6637 uid=0 auid=0 ses=99 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=6637 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204273.215:2545): pid=6637 uid=0 auid=0 ses=99 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=6637 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204273.215:2546): pid=6637 uid=0 auid=0 ses=99 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=6637 suid=0 rport=33614 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204276.220:2547): pid=6649 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=6649 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204276.220:2548): pid=6649 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=6649 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204276.222:2549): pid=6648 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=6649 suid=74 rport=33618 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204276.222:2550): pid=6648 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=6649 suid=74 rport=33618 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204276.751:2551): pid=6648 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=33618 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204276.751:2552): pid=6648 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=4096 fp=8b:56:b0:3f:c8:ad:38:a6:94:f4:a7:26:83:75:cc:85 rport=33618 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_ACCT msg=audit(1389204276.756:2553): pid=6648 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204276.757:2554): pid=6648 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=6649 suid=74 rport=33618 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204276.758:2555): pid=6648 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1389204276.760:2556): pid=6648 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=LOGIN msg=audit(1389204276.760:2557): login pid=6648 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=100 >type=USER_ROLE_CHANGE msg=audit(1389204276.797:2558): pid=6648 uid=0 auid=0 ses=100 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204276.812:2559): pid=6648 uid=0 auid=0 ses=100 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1389204276.816:2560): pid=6648 uid=0 auid=0 ses=100 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204276.818:2561): pid=6648 uid=0 auid=0 ses=100 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204276.820:2562): pid=6669 uid=0 auid=0 ses=100 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=6669 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204276.820:2563): pid=6669 uid=0 auid=0 ses=100 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=6669 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRED_REFR msg=audit(1389204276.822:2564): pid=6669 uid=0 auid=0 ses=100 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204276.842:2565): pid=6648 uid=0 auid=0 ses=100 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRED_DISP msg=audit(1389204276.844:2566): pid=6648 uid=0 auid=0 ses=100 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204276.846:2567): pid=6648 uid=0 auid=0 ses=100 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1389204276.848:2568): pid=6648 uid=0 auid=0 ses=100 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204276.848:2569): pid=6648 uid=0 auid=0 ses=100 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=6648 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204276.848:2570): pid=6648 uid=0 auid=0 ses=100 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=6648 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204276.848:2571): pid=6648 uid=0 auid=0 ses=100 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=6648 suid=0 rport=33618 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=NETFILTER_CFG msg=audit(1389204277.159:2572): table=filter family=2 entries=0 >type=SYSCALL msg=audit(1389204277.159:2572): arch=c000003e syscall=272 success=yes exit=0 a0=40000000 a1=c0 a2=0 a3=7fff8f7aa250 items=0 ppid=6767 pid=6774 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=60 tty=(none) comm="ip" exe="/usr/sbin/ip" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null) >type=NETFILTER_CFG msg=audit(1389204277.175:2573): table=filter family=2 entries=0 >type=SYSCALL msg=audit(1389204277.175:2573): arch=c000003e syscall=272 success=yes exit=0 a0=40000000 a1=c0 a2=0 a3=7fff20add230 items=0 ppid=6767 pid=6780 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=60 tty=(none) comm="ip" exe="/usr/sbin/ip" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null) >type=NETFILTER_CFG msg=audit(1389204277.432:2574): table=filter family=2 entries=0 >type=SYSCALL msg=audit(1389204277.432:2574): arch=c000003e syscall=272 success=yes exit=0 a0=40000000 a1=c0 a2=0 a3=7fff7d61bbe0 items=0 ppid=6767 pid=6782 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=60 tty=(none) comm="ip" exe="/usr/sbin/ip" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null) >type=CRYPTO_KEY_USER msg=audit(1389204279.860:2575): pid=6848 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=6848 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204279.860:2576): pid=6848 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=6848 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204279.862:2577): pid=6847 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=6848 suid=74 rport=33621 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204279.862:2578): pid=6847 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=6848 suid=74 rport=33621 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204280.384:2579): pid=6847 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=33621 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204280.384:2580): pid=6847 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=4096 fp=8b:56:b0:3f:c8:ad:38:a6:94:f4:a7:26:83:75:cc:85 rport=33621 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_ACCT msg=audit(1389204280.389:2581): pid=6847 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204280.390:2582): pid=6847 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=6848 suid=74 rport=33621 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204280.391:2583): pid=6847 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1389204280.393:2584): pid=6847 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=LOGIN msg=audit(1389204280.393:2585): login pid=6847 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=101 >type=USER_ROLE_CHANGE msg=audit(1389204280.438:2586): pid=6847 uid=0 auid=0 ses=101 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204280.457:2587): pid=6847 uid=0 auid=0 ses=101 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1389204280.461:2588): pid=6847 uid=0 auid=0 ses=101 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204280.464:2589): pid=6847 uid=0 auid=0 ses=101 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204280.465:2590): pid=6851 uid=0 auid=0 ses=101 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=6851 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204280.465:2591): pid=6851 uid=0 auid=0 ses=101 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=6851 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRED_REFR msg=audit(1389204280.468:2592): pid=6851 uid=0 auid=0 ses=101 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204280.489:2593): pid=6847 uid=0 auid=0 ses=101 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRED_DISP msg=audit(1389204280.491:2594): pid=6847 uid=0 auid=0 ses=101 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204280.493:2595): pid=6847 uid=0 auid=0 ses=101 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1389204280.495:2596): pid=6847 uid=0 auid=0 ses=101 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204280.495:2597): pid=6847 uid=0 auid=0 ses=101 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=6847 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204280.495:2598): pid=6847 uid=0 auid=0 ses=101 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=6847 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204280.495:2599): pid=6847 uid=0 auid=0 ses=101 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=6847 suid=0 rport=33621 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204283.504:2600): pid=6860 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=6860 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204283.505:2601): pid=6860 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=6860 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204283.507:2602): pid=6859 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=6860 suid=74 rport=33631 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204283.507:2603): pid=6859 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=6860 suid=74 rport=33631 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204284.047:2604): pid=6859 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=33631 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204284.047:2605): pid=6859 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=4096 fp=8b:56:b0:3f:c8:ad:38:a6:94:f4:a7:26:83:75:cc:85 rport=33631 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_ACCT msg=audit(1389204284.051:2606): pid=6859 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204284.053:2607): pid=6859 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=6860 suid=74 rport=33631 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204284.054:2608): pid=6859 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1389204284.056:2609): pid=6859 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=LOGIN msg=audit(1389204284.056:2610): login pid=6859 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=102 >type=USER_ROLE_CHANGE msg=audit(1389204284.099:2611): pid=6859 uid=0 auid=0 ses=102 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204284.116:2612): pid=6859 uid=0 auid=0 ses=102 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1389204284.120:2613): pid=6859 uid=0 auid=0 ses=102 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204284.122:2614): pid=6859 uid=0 auid=0 ses=102 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204284.124:2615): pid=6862 uid=0 auid=0 ses=102 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=6862 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204284.124:2616): pid=6862 uid=0 auid=0 ses=102 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=6862 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRED_REFR msg=audit(1389204284.126:2617): pid=6862 uid=0 auid=0 ses=102 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204284.152:2618): pid=6859 uid=0 auid=0 ses=102 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRED_DISP msg=audit(1389204284.154:2619): pid=6859 uid=0 auid=0 ses=102 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204284.156:2620): pid=6859 uid=0 auid=0 ses=102 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1389204284.158:2621): pid=6859 uid=0 auid=0 ses=102 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204284.158:2622): pid=6859 uid=0 auid=0 ses=102 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=6859 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204284.158:2623): pid=6859 uid=0 auid=0 ses=102 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=6859 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204284.158:2624): pid=6859 uid=0 auid=0 ses=102 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=6859 suid=0 rport=33631 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204287.158:2625): pid=6871 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=6871 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204287.158:2626): pid=6871 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=6871 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204287.160:2627): pid=6870 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=6871 suid=74 rport=33636 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204287.161:2628): pid=6870 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=6871 suid=74 rport=33636 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204288.587:2629): pid=6870 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=33636 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204288.587:2630): pid=6870 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=4096 fp=8b:56:b0:3f:c8:ad:38:a6:94:f4:a7:26:83:75:cc:85 rport=33636 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_ACCT msg=audit(1389204288.592:2631): pid=6870 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204288.593:2632): pid=6870 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=6871 suid=74 rport=33636 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204288.594:2633): pid=6870 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1389204288.596:2634): pid=6870 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=LOGIN msg=audit(1389204288.596:2635): login pid=6870 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=103 >type=USER_ROLE_CHANGE msg=audit(1389204288.637:2636): pid=6870 uid=0 auid=0 ses=103 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204288.653:2637): pid=6870 uid=0 auid=0 ses=103 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1389204288.657:2638): pid=6870 uid=0 auid=0 ses=103 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204288.659:2639): pid=6870 uid=0 auid=0 ses=103 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204288.660:2640): pid=6873 uid=0 auid=0 ses=103 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=6873 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204288.661:2641): pid=6873 uid=0 auid=0 ses=103 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=6873 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRED_REFR msg=audit(1389204288.663:2642): pid=6873 uid=0 auid=0 ses=103 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204288.681:2643): pid=6870 uid=0 auid=0 ses=103 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRED_DISP msg=audit(1389204288.683:2644): pid=6870 uid=0 auid=0 ses=103 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204288.686:2645): pid=6870 uid=0 auid=0 ses=103 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1389204288.687:2646): pid=6870 uid=0 auid=0 ses=103 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204288.688:2647): pid=6870 uid=0 auid=0 ses=103 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=6870 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204288.688:2648): pid=6870 uid=0 auid=0 ses=103 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=6870 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204288.688:2649): pid=6870 uid=0 auid=0 ses=103 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=6870 suid=0 rport=33636 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=NETFILTER_CFG msg=audit(1389204291.322:2650): table=filter family=2 entries=0 >type=SYSCALL msg=audit(1389204291.322:2650): arch=c000003e syscall=272 success=yes exit=0 a0=40000000 a1=c0 a2=0 a3=7fff756e5b00 items=0 ppid=6991 pid=6998 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=60 tty=(none) comm="ip" exe="/usr/sbin/ip" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null) >type=NETFILTER_CFG msg=audit(1389204291.338:2651): table=filter family=2 entries=0 >type=SYSCALL msg=audit(1389204291.338:2651): arch=c000003e syscall=272 success=yes exit=0 a0=40000000 a1=c0 a2=0 a3=7fff5ac5a050 items=0 ppid=6991 pid=7004 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=60 tty=(none) comm="ip" exe="/usr/sbin/ip" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null) >type=NETFILTER_CFG msg=audit(1389204291.594:2652): table=filter family=2 entries=0 >type=SYSCALL msg=audit(1389204291.594:2652): arch=c000003e syscall=272 success=yes exit=0 a0=40000000 a1=c0 a2=0 a3=7fff4a9bc110 items=0 ppid=6991 pid=7006 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=60 tty=(none) comm="ip" exe="/usr/sbin/ip" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null) >type=CRYPTO_KEY_USER msg=audit(1389204291.693:2653): pid=7025 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=7025 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204291.693:2654): pid=7025 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=7025 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204291.695:2655): pid=7024 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=7025 suid=74 rport=33648 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204291.695:2656): pid=7024 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=7025 suid=74 rport=33648 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204292.220:2657): pid=7024 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=33648 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204292.220:2658): pid=7024 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=4096 fp=8b:56:b0:3f:c8:ad:38:a6:94:f4:a7:26:83:75:cc:85 rport=33648 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_ACCT msg=audit(1389204292.224:2659): pid=7024 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204292.225:2660): pid=7024 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=7025 suid=74 rport=33648 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204292.226:2661): pid=7024 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1389204292.228:2662): pid=7024 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=LOGIN msg=audit(1389204292.228:2663): login pid=7024 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=104 >type=USER_ROLE_CHANGE msg=audit(1389204292.268:2664): pid=7024 uid=0 auid=0 ses=104 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204292.282:2665): pid=7024 uid=0 auid=0 ses=104 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1389204292.287:2666): pid=7024 uid=0 auid=0 ses=104 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204292.288:2667): pid=7024 uid=0 auid=0 ses=104 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204292.290:2668): pid=7027 uid=0 auid=0 ses=104 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=7027 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204292.290:2669): pid=7027 uid=0 auid=0 ses=104 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=7027 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRED_REFR msg=audit(1389204292.292:2670): pid=7027 uid=0 auid=0 ses=104 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204292.310:2671): pid=7024 uid=0 auid=0 ses=104 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRED_DISP msg=audit(1389204292.312:2672): pid=7024 uid=0 auid=0 ses=104 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204292.314:2673): pid=7024 uid=0 auid=0 ses=104 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1389204292.316:2674): pid=7024 uid=0 auid=0 ses=104 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204292.316:2675): pid=7024 uid=0 auid=0 ses=104 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=7024 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204292.316:2676): pid=7024 uid=0 auid=0 ses=104 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=7024 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204292.316:2677): pid=7024 uid=0 auid=0 ses=104 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=7024 suid=0 rport=33648 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204295.331:2678): pid=7062 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=7062 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204295.331:2679): pid=7062 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=7062 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204295.333:2680): pid=7061 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=7062 suid=74 rport=33649 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204295.333:2681): pid=7061 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=7062 suid=74 rport=33649 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204295.862:2682): pid=7061 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=33649 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204295.862:2683): pid=7061 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=4096 fp=8b:56:b0:3f:c8:ad:38:a6:94:f4:a7:26:83:75:cc:85 rport=33649 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_ACCT msg=audit(1389204295.868:2684): pid=7061 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204295.870:2685): pid=7061 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=7062 suid=74 rport=33649 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204295.870:2686): pid=7061 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1389204295.872:2687): pid=7061 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=LOGIN msg=audit(1389204295.872:2688): login pid=7061 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=105 >type=USER_ROLE_CHANGE msg=audit(1389204295.958:2689): pid=7061 uid=0 auid=0 ses=105 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204295.982:2690): pid=7061 uid=0 auid=0 ses=105 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1389204295.986:2691): pid=7061 uid=0 auid=0 ses=105 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204295.988:2692): pid=7061 uid=0 auid=0 ses=105 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204295.989:2693): pid=7064 uid=0 auid=0 ses=105 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=7064 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204295.989:2694): pid=7064 uid=0 auid=0 ses=105 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=7064 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRED_REFR msg=audit(1389204295.992:2695): pid=7064 uid=0 auid=0 ses=105 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204296.021:2696): pid=7061 uid=0 auid=0 ses=105 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRED_DISP msg=audit(1389204296.023:2697): pid=7061 uid=0 auid=0 ses=105 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204296.025:2698): pid=7061 uid=0 auid=0 ses=105 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1389204296.028:2699): pid=7061 uid=0 auid=0 ses=105 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204296.028:2700): pid=7061 uid=0 auid=0 ses=105 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=7061 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204296.028:2701): pid=7061 uid=0 auid=0 ses=105 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=7061 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204296.028:2702): pid=7061 uid=0 auid=0 ses=105 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=7061 suid=0 rport=33649 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204299.031:2703): pid=7083 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=7083 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204299.031:2704): pid=7083 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=7083 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204299.034:2705): pid=7082 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=7083 suid=74 rport=33657 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204299.034:2706): pid=7082 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=7083 suid=74 rport=33657 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204299.560:2707): pid=7082 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=33657 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204299.560:2708): pid=7082 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=4096 fp=8b:56:b0:3f:c8:ad:38:a6:94:f4:a7:26:83:75:cc:85 rport=33657 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_ACCT msg=audit(1389204299.565:2709): pid=7082 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204299.566:2710): pid=7082 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=7083 suid=74 rport=33657 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204299.567:2711): pid=7082 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1389204299.569:2712): pid=7082 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=LOGIN msg=audit(1389204299.569:2713): login pid=7082 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=106 >type=USER_ROLE_CHANGE msg=audit(1389204299.609:2714): pid=7082 uid=0 auid=0 ses=106 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204299.624:2715): pid=7082 uid=0 auid=0 ses=106 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1389204299.628:2716): pid=7082 uid=0 auid=0 ses=106 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204299.630:2717): pid=7082 uid=0 auid=0 ses=106 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204299.635:2718): pid=7085 uid=0 auid=0 ses=106 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=7085 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204299.635:2719): pid=7085 uid=0 auid=0 ses=106 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=7085 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRED_REFR msg=audit(1389204299.637:2720): pid=7085 uid=0 auid=0 ses=106 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204299.666:2721): pid=7082 uid=0 auid=0 ses=106 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRED_DISP msg=audit(1389204299.668:2722): pid=7082 uid=0 auid=0 ses=106 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204299.670:2723): pid=7082 uid=0 auid=0 ses=106 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1389204299.672:2724): pid=7082 uid=0 auid=0 ses=106 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204299.672:2725): pid=7082 uid=0 auid=0 ses=106 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=7082 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204299.672:2726): pid=7082 uid=0 auid=0 ses=106 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=7082 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204299.672:2727): pid=7082 uid=0 auid=0 ses=106 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=7082 suid=0 rport=33657 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=NETFILTER_CFG msg=audit(1389204301.659:2728): table=filter family=2 entries=8 >type=SYSCALL msg=audit(1389204301.659:2728): arch=c000003e syscall=54 success=yes exit=0 a0=3 a1=0 a2=40 a3=2520950 items=0 ppid=6588 pid=7115 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=60 tty=(none) comm="iptables" exe="/usr/sbin/xtables-multi" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null) >type=CRYPTO_KEY_USER msg=audit(1389204302.685:2729): pid=7128 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=7128 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204302.686:2730): pid=7128 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=7128 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204302.689:2731): pid=7127 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=7128 suid=74 rport=33658 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204302.689:2732): pid=7127 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=7128 suid=74 rport=33658 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204303.230:2733): pid=7127 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=33658 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204303.230:2734): pid=7127 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=4096 fp=8b:56:b0:3f:c8:ad:38:a6:94:f4:a7:26:83:75:cc:85 rport=33658 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_ACCT msg=audit(1389204303.236:2735): pid=7127 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204303.236:2736): pid=7127 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=7128 suid=74 rport=33658 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204303.237:2737): pid=7127 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1389204303.240:2738): pid=7127 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=LOGIN msg=audit(1389204303.240:2739): login pid=7127 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=107 >type=USER_ROLE_CHANGE msg=audit(1389204303.323:2740): pid=7127 uid=0 auid=0 ses=107 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204303.376:2741): pid=7127 uid=0 auid=0 ses=107 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1389204303.381:2742): pid=7127 uid=0 auid=0 ses=107 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204303.384:2743): pid=7127 uid=0 auid=0 ses=107 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204303.385:2744): pid=7130 uid=0 auid=0 ses=107 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=7130 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204303.386:2745): pid=7130 uid=0 auid=0 ses=107 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=7130 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRED_REFR msg=audit(1389204303.388:2746): pid=7130 uid=0 auid=0 ses=107 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204303.416:2747): pid=7127 uid=0 auid=0 ses=107 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRED_DISP msg=audit(1389204303.418:2748): pid=7127 uid=0 auid=0 ses=107 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204303.420:2749): pid=7127 uid=0 auid=0 ses=107 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1389204303.422:2750): pid=7127 uid=0 auid=0 ses=107 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204303.423:2751): pid=7127 uid=0 auid=0 ses=107 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=7127 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204303.423:2752): pid=7127 uid=0 auid=0 ses=107 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=7127 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204303.423:2753): pid=7127 uid=0 auid=0 ses=107 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=7127 suid=0 rport=33658 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204306.439:2754): pid=7152 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=7152 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204306.441:2755): pid=7152 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=7152 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204306.443:2756): pid=7151 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=7152 suid=74 rport=33665 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204306.443:2757): pid=7151 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=7152 suid=74 rport=33665 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204307.085:2758): pid=7151 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=33665 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204307.085:2759): pid=7151 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=4096 fp=8b:56:b0:3f:c8:ad:38:a6:94:f4:a7:26:83:75:cc:85 rport=33665 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_ACCT msg=audit(1389204307.091:2760): pid=7151 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204307.092:2761): pid=7151 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=7152 suid=74 rport=33665 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204307.093:2762): pid=7151 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1389204307.096:2763): pid=7151 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=LOGIN msg=audit(1389204307.096:2764): login pid=7151 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=108 >type=USER_ROLE_CHANGE msg=audit(1389204307.140:2765): pid=7151 uid=0 auid=0 ses=108 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204307.157:2766): pid=7151 uid=0 auid=0 ses=108 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1389204307.161:2767): pid=7151 uid=0 auid=0 ses=108 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204307.163:2768): pid=7151 uid=0 auid=0 ses=108 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204307.164:2769): pid=7159 uid=0 auid=0 ses=108 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=7159 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204307.164:2770): pid=7159 uid=0 auid=0 ses=108 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=7159 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRED_REFR msg=audit(1389204307.169:2771): pid=7159 uid=0 auid=0 ses=108 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204307.197:2772): pid=7151 uid=0 auid=0 ses=108 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRED_DISP msg=audit(1389204307.199:2773): pid=7151 uid=0 auid=0 ses=108 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204307.202:2774): pid=7151 uid=0 auid=0 ses=108 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1389204307.204:2775): pid=7151 uid=0 auid=0 ses=108 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204307.204:2776): pid=7151 uid=0 auid=0 ses=108 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=7151 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204307.204:2777): pid=7151 uid=0 auid=0 ses=108 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=7151 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204307.204:2778): pid=7151 uid=0 auid=0 ses=108 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=7151 suid=0 rport=33665 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204310.205:2779): pid=7172 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=7172 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204310.205:2780): pid=7172 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=7172 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204310.207:2781): pid=7171 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=7172 suid=74 rport=33676 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204310.207:2782): pid=7171 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=7172 suid=74 rport=33676 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204310.733:2783): pid=7171 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=33676 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204310.733:2784): pid=7171 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=4096 fp=8b:56:b0:3f:c8:ad:38:a6:94:f4:a7:26:83:75:cc:85 rport=33676 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_ACCT msg=audit(1389204310.738:2785): pid=7171 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204310.738:2786): pid=7171 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=7172 suid=74 rport=33676 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204310.739:2787): pid=7171 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1389204310.741:2788): pid=7171 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=LOGIN msg=audit(1389204310.741:2789): login pid=7171 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=109 >type=USER_ROLE_CHANGE msg=audit(1389204310.780:2790): pid=7171 uid=0 auid=0 ses=109 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204310.796:2791): pid=7171 uid=0 auid=0 ses=109 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1389204310.800:2792): pid=7171 uid=0 auid=0 ses=109 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204310.801:2793): pid=7171 uid=0 auid=0 ses=109 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204310.803:2794): pid=7174 uid=0 auid=0 ses=109 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=7174 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204310.803:2795): pid=7174 uid=0 auid=0 ses=109 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=7174 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRED_REFR msg=audit(1389204310.805:2796): pid=7174 uid=0 auid=0 ses=109 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204310.824:2797): pid=7171 uid=0 auid=0 ses=109 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRED_DISP msg=audit(1389204310.826:2798): pid=7171 uid=0 auid=0 ses=109 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204310.828:2799): pid=7171 uid=0 auid=0 ses=109 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1389204310.830:2800): pid=7171 uid=0 auid=0 ses=109 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204310.830:2801): pid=7171 uid=0 auid=0 ses=109 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=7171 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204310.830:2802): pid=7171 uid=0 auid=0 ses=109 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=7171 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204310.831:2803): pid=7171 uid=0 auid=0 ses=109 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=7171 suid=0 rport=33676 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204313.847:2804): pid=7191 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=7191 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204313.847:2805): pid=7191 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=7191 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204313.851:2806): pid=7190 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=7191 suid=74 rport=33677 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204313.851:2807): pid=7190 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=7191 suid=74 rport=33677 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204314.381:2808): pid=7190 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=33677 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204314.381:2809): pid=7190 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=4096 fp=8b:56:b0:3f:c8:ad:38:a6:94:f4:a7:26:83:75:cc:85 rport=33677 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_ACCT msg=audit(1389204314.386:2810): pid=7190 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204314.387:2811): pid=7190 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=7191 suid=74 rport=33677 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204314.387:2812): pid=7190 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1389204314.390:2813): pid=7190 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=LOGIN msg=audit(1389204314.390:2814): login pid=7190 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=110 >type=USER_ROLE_CHANGE msg=audit(1389204314.430:2815): pid=7190 uid=0 auid=0 ses=110 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204314.447:2816): pid=7190 uid=0 auid=0 ses=110 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1389204314.452:2817): pid=7190 uid=0 auid=0 ses=110 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204314.454:2818): pid=7190 uid=0 auid=0 ses=110 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204314.455:2819): pid=7193 uid=0 auid=0 ses=110 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=7193 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204314.455:2820): pid=7193 uid=0 auid=0 ses=110 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=7193 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRED_REFR msg=audit(1389204314.459:2821): pid=7193 uid=0 auid=0 ses=110 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204314.484:2822): pid=7190 uid=0 auid=0 ses=110 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRED_DISP msg=audit(1389204314.487:2823): pid=7190 uid=0 auid=0 ses=110 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204314.490:2824): pid=7190 uid=0 auid=0 ses=110 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1389204314.491:2825): pid=7190 uid=0 auid=0 ses=110 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204314.492:2826): pid=7190 uid=0 auid=0 ses=110 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=7190 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204314.492:2827): pid=7190 uid=0 auid=0 ses=110 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=7190 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204314.492:2828): pid=7190 uid=0 auid=0 ses=110 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=7190 suid=0 rport=33677 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204317.491:2829): pid=7205 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=7205 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204317.491:2830): pid=7205 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=7205 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204317.493:2831): pid=7204 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=7205 suid=74 rport=33678 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204317.493:2832): pid=7204 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=7205 suid=74 rport=33678 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=ADD_GROUP msg=audit(1389204317.650:2833): pid=7208 uid=0 auid=0 ses=60 subj=unconfined_u:system_r:groupadd_t:s0-s0:c0.c1023 msg='op=adding group to /etc/group id=165 exe="/usr/sbin/groupadd" hostname=? addr=? terminal=? res=success' >type=ADD_GROUP msg=audit(1389204317.656:2834): pid=7208 uid=0 auid=0 ses=60 subj=unconfined_u:system_r:groupadd_t:s0-s0:c0.c1023 msg='op=adding group to /etc/gshadow id=165 exe="/usr/sbin/groupadd" hostname=? addr=? terminal=? res=success' >type=ADD_GROUP msg=audit(1389204317.657:2835): pid=7208 uid=0 auid=0 ses=60 subj=unconfined_u:system_r:groupadd_t:s0-s0:c0.c1023 msg='op= id=165 exe="/usr/sbin/groupadd" hostname=? addr=? terminal=? res=success' >type=ADD_USER msg=audit(1389204317.673:2836): pid=7213 uid=0 auid=0 ses=60 subj=unconfined_u:system_r:useradd_t:s0-s0:c0.c1023 msg='op=adding user id=165 exe="/usr/sbin/useradd" hostname=? addr=? terminal=? res=success' >type=ADD_USER msg=audit(1389204317.673:2837): pid=7213 uid=0 auid=0 ses=60 subj=unconfined_u:system_r:useradd_t:s0-s0:c0.c1023 msg='op=adding user to group acct="cinder" exe="/usr/sbin/useradd" hostname=? addr=? terminal=? res=success' >type=ADD_USER msg=audit(1389204317.674:2838): pid=7213 uid=0 auid=0 ses=60 subj=unconfined_u:system_r:useradd_t:s0-s0:c0.c1023 msg='op=adding user to group acct="cinder" exe="/usr/sbin/useradd" hostname=? addr=? terminal=? res=success' >type=ADD_USER msg=audit(1389204317.674:2839): pid=7213 uid=0 auid=0 ses=60 subj=unconfined_u:system_r:useradd_t:s0-s0:c0.c1023 msg='op=adding user to shadow group acct="cinder" exe="/usr/sbin/useradd" hostname=? addr=? terminal=? res=success' >type=ADD_USER msg=audit(1389204317.674:2840): pid=7213 uid=0 auid=0 ses=60 subj=unconfined_u:system_r:useradd_t:s0-s0:c0.c1023 msg='op=adding user to shadow group acct="cinder" exe="/usr/sbin/useradd" hostname=? addr=? terminal=? res=success' >type=USER_AUTH msg=audit(1389204317.766:2841): pid=7204 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=33678 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204317.766:2842): pid=7204 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=4096 fp=8b:56:b0:3f:c8:ad:38:a6:94:f4:a7:26:83:75:cc:85 rport=33678 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_ACCT msg=audit(1389204317.771:2843): pid=7204 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204317.772:2844): pid=7204 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=7205 suid=74 rport=33678 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204317.773:2845): pid=7204 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1389204317.775:2846): pid=7204 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=LOGIN msg=audit(1389204317.775:2847): login pid=7204 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=111 >type=USER_ROLE_CHANGE msg=audit(1389204317.822:2848): pid=7204 uid=0 auid=0 ses=111 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204317.839:2849): pid=7204 uid=0 auid=0 ses=111 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1389204317.844:2850): pid=7204 uid=0 auid=0 ses=111 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204317.845:2851): pid=7204 uid=0 auid=0 ses=111 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204317.846:2852): pid=7219 uid=0 auid=0 ses=111 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=7219 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204317.846:2853): pid=7219 uid=0 auid=0 ses=111 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=7219 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRED_REFR msg=audit(1389204317.849:2854): pid=7219 uid=0 auid=0 ses=111 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204317.870:2855): pid=7204 uid=0 auid=0 ses=111 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRED_DISP msg=audit(1389204317.875:2856): pid=7204 uid=0 auid=0 ses=111 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204317.878:2857): pid=7204 uid=0 auid=0 ses=111 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1389204317.880:2858): pid=7204 uid=0 auid=0 ses=111 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204317.880:2859): pid=7204 uid=0 auid=0 ses=111 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=7204 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204317.880:2860): pid=7204 uid=0 auid=0 ses=111 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=7204 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204317.881:2861): pid=7204 uid=0 auid=0 ses=111 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=7204 suid=0 rport=33678 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=SERVICE_START msg=audit(1389204319.704:2862): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="openstack-cinder-api" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1389204319.919:2863): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="openstack-cinder-backup" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204320.905:2864): pid=7346 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=7346 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204320.909:2865): pid=7346 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=7346 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204320.913:2866): pid=7345 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=7346 suid=74 rport=33679 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204320.913:2867): pid=7345 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=7346 suid=74 rport=33679 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=SERVICE_START msg=audit(1389204321.170:2868): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="openstack-cinder-backup" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1389204321.170:2869): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="openstack-cinder-backup" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=USER_AUTH msg=audit(1389204321.435:2870): pid=7345 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=33679 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204321.435:2871): pid=7345 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=4096 fp=8b:56:b0:3f:c8:ad:38:a6:94:f4:a7:26:83:75:cc:85 rport=33679 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_ACCT msg=audit(1389204321.440:2872): pid=7345 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204321.441:2873): pid=7345 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=7346 suid=74 rport=33679 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204321.442:2874): pid=7345 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1389204321.444:2875): pid=7345 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=LOGIN msg=audit(1389204321.444:2876): login pid=7345 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=112 >type=USER_ROLE_CHANGE msg=audit(1389204321.486:2877): pid=7345 uid=0 auid=0 ses=112 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204321.517:2878): pid=7345 uid=0 auid=0 ses=112 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1389204321.521:2879): pid=7345 uid=0 auid=0 ses=112 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204321.523:2880): pid=7345 uid=0 auid=0 ses=112 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204321.524:2881): pid=7351 uid=0 auid=0 ses=112 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=7351 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204321.524:2882): pid=7351 uid=0 auid=0 ses=112 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=7351 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRED_REFR msg=audit(1389204321.526:2883): pid=7351 uid=0 auid=0 ses=112 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204321.548:2884): pid=7345 uid=0 auid=0 ses=112 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRED_DISP msg=audit(1389204321.550:2885): pid=7345 uid=0 auid=0 ses=112 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204321.552:2886): pid=7345 uid=0 auid=0 ses=112 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1389204321.557:2887): pid=7345 uid=0 auid=0 ses=112 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204321.557:2888): pid=7345 uid=0 auid=0 ses=112 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=7345 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204321.557:2889): pid=7345 uid=0 auid=0 ses=112 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=7345 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204321.557:2890): pid=7345 uid=0 auid=0 ses=112 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=7345 suid=0 rport=33679 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=SERVICE_START msg=audit(1389204322.520:2891): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="openstack-cinder-volume" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1389204323.507:2892): pid=7437 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620766773202D2D6E6F68656164696E6773202D6F206E616D652063696E6465722D766F6C756D6573 terminal=? res=success' >type=USER_START msg=audit(1389204323.508:2893): pid=7437 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1389204323.542:2894): pid=7437 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1389204323.550:2895): pid=7441 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D43204C414E473D4320766773202D2D6E6F68656164696E6773202D2D756E69743D67202D6F206E616D652C73697A652C667265652C6C765F636F756E742C75756964202D2D736570617261746F72203A202D2D6E6F7375666669782063696E6465722D766F6C756D6573 terminal=? res=success' >type=USER_START msg=audit(1389204323.550:2896): pid=7441 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1389204323.616:2897): pid=7441 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1389204323.633:2898): pid=7445 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D43204C414E473D4320766773202D2D6E6F68656164696E6773202D2D756E69743D67202D6F206E616D652C73697A652C667265652C6C765F636F756E742C75756964202D2D736570617261746F72203A202D2D6E6F7375666669782063696E6465722D766F6C756D6573 terminal=? res=success' >type=USER_START msg=audit(1389204323.633:2899): pid=7445 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1389204323.664:2900): pid=7445 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204324.564:2901): pid=7453 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=7453 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204324.564:2902): pid=7453 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=7453 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204324.566:2903): pid=7452 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=7453 suid=74 rport=33685 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204324.566:2904): pid=7452 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=7453 suid=74 rport=33685 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204325.093:2905): pid=7452 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=33685 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204325.093:2906): pid=7452 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=4096 fp=8b:56:b0:3f:c8:ad:38:a6:94:f4:a7:26:83:75:cc:85 rport=33685 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_ACCT msg=audit(1389204325.098:2907): pid=7452 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204325.099:2908): pid=7452 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=7453 suid=74 rport=33685 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204325.100:2909): pid=7452 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1389204325.102:2910): pid=7452 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=LOGIN msg=audit(1389204325.102:2911): login pid=7452 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=113 >type=USER_ROLE_CHANGE msg=audit(1389204325.144:2912): pid=7452 uid=0 auid=0 ses=113 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204325.164:2913): pid=7452 uid=0 auid=0 ses=113 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1389204325.168:2914): pid=7452 uid=0 auid=0 ses=113 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204325.170:2915): pid=7452 uid=0 auid=0 ses=113 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204325.171:2916): pid=7455 uid=0 auid=0 ses=113 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=7455 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204325.171:2917): pid=7455 uid=0 auid=0 ses=113 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=7455 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRED_REFR msg=audit(1389204325.174:2918): pid=7455 uid=0 auid=0 ses=113 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204325.192:2919): pid=7452 uid=0 auid=0 ses=113 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRED_DISP msg=audit(1389204325.194:2920): pid=7452 uid=0 auid=0 ses=113 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204325.196:2921): pid=7452 uid=0 auid=0 ses=113 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1389204325.198:2922): pid=7452 uid=0 auid=0 ses=113 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204325.198:2923): pid=7452 uid=0 auid=0 ses=113 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=7452 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204325.198:2924): pid=7452 uid=0 auid=0 ses=113 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=7452 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204325.198:2925): pid=7452 uid=0 auid=0 ses=113 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=7452 suid=0 rport=33685 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204328.211:2926): pid=7467 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=7467 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204328.211:2927): pid=7467 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=7467 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204328.213:2928): pid=7466 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=7467 suid=74 rport=33686 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204328.213:2929): pid=7466 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=7467 suid=74 rport=33686 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=SERVICE_START msg=audit(1389204328.228:2930): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="tgtd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1389204328.354:2931): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="openstack-cinder-scheduler" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=USER_AUTH msg=audit(1389204328.743:2932): pid=7466 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=33686 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204328.743:2933): pid=7466 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=4096 fp=8b:56:b0:3f:c8:ad:38:a6:94:f4:a7:26:83:75:cc:85 rport=33686 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_ACCT msg=audit(1389204328.750:2934): pid=7466 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204328.752:2935): pid=7466 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=7467 suid=74 rport=33686 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204328.754:2936): pid=7466 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1389204328.758:2937): pid=7466 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=LOGIN msg=audit(1389204328.758:2938): login pid=7466 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=114 >type=USER_ROLE_CHANGE msg=audit(1389204328.881:2939): pid=7466 uid=0 auid=0 ses=114 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204328.959:2940): pid=7466 uid=0 auid=0 ses=114 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1389204328.963:2941): pid=7466 uid=0 auid=0 ses=114 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204328.965:2942): pid=7466 uid=0 auid=0 ses=114 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204328.966:2943): pid=7554 uid=0 auid=0 ses=114 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=7554 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204328.967:2944): pid=7554 uid=0 auid=0 ses=114 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=7554 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRED_REFR msg=audit(1389204328.969:2945): pid=7554 uid=0 auid=0 ses=114 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204329.005:2946): pid=7466 uid=0 auid=0 ses=114 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRED_DISP msg=audit(1389204329.007:2947): pid=7466 uid=0 auid=0 ses=114 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204329.009:2948): pid=7466 uid=0 auid=0 ses=114 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1389204329.011:2949): pid=7466 uid=0 auid=0 ses=114 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204329.011:2950): pid=7466 uid=0 auid=0 ses=114 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=7466 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204329.011:2951): pid=7466 uid=0 auid=0 ses=114 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=7466 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204329.011:2952): pid=7466 uid=0 auid=0 ses=114 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=7466 suid=0 rport=33686 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_CMD msg=audit(1389204329.371:2953): pid=7562 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D43204C414E473D4320766773202D2D6E6F68656164696E6773202D2D756E69743D67202D6F206E616D652C73697A652C667265652C6C765F636F756E742C75756964202D2D736570617261746F72203A202D2D6E6F7375666669782063696E6465722D766F6C756D6573 terminal=? res=success' >type=USER_START msg=audit(1389204329.372:2954): pid=7562 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1389204329.410:2955): pid=7562 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204332.023:2956): pid=7571 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=7571 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204332.023:2957): pid=7571 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=7571 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204332.025:2958): pid=7570 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=7571 suid=74 rport=33690 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204332.025:2959): pid=7570 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=7571 suid=74 rport=33690 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204332.555:2960): pid=7570 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=33690 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204332.556:2961): pid=7570 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=4096 fp=8b:56:b0:3f:c8:ad:38:a6:94:f4:a7:26:83:75:cc:85 rport=33690 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_ACCT msg=audit(1389204332.566:2962): pid=7570 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204332.567:2963): pid=7570 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=7571 suid=74 rport=33690 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204332.567:2964): pid=7570 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1389204332.575:2965): pid=7570 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=LOGIN msg=audit(1389204332.576:2966): login pid=7570 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=115 >type=USER_ROLE_CHANGE msg=audit(1389204332.619:2967): pid=7570 uid=0 auid=0 ses=115 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204332.634:2968): pid=7570 uid=0 auid=0 ses=115 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1389204332.639:2969): pid=7570 uid=0 auid=0 ses=115 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204332.640:2970): pid=7570 uid=0 auid=0 ses=115 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204332.641:2971): pid=7573 uid=0 auid=0 ses=115 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=7573 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204332.641:2972): pid=7573 uid=0 auid=0 ses=115 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=7573 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRED_REFR msg=audit(1389204332.643:2973): pid=7573 uid=0 auid=0 ses=115 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204332.662:2974): pid=7570 uid=0 auid=0 ses=115 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRED_DISP msg=audit(1389204332.664:2975): pid=7570 uid=0 auid=0 ses=115 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204332.666:2976): pid=7570 uid=0 auid=0 ses=115 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1389204332.668:2977): pid=7570 uid=0 auid=0 ses=115 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204332.668:2978): pid=7570 uid=0 auid=0 ses=115 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=7570 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204332.668:2979): pid=7570 uid=0 auid=0 ses=115 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=7570 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204332.668:2980): pid=7570 uid=0 auid=0 ses=115 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=7570 suid=0 rport=33690 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204332.677:2981): pid=7580 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=7580 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204332.679:2982): pid=7580 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=7580 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204332.681:2983): pid=7579 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=7580 suid=74 rport=33691 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204332.681:2984): pid=7579 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=7580 suid=74 rport=33691 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204333.201:2985): pid=7579 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=33691 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204333.201:2986): pid=7579 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=4096 fp=8b:56:b0:3f:c8:ad:38:a6:94:f4:a7:26:83:75:cc:85 rport=33691 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_ACCT msg=audit(1389204333.206:2987): pid=7579 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204333.207:2988): pid=7579 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=7580 suid=74 rport=33691 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204333.207:2989): pid=7579 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1389204333.210:2990): pid=7579 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=LOGIN msg=audit(1389204333.210:2991): login pid=7579 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=116 >type=USER_ROLE_CHANGE msg=audit(1389204333.249:2992): pid=7579 uid=0 auid=0 ses=116 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204333.263:2993): pid=7579 uid=0 auid=0 ses=116 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1389204333.267:2994): pid=7579 uid=0 auid=0 ses=116 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204333.269:2995): pid=7579 uid=0 auid=0 ses=116 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204333.271:2996): pid=7582 uid=0 auid=0 ses=116 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=7582 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204333.271:2997): pid=7582 uid=0 auid=0 ses=116 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=7582 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRED_REFR msg=audit(1389204333.273:2998): pid=7582 uid=0 auid=0 ses=116 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204333.293:2999): pid=7579 uid=0 auid=0 ses=116 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRED_DISP msg=audit(1389204333.295:3000): pid=7579 uid=0 auid=0 ses=116 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204333.297:3001): pid=7579 uid=0 auid=0 ses=116 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1389204333.299:3002): pid=7579 uid=0 auid=0 ses=116 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204333.299:3003): pid=7579 uid=0 auid=0 ses=116 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=7579 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204333.300:3004): pid=7579 uid=0 auid=0 ses=116 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=7579 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204333.300:3005): pid=7579 uid=0 auid=0 ses=116 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=7579 suid=0 rport=33691 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204333.313:3006): pid=7596 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=7596 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204333.313:3007): pid=7596 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=7596 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204333.317:3008): pid=7595 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=7596 suid=74 rport=33692 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204333.317:3009): pid=7595 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=7596 suid=74 rport=33692 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204333.857:3010): pid=7595 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=33692 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204333.857:3011): pid=7595 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=4096 fp=8b:56:b0:3f:c8:ad:38:a6:94:f4:a7:26:83:75:cc:85 rport=33692 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_ACCT msg=audit(1389204333.863:3012): pid=7595 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204333.864:3013): pid=7595 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=7596 suid=74 rport=33692 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204333.866:3014): pid=7595 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1389204333.868:3015): pid=7595 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=LOGIN msg=audit(1389204333.868:3016): login pid=7595 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=117 >type=USER_ROLE_CHANGE msg=audit(1389204333.919:3017): pid=7595 uid=0 auid=0 ses=117 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204333.939:3018): pid=7595 uid=0 auid=0 ses=117 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1389204333.944:3019): pid=7595 uid=0 auid=0 ses=117 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204333.946:3020): pid=7595 uid=0 auid=0 ses=117 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204333.948:3021): pid=7606 uid=0 auid=0 ses=117 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=7606 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204333.948:3022): pid=7606 uid=0 auid=0 ses=117 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=7606 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRED_REFR msg=audit(1389204333.950:3023): pid=7606 uid=0 auid=0 ses=117 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204333.975:3024): pid=7595 uid=0 auid=0 ses=117 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRED_DISP msg=audit(1389204333.978:3025): pid=7595 uid=0 auid=0 ses=117 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204333.981:3026): pid=7595 uid=0 auid=0 ses=117 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1389204333.984:3027): pid=7595 uid=0 auid=0 ses=117 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204333.984:3028): pid=7595 uid=0 auid=0 ses=117 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=7595 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204333.984:3029): pid=7595 uid=0 auid=0 ses=117 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=7595 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204333.984:3030): pid=7595 uid=0 auid=0 ses=117 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=7595 suid=0 rport=33692 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204336.985:3031): pid=7615 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=7615 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204336.985:3032): pid=7615 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=7615 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204336.988:3033): pid=7614 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=7615 suid=74 rport=33697 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204336.988:3034): pid=7614 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=7615 suid=74 rport=33697 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204337.516:3035): pid=7614 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=33697 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204337.516:3036): pid=7614 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=4096 fp=8b:56:b0:3f:c8:ad:38:a6:94:f4:a7:26:83:75:cc:85 rport=33697 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_ACCT msg=audit(1389204337.521:3037): pid=7614 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204337.521:3038): pid=7614 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=7615 suid=74 rport=33697 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204337.522:3039): pid=7614 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1389204337.524:3040): pid=7614 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=LOGIN msg=audit(1389204337.524:3041): login pid=7614 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=118 >type=USER_ROLE_CHANGE msg=audit(1389204337.566:3042): pid=7614 uid=0 auid=0 ses=118 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204337.584:3043): pid=7614 uid=0 auid=0 ses=118 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1389204337.588:3044): pid=7614 uid=0 auid=0 ses=118 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204337.590:3045): pid=7614 uid=0 auid=0 ses=118 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204337.592:3046): pid=7617 uid=0 auid=0 ses=118 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=7617 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204337.592:3047): pid=7617 uid=0 auid=0 ses=118 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=7617 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRED_REFR msg=audit(1389204337.594:3048): pid=7617 uid=0 auid=0 ses=118 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204337.614:3049): pid=7614 uid=0 auid=0 ses=118 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRED_DISP msg=audit(1389204337.616:3050): pid=7614 uid=0 auid=0 ses=118 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204337.618:3051): pid=7614 uid=0 auid=0 ses=118 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1389204337.620:3052): pid=7614 uid=0 auid=0 ses=118 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204337.620:3053): pid=7614 uid=0 auid=0 ses=118 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=7614 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204337.620:3054): pid=7614 uid=0 auid=0 ses=118 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=7614 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204337.620:3055): pid=7614 uid=0 auid=0 ses=118 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=7614 suid=0 rport=33697 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204340.625:3056): pid=7626 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=7626 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204340.625:3057): pid=7626 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=7626 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204340.627:3058): pid=7625 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=7626 suid=74 rport=33704 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204340.627:3059): pid=7625 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=7626 suid=74 rport=33704 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204341.143:3060): pid=7625 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=33704 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204341.143:3061): pid=7625 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=4096 fp=8b:56:b0:3f:c8:ad:38:a6:94:f4:a7:26:83:75:cc:85 rport=33704 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_ACCT msg=audit(1389204341.148:3062): pid=7625 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204341.149:3063): pid=7625 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=7626 suid=74 rport=33704 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204341.150:3064): pid=7625 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1389204341.152:3065): pid=7625 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=LOGIN msg=audit(1389204341.152:3066): login pid=7625 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=119 >type=USER_ROLE_CHANGE msg=audit(1389204341.193:3067): pid=7625 uid=0 auid=0 ses=119 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204341.208:3068): pid=7625 uid=0 auid=0 ses=119 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1389204341.213:3069): pid=7625 uid=0 auid=0 ses=119 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204341.215:3070): pid=7625 uid=0 auid=0 ses=119 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204341.216:3071): pid=7628 uid=0 auid=0 ses=119 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=7628 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204341.216:3072): pid=7628 uid=0 auid=0 ses=119 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=7628 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRED_REFR msg=audit(1389204341.218:3073): pid=7628 uid=0 auid=0 ses=119 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204341.238:3074): pid=7625 uid=0 auid=0 ses=119 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRED_DISP msg=audit(1389204341.240:3075): pid=7625 uid=0 auid=0 ses=119 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204341.242:3076): pid=7625 uid=0 auid=0 ses=119 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1389204341.244:3077): pid=7625 uid=0 auid=0 ses=119 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204341.244:3078): pid=7625 uid=0 auid=0 ses=119 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=7625 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204341.244:3079): pid=7625 uid=0 auid=0 ses=119 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=7625 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204341.244:3080): pid=7625 uid=0 auid=0 ses=119 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=7625 suid=0 rport=33704 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204344.249:3081): pid=7637 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=7637 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204344.249:3082): pid=7637 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=7637 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204344.251:3083): pid=7636 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=7637 suid=74 rport=33711 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204344.251:3084): pid=7636 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=7637 suid=74 rport=33711 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204344.770:3085): pid=7636 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=33711 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204344.770:3086): pid=7636 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=4096 fp=8b:56:b0:3f:c8:ad:38:a6:94:f4:a7:26:83:75:cc:85 rport=33711 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_ACCT msg=audit(1389204344.775:3087): pid=7636 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204344.775:3088): pid=7636 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=7637 suid=74 rport=33711 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204344.776:3089): pid=7636 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1389204344.779:3090): pid=7636 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=LOGIN msg=audit(1389204344.779:3091): login pid=7636 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=120 >type=USER_ROLE_CHANGE msg=audit(1389204344.821:3092): pid=7636 uid=0 auid=0 ses=120 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204344.839:3093): pid=7636 uid=0 auid=0 ses=120 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1389204344.844:3094): pid=7636 uid=0 auid=0 ses=120 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204344.846:3095): pid=7636 uid=0 auid=0 ses=120 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204344.848:3096): pid=7639 uid=0 auid=0 ses=120 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=7639 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204344.848:3097): pid=7639 uid=0 auid=0 ses=120 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=7639 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRED_REFR msg=audit(1389204344.851:3098): pid=7639 uid=0 auid=0 ses=120 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204344.873:3099): pid=7636 uid=0 auid=0 ses=120 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRED_DISP msg=audit(1389204344.875:3100): pid=7636 uid=0 auid=0 ses=120 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204344.877:3101): pid=7636 uid=0 auid=0 ses=120 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1389204344.879:3102): pid=7636 uid=0 auid=0 ses=120 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204344.879:3103): pid=7636 uid=0 auid=0 ses=120 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=7636 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204344.879:3104): pid=7636 uid=0 auid=0 ses=120 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=7636 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204344.880:3105): pid=7636 uid=0 auid=0 ses=120 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=7636 suid=0 rport=33711 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204347.888:3106): pid=7648 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=7648 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204347.888:3107): pid=7648 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=7648 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204347.890:3108): pid=7647 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=7648 suid=74 rport=33718 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204347.890:3109): pid=7647 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=7648 suid=74 rport=33718 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204348.439:3110): pid=7647 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=33718 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204348.439:3111): pid=7647 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=4096 fp=8b:56:b0:3f:c8:ad:38:a6:94:f4:a7:26:83:75:cc:85 rport=33718 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_ACCT msg=audit(1389204348.444:3112): pid=7647 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204348.445:3113): pid=7647 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=7648 suid=74 rport=33718 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204348.446:3114): pid=7647 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1389204348.449:3115): pid=7647 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=LOGIN msg=audit(1389204348.449:3116): login pid=7647 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=121 >type=USER_ROLE_CHANGE msg=audit(1389204348.490:3117): pid=7647 uid=0 auid=0 ses=121 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204348.504:3118): pid=7647 uid=0 auid=0 ses=121 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1389204348.508:3119): pid=7647 uid=0 auid=0 ses=121 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204348.510:3120): pid=7647 uid=0 auid=0 ses=121 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204348.512:3121): pid=7650 uid=0 auid=0 ses=121 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=7650 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204348.512:3122): pid=7650 uid=0 auid=0 ses=121 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=7650 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRED_REFR msg=audit(1389204348.515:3123): pid=7650 uid=0 auid=0 ses=121 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204348.537:3124): pid=7647 uid=0 auid=0 ses=121 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRED_DISP msg=audit(1389204348.539:3125): pid=7647 uid=0 auid=0 ses=121 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204348.541:3126): pid=7647 uid=0 auid=0 ses=121 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1389204348.543:3127): pid=7647 uid=0 auid=0 ses=121 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204348.543:3128): pid=7647 uid=0 auid=0 ses=121 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=7647 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204348.543:3129): pid=7647 uid=0 auid=0 ses=121 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=7647 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204348.543:3130): pid=7647 uid=0 auid=0 ses=121 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=7647 suid=0 rport=33718 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=NETFILTER_CFG msg=audit(1389204349.043:3131): table=filter family=2 entries=0 >type=SYSCALL msg=audit(1389204349.043:3131): arch=c000003e syscall=272 success=yes exit=0 a0=40000000 a1=c0 a2=0 a3=7fff0aa22240 items=0 ppid=7766 pid=7773 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=116 tty=(none) comm="ip" exe="/usr/sbin/ip" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null) >type=NETFILTER_CFG msg=audit(1389204349.059:3132): table=filter family=2 entries=0 >type=SYSCALL msg=audit(1389204349.059:3132): arch=c000003e syscall=272 success=yes exit=0 a0=40000000 a1=c0 a2=0 a3=7fffd58c64b0 items=0 ppid=7766 pid=7779 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=116 tty=(none) comm="ip" exe="/usr/sbin/ip" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null) >type=NETFILTER_CFG msg=audit(1389204349.317:3133): table=filter family=2 entries=0 >type=SYSCALL msg=audit(1389204349.317:3133): arch=c000003e syscall=272 success=yes exit=0 a0=40000000 a1=c0 a2=0 a3=7fff3b39efb0 items=0 ppid=7766 pid=7781 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=116 tty=(none) comm="ip" exe="/usr/sbin/ip" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null) >type=CRYPTO_KEY_USER msg=audit(1389204351.557:3134): pid=7827 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=7827 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204351.558:3135): pid=7827 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=7827 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204351.561:3136): pid=7826 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=7827 suid=74 rport=33722 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204351.562:3137): pid=7826 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=7827 suid=74 rport=33722 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204352.094:3138): pid=7826 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=33722 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204352.094:3139): pid=7826 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=4096 fp=8b:56:b0:3f:c8:ad:38:a6:94:f4:a7:26:83:75:cc:85 rport=33722 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_ACCT msg=audit(1389204352.100:3140): pid=7826 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204352.102:3141): pid=7826 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=7827 suid=74 rport=33722 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204352.103:3142): pid=7826 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1389204352.105:3143): pid=7826 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=LOGIN msg=audit(1389204352.106:3144): login pid=7826 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=122 >type=USER_ROLE_CHANGE msg=audit(1389204352.152:3145): pid=7826 uid=0 auid=0 ses=122 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204352.170:3146): pid=7826 uid=0 auid=0 ses=122 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1389204352.175:3147): pid=7826 uid=0 auid=0 ses=122 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204352.177:3148): pid=7826 uid=0 auid=0 ses=122 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204352.178:3149): pid=7833 uid=0 auid=0 ses=122 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=7833 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204352.178:3150): pid=7833 uid=0 auid=0 ses=122 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=7833 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRED_REFR msg=audit(1389204352.181:3151): pid=7833 uid=0 auid=0 ses=122 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204352.202:3152): pid=7826 uid=0 auid=0 ses=122 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRED_DISP msg=audit(1389204352.204:3153): pid=7826 uid=0 auid=0 ses=122 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204352.206:3154): pid=7826 uid=0 auid=0 ses=122 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1389204352.208:3155): pid=7826 uid=0 auid=0 ses=122 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204352.208:3156): pid=7826 uid=0 auid=0 ses=122 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=7826 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204352.208:3157): pid=7826 uid=0 auid=0 ses=122 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=7826 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204352.208:3158): pid=7826 uid=0 auid=0 ses=122 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=7826 suid=0 rport=33722 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204355.211:3159): pid=7842 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=7842 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204355.212:3160): pid=7842 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=7842 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204355.214:3161): pid=7841 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=7842 suid=74 rport=33728 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204355.214:3162): pid=7841 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=7842 suid=74 rport=33728 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204355.741:3163): pid=7841 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=33728 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204355.741:3164): pid=7841 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=4096 fp=8b:56:b0:3f:c8:ad:38:a6:94:f4:a7:26:83:75:cc:85 rport=33728 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_ACCT msg=audit(1389204355.746:3165): pid=7841 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204355.747:3166): pid=7841 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=7842 suid=74 rport=33728 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204355.748:3167): pid=7841 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1389204355.751:3168): pid=7841 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=LOGIN msg=audit(1389204355.751:3169): login pid=7841 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=123 >type=USER_ROLE_CHANGE msg=audit(1389204355.794:3170): pid=7841 uid=0 auid=0 ses=123 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204355.811:3171): pid=7841 uid=0 auid=0 ses=123 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1389204355.817:3172): pid=7841 uid=0 auid=0 ses=123 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204355.819:3173): pid=7841 uid=0 auid=0 ses=123 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204355.820:3174): pid=7844 uid=0 auid=0 ses=123 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=7844 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204355.820:3175): pid=7844 uid=0 auid=0 ses=123 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=7844 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRED_REFR msg=audit(1389204355.823:3176): pid=7844 uid=0 auid=0 ses=123 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204355.845:3177): pid=7841 uid=0 auid=0 ses=123 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRED_DISP msg=audit(1389204355.847:3178): pid=7841 uid=0 auid=0 ses=123 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204355.849:3179): pid=7841 uid=0 auid=0 ses=123 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1389204355.851:3180): pid=7841 uid=0 auid=0 ses=123 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204355.851:3181): pid=7841 uid=0 auid=0 ses=123 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=7841 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204355.852:3182): pid=7841 uid=0 auid=0 ses=123 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=7841 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204355.852:3183): pid=7841 uid=0 auid=0 ses=123 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=7841 suid=0 rport=33728 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204358.854:3184): pid=7853 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=7853 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204358.854:3185): pid=7853 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=7853 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204358.856:3186): pid=7852 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=7853 suid=74 rport=33739 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204358.856:3187): pid=7852 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=7853 suid=74 rport=33739 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204359.386:3188): pid=7852 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=33739 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204359.386:3189): pid=7852 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=4096 fp=8b:56:b0:3f:c8:ad:38:a6:94:f4:a7:26:83:75:cc:85 rport=33739 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_ACCT msg=audit(1389204359.393:3190): pid=7852 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204359.394:3191): pid=7852 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=7853 suid=74 rport=33739 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204359.395:3192): pid=7852 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1389204359.397:3193): pid=7852 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=LOGIN msg=audit(1389204359.397:3194): login pid=7852 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=124 >type=USER_ROLE_CHANGE msg=audit(1389204359.437:3195): pid=7852 uid=0 auid=0 ses=124 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204359.454:3196): pid=7852 uid=0 auid=0 ses=124 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1389204359.460:3197): pid=7852 uid=0 auid=0 ses=124 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204359.462:3198): pid=7852 uid=0 auid=0 ses=124 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204359.464:3199): pid=7855 uid=0 auid=0 ses=124 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=7855 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204359.464:3200): pid=7855 uid=0 auid=0 ses=124 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=7855 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRED_REFR msg=audit(1389204359.467:3201): pid=7855 uid=0 auid=0 ses=124 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204359.492:3202): pid=7852 uid=0 auid=0 ses=124 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRED_DISP msg=audit(1389204359.494:3203): pid=7852 uid=0 auid=0 ses=124 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204359.496:3204): pid=7852 uid=0 auid=0 ses=124 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1389204359.500:3205): pid=7852 uid=0 auid=0 ses=124 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204359.500:3206): pid=7852 uid=0 auid=0 ses=124 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=7852 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204359.500:3207): pid=7852 uid=0 auid=0 ses=124 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=7852 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204359.500:3208): pid=7852 uid=0 auid=0 ses=124 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=7852 suid=0 rport=33739 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204362.501:3209): pid=7884 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=7884 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204362.501:3210): pid=7884 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=7884 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204362.503:3211): pid=7883 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=7884 suid=74 rport=33750 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204362.503:3212): pid=7883 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=7884 suid=74 rport=33750 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_CMD msg=audit(1389204362.692:3213): pid=7885 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D43204C414E473D4320766773202D2D6E6F68656164696E6773202D2D756E69743D67202D6F206E616D652C73697A652C667265652C6C765F636F756E742C75756964202D2D736570617261746F72203A202D2D6E6F7375666669782063696E6465722D766F6C756D6573 terminal=? res=success' >type=USER_START msg=audit(1389204362.693:3214): pid=7885 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1389204362.735:3215): pid=7885 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=NETFILTER_CFG msg=audit(1389204363.009:3216): table=filter family=2 entries=0 >type=SYSCALL msg=audit(1389204363.009:3216): arch=c000003e syscall=272 success=yes exit=0 a0=40000000 a1=c0 a2=0 a3=7fff38b07800 items=0 ppid=7982 pid=7989 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=116 tty=(none) comm="ip" exe="/usr/sbin/ip" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null) >type=USER_AUTH msg=audit(1389204363.021:3217): pid=7883 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=33750 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204363.021:3218): pid=7883 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=4096 fp=8b:56:b0:3f:c8:ad:38:a6:94:f4:a7:26:83:75:cc:85 rport=33750 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_ACCT msg=audit(1389204363.028:3219): pid=7883 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204363.029:3220): pid=7883 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=7884 suid=74 rport=33750 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204363.030:3221): pid=7883 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1389204363.033:3222): pid=7883 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=LOGIN msg=audit(1389204363.037:3223): login pid=7883 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=125 >type=USER_ROLE_CHANGE msg=audit(1389204363.084:3224): pid=7883 uid=0 auid=0 ses=125 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204363.103:3225): pid=7883 uid=0 auid=0 ses=125 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1389204363.107:3226): pid=7883 uid=0 auid=0 ses=125 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204363.109:3227): pid=7883 uid=0 auid=0 ses=125 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204363.110:3228): pid=7997 uid=0 auid=0 ses=125 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=7997 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204363.110:3229): pid=7997 uid=0 auid=0 ses=125 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=7997 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRED_REFR msg=audit(1389204363.113:3230): pid=7997 uid=0 auid=0 ses=125 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204363.134:3231): pid=7883 uid=0 auid=0 ses=125 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRED_DISP msg=audit(1389204363.136:3232): pid=7883 uid=0 auid=0 ses=125 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204363.138:3233): pid=7883 uid=0 auid=0 ses=125 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1389204363.140:3234): pid=7883 uid=0 auid=0 ses=125 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204363.140:3235): pid=7883 uid=0 auid=0 ses=125 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=7883 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204363.140:3236): pid=7883 uid=0 auid=0 ses=125 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=7883 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204363.140:3237): pid=7883 uid=0 auid=0 ses=125 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=7883 suid=0 rport=33750 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=NETFILTER_CFG msg=audit(1389204363.043:3238): table=filter family=2 entries=0 >type=SYSCALL msg=audit(1389204363.043:3238): arch=c000003e syscall=272 success=yes exit=0 a0=40000000 a1=c0 a2=0 a3=7fff10e6a480 items=0 ppid=7982 pid=7996 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=116 tty=(none) comm="ip" exe="/usr/sbin/ip" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null) >type=NETFILTER_CFG msg=audit(1389204363.297:3239): table=filter family=2 entries=0 >type=SYSCALL msg=audit(1389204363.297:3239): arch=c000003e syscall=272 success=yes exit=0 a0=40000000 a1=c0 a2=0 a3=7fffae709bb0 items=0 ppid=7982 pid=8003 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=116 tty=(none) comm="ip" exe="/usr/sbin/ip" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null) >type=NETFILTER_CFG msg=audit(1389204364.617:3240): table=filter family=2 entries=9 >type=SYSCALL msg=audit(1389204364.617:3240): arch=c000003e syscall=54 success=yes exit=0 a0=3 a1=0 a2=40 a3=f4cda0 items=0 ppid=7592 pid=8047 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=116 tty=(none) comm="iptables" exe="/usr/sbin/xtables-multi" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null) >type=CRYPTO_KEY_USER msg=audit(1389204366.152:3241): pid=8060 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=8060 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204366.152:3242): pid=8060 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=8060 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204366.154:3243): pid=8059 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=8060 suid=74 rport=33751 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204366.156:3244): pid=8059 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=8060 suid=74 rport=33751 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204366.718:3245): pid=8059 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=33751 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204366.718:3246): pid=8059 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=4096 fp=8b:56:b0:3f:c8:ad:38:a6:94:f4:a7:26:83:75:cc:85 rport=33751 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_ACCT msg=audit(1389204366.724:3247): pid=8059 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204366.725:3248): pid=8059 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=8060 suid=74 rport=33751 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204366.726:3249): pid=8059 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1389204366.729:3250): pid=8059 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=LOGIN msg=audit(1389204366.729:3251): login pid=8059 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=126 >type=USER_ROLE_CHANGE msg=audit(1389204366.819:3252): pid=8059 uid=0 auid=0 ses=126 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204366.837:3253): pid=8059 uid=0 auid=0 ses=126 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1389204366.841:3254): pid=8059 uid=0 auid=0 ses=126 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204366.843:3255): pid=8059 uid=0 auid=0 ses=126 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204366.844:3256): pid=8062 uid=0 auid=0 ses=126 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=8062 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204366.844:3257): pid=8062 uid=0 auid=0 ses=126 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=8062 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRED_REFR msg=audit(1389204366.846:3258): pid=8062 uid=0 auid=0 ses=126 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204366.873:3259): pid=8059 uid=0 auid=0 ses=126 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRED_DISP msg=audit(1389204366.874:3260): pid=8059 uid=0 auid=0 ses=126 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204366.876:3261): pid=8059 uid=0 auid=0 ses=126 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1389204366.878:3262): pid=8059 uid=0 auid=0 ses=126 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204366.878:3263): pid=8059 uid=0 auid=0 ses=126 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=8059 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204366.878:3264): pid=8059 uid=0 auid=0 ses=126 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=8059 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204366.878:3265): pid=8059 uid=0 auid=0 ses=126 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=8059 suid=0 rport=33751 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204369.888:3266): pid=8085 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=8085 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204369.888:3267): pid=8085 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=8085 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204369.890:3268): pid=8084 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=8085 suid=74 rport=33761 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204369.890:3269): pid=8084 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=8085 suid=74 rport=33761 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204370.447:3270): pid=8084 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=33761 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204370.447:3271): pid=8084 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=4096 fp=8b:56:b0:3f:c8:ad:38:a6:94:f4:a7:26:83:75:cc:85 rport=33761 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_ACCT msg=audit(1389204370.453:3272): pid=8084 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204370.455:3273): pid=8084 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=8085 suid=74 rport=33761 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204370.455:3274): pid=8084 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1389204370.458:3275): pid=8084 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=LOGIN msg=audit(1389204370.458:3276): login pid=8084 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=127 >type=USER_ROLE_CHANGE msg=audit(1389204370.541:3277): pid=8084 uid=0 auid=0 ses=127 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204370.561:3278): pid=8084 uid=0 auid=0 ses=127 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1389204370.566:3279): pid=8084 uid=0 auid=0 ses=127 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204370.568:3280): pid=8084 uid=0 auid=0 ses=127 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204370.569:3281): pid=8087 uid=0 auid=0 ses=127 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=8087 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204370.569:3282): pid=8087 uid=0 auid=0 ses=127 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=8087 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRED_REFR msg=audit(1389204370.571:3283): pid=8087 uid=0 auid=0 ses=127 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204370.596:3284): pid=8084 uid=0 auid=0 ses=127 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRED_DISP msg=audit(1389204370.598:3285): pid=8084 uid=0 auid=0 ses=127 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204370.600:3286): pid=8084 uid=0 auid=0 ses=127 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1389204370.601:3287): pid=8084 uid=0 auid=0 ses=127 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204370.602:3288): pid=8084 uid=0 auid=0 ses=127 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=8084 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204370.602:3289): pid=8084 uid=0 auid=0 ses=127 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=8084 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204370.602:3290): pid=8084 uid=0 auid=0 ses=127 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=8084 suid=0 rport=33761 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204373.608:3291): pid=8096 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=8096 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204373.608:3292): pid=8096 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=8096 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204373.610:3293): pid=8095 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=8096 suid=74 rport=33762 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204373.610:3294): pid=8095 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=8096 suid=74 rport=33762 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204374.134:3295): pid=8095 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=33762 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204374.134:3296): pid=8095 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=4096 fp=8b:56:b0:3f:c8:ad:38:a6:94:f4:a7:26:83:75:cc:85 rport=33762 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_ACCT msg=audit(1389204374.139:3297): pid=8095 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204374.140:3298): pid=8095 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=8096 suid=74 rport=33762 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204374.141:3299): pid=8095 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1389204374.143:3300): pid=8095 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=LOGIN msg=audit(1389204374.143:3301): login pid=8095 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=128 >type=USER_ROLE_CHANGE msg=audit(1389204374.183:3302): pid=8095 uid=0 auid=0 ses=128 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204374.198:3303): pid=8095 uid=0 auid=0 ses=128 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1389204374.203:3304): pid=8095 uid=0 auid=0 ses=128 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204374.205:3305): pid=8095 uid=0 auid=0 ses=128 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204374.206:3306): pid=8098 uid=0 auid=0 ses=128 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=8098 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204374.206:3307): pid=8098 uid=0 auid=0 ses=128 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=8098 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRED_REFR msg=audit(1389204374.208:3308): pid=8098 uid=0 auid=0 ses=128 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204374.227:3309): pid=8095 uid=0 auid=0 ses=128 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRED_DISP msg=audit(1389204374.230:3310): pid=8095 uid=0 auid=0 ses=128 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204374.232:3311): pid=8095 uid=0 auid=0 ses=128 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1389204374.234:3312): pid=8095 uid=0 auid=0 ses=128 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204374.234:3313): pid=8095 uid=0 auid=0 ses=128 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=8095 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204374.234:3314): pid=8095 uid=0 auid=0 ses=128 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=8095 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204374.234:3315): pid=8095 uid=0 auid=0 ses=128 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=8095 suid=0 rport=33762 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204377.237:3316): pid=8107 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=8107 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204377.237:3317): pid=8107 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=8107 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204377.239:3318): pid=8106 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=8107 suid=74 rport=33763 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204377.239:3319): pid=8106 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=8107 suid=74 rport=33763 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204377.774:3320): pid=8106 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=33763 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204377.774:3321): pid=8106 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=4096 fp=8b:56:b0:3f:c8:ad:38:a6:94:f4:a7:26:83:75:cc:85 rport=33763 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_ACCT msg=audit(1389204377.780:3322): pid=8106 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204377.781:3323): pid=8106 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=8107 suid=74 rport=33763 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204377.782:3324): pid=8106 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1389204377.784:3325): pid=8106 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=LOGIN msg=audit(1389204377.784:3326): login pid=8106 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=129 >type=USER_ROLE_CHANGE msg=audit(1389204377.865:3327): pid=8106 uid=0 auid=0 ses=129 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204377.886:3328): pid=8106 uid=0 auid=0 ses=129 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1389204377.891:3329): pid=8106 uid=0 auid=0 ses=129 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204377.893:3330): pid=8106 uid=0 auid=0 ses=129 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204377.895:3331): pid=8118 uid=0 auid=0 ses=129 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=8118 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204377.895:3332): pid=8118 uid=0 auid=0 ses=129 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=8118 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRED_REFR msg=audit(1389204377.897:3333): pid=8118 uid=0 auid=0 ses=129 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204377.926:3334): pid=8106 uid=0 auid=0 ses=129 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRED_DISP msg=audit(1389204377.928:3335): pid=8106 uid=0 auid=0 ses=129 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204377.931:3336): pid=8106 uid=0 auid=0 ses=129 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1389204377.933:3337): pid=8106 uid=0 auid=0 ses=129 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204377.933:3338): pid=8106 uid=0 auid=0 ses=129 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=8106 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204377.933:3339): pid=8106 uid=0 auid=0 ses=129 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=8106 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204377.933:3340): pid=8106 uid=0 auid=0 ses=129 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=8106 suid=0 rport=33763 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204380.937:3341): pid=8146 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=8146 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204380.937:3342): pid=8146 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=8146 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204380.939:3343): pid=8145 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=8146 suid=74 rport=33765 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204380.939:3344): pid=8145 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=8146 suid=74 rport=33765 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204381.465:3345): pid=8145 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=33765 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204381.465:3346): pid=8145 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=4096 fp=8b:56:b0:3f:c8:ad:38:a6:94:f4:a7:26:83:75:cc:85 rport=33765 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_ACCT msg=audit(1389204381.470:3347): pid=8145 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204381.471:3348): pid=8145 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=8146 suid=74 rport=33765 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204381.472:3349): pid=8145 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1389204381.474:3350): pid=8145 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=LOGIN msg=audit(1389204381.474:3351): login pid=8145 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=130 >type=USER_ROLE_CHANGE msg=audit(1389204381.515:3352): pid=8145 uid=0 auid=0 ses=130 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204381.530:3353): pid=8145 uid=0 auid=0 ses=130 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1389204381.534:3354): pid=8145 uid=0 auid=0 ses=130 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204381.536:3355): pid=8145 uid=0 auid=0 ses=130 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204381.537:3356): pid=8151 uid=0 auid=0 ses=130 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=8151 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204381.537:3357): pid=8151 uid=0 auid=0 ses=130 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=8151 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRED_REFR msg=audit(1389204381.539:3358): pid=8151 uid=0 auid=0 ses=130 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204381.559:3359): pid=8145 uid=0 auid=0 ses=130 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRED_DISP msg=audit(1389204381.561:3360): pid=8145 uid=0 auid=0 ses=130 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204381.563:3361): pid=8145 uid=0 auid=0 ses=130 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1389204381.565:3362): pid=8145 uid=0 auid=0 ses=130 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204381.565:3363): pid=8145 uid=0 auid=0 ses=130 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=8145 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204381.565:3364): pid=8145 uid=0 auid=0 ses=130 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=8145 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204381.565:3365): pid=8145 uid=0 auid=0 ses=130 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=8145 suid=0 rport=33765 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=ADD_GROUP msg=audit(1389204381.582:3366): pid=8149 uid=0 auid=0 ses=116 subj=unconfined_u:system_r:groupadd_t:s0-s0:c0.c1023 msg='op=adding group to /etc/group id=162 exe="/usr/sbin/groupadd" hostname=? addr=? terminal=? res=success' >type=ADD_GROUP msg=audit(1389204381.589:3367): pid=8149 uid=0 auid=0 ses=116 subj=unconfined_u:system_r:groupadd_t:s0-s0:c0.c1023 msg='op=adding group to /etc/gshadow id=162 exe="/usr/sbin/groupadd" hostname=? addr=? terminal=? res=success' >type=ADD_GROUP msg=audit(1389204381.590:3368): pid=8149 uid=0 auid=0 ses=116 subj=unconfined_u:system_r:groupadd_t:s0-s0:c0.c1023 msg='op= id=162 exe="/usr/sbin/groupadd" hostname=? addr=? terminal=? res=success' >type=ADD_USER msg=audit(1389204381.601:3369): pid=8160 uid=0 auid=0 ses=116 subj=unconfined_u:system_r:useradd_t:s0-s0:c0.c1023 msg='op=adding user id=162 exe="/usr/sbin/useradd" hostname=? addr=? terminal=? res=success' >type=ADD_USER msg=audit(1389204381.601:3370): pid=8160 uid=0 auid=0 ses=116 subj=unconfined_u:system_r:useradd_t:s0-s0:c0.c1023 msg='op=adding user to group acct="nova" exe="/usr/sbin/useradd" hostname=? addr=? terminal=? res=success' >type=ADD_USER msg=audit(1389204381.601:3371): pid=8160 uid=0 auid=0 ses=116 subj=unconfined_u:system_r:useradd_t:s0-s0:c0.c1023 msg='op=adding user to group acct="nova" exe="/usr/sbin/useradd" hostname=? addr=? terminal=? res=success' >type=ADD_USER msg=audit(1389204381.601:3372): pid=8160 uid=0 auid=0 ses=116 subj=unconfined_u:system_r:useradd_t:s0-s0:c0.c1023 msg='op=adding user to shadow group acct="nova" exe="/usr/sbin/useradd" hostname=? addr=? terminal=? res=success' >type=ADD_USER msg=audit(1389204381.602:3373): pid=8160 uid=0 auid=0 ses=116 subj=unconfined_u:system_r:useradd_t:s0-s0:c0.c1023 msg='op=adding user to shadow group acct="nova" exe="/usr/sbin/useradd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204384.580:3374): pid=8179 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=8179 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204384.581:3375): pid=8179 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=8179 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204384.583:3376): pid=8178 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=8179 suid=74 rport=33766 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204384.583:3377): pid=8178 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=8179 suid=74 rport=33766 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204385.114:3378): pid=8178 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=33766 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204385.114:3379): pid=8178 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=4096 fp=8b:56:b0:3f:c8:ad:38:a6:94:f4:a7:26:83:75:cc:85 rport=33766 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_ACCT msg=audit(1389204385.120:3380): pid=8178 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204385.121:3381): pid=8178 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=8179 suid=74 rport=33766 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204385.122:3382): pid=8178 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1389204385.124:3383): pid=8178 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=LOGIN msg=audit(1389204385.124:3384): login pid=8178 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=131 >type=USER_ROLE_CHANGE msg=audit(1389204385.200:3385): pid=8178 uid=0 auid=0 ses=131 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204385.219:3386): pid=8178 uid=0 auid=0 ses=131 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1389204385.224:3387): pid=8178 uid=0 auid=0 ses=131 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204385.225:3388): pid=8178 uid=0 auid=0 ses=131 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204385.227:3389): pid=8181 uid=0 auid=0 ses=131 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=8181 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204385.227:3390): pid=8181 uid=0 auid=0 ses=131 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=8181 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRED_REFR msg=audit(1389204385.229:3391): pid=8181 uid=0 auid=0 ses=131 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204385.253:3392): pid=8178 uid=0 auid=0 ses=131 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRED_DISP msg=audit(1389204385.255:3393): pid=8178 uid=0 auid=0 ses=131 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204385.257:3394): pid=8178 uid=0 auid=0 ses=131 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1389204385.258:3395): pid=8178 uid=0 auid=0 ses=131 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204385.259:3396): pid=8178 uid=0 auid=0 ses=131 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=8178 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204385.259:3397): pid=8178 uid=0 auid=0 ses=131 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=8178 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204385.259:3398): pid=8178 uid=0 auid=0 ses=131 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=8178 suid=0 rport=33766 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204388.272:3399): pid=8219 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=8219 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204388.272:3400): pid=8219 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=8219 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204388.276:3401): pid=8218 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=8219 suid=74 rport=33769 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204388.276:3402): pid=8218 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=8219 suid=74 rport=33769 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204388.800:3403): pid=8218 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=33769 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204388.800:3404): pid=8218 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=4096 fp=8b:56:b0:3f:c8:ad:38:a6:94:f4:a7:26:83:75:cc:85 rport=33769 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_ACCT msg=audit(1389204388.805:3405): pid=8218 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204388.806:3406): pid=8218 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=8219 suid=74 rport=33769 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204388.807:3407): pid=8218 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1389204388.809:3408): pid=8218 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=LOGIN msg=audit(1389204388.809:3409): login pid=8218 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=132 >type=USER_ROLE_CHANGE msg=audit(1389204388.866:3410): pid=8218 uid=0 auid=0 ses=132 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204388.922:3411): pid=8218 uid=0 auid=0 ses=132 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1389204388.928:3412): pid=8218 uid=0 auid=0 ses=132 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204388.929:3413): pid=8218 uid=0 auid=0 ses=132 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204388.932:3414): pid=8221 uid=0 auid=0 ses=132 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=8221 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204388.932:3415): pid=8221 uid=0 auid=0 ses=132 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=8221 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRED_REFR msg=audit(1389204388.934:3416): pid=8221 uid=0 auid=0 ses=132 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204388.970:3417): pid=8218 uid=0 auid=0 ses=132 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRED_DISP msg=audit(1389204388.973:3418): pid=8218 uid=0 auid=0 ses=132 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204388.975:3419): pid=8218 uid=0 auid=0 ses=132 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1389204388.977:3420): pid=8218 uid=0 auid=0 ses=132 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204388.977:3421): pid=8218 uid=0 auid=0 ses=132 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=8218 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204388.977:3422): pid=8218 uid=0 auid=0 ses=132 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=8218 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204388.977:3423): pid=8218 uid=0 auid=0 ses=132 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=8218 suid=0 rport=33769 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204391.989:3424): pid=8230 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=8230 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204391.989:3425): pid=8230 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=8230 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204391.992:3426): pid=8229 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=8230 suid=74 rport=33770 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204391.992:3427): pid=8229 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=8230 suid=74 rport=33770 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204392.521:3428): pid=8229 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=33770 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204392.521:3429): pid=8229 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=4096 fp=8b:56:b0:3f:c8:ad:38:a6:94:f4:a7:26:83:75:cc:85 rport=33770 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_ACCT msg=audit(1389204392.526:3430): pid=8229 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204392.527:3431): pid=8229 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=8230 suid=74 rport=33770 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204392.528:3432): pid=8229 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1389204392.530:3433): pid=8229 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=LOGIN msg=audit(1389204392.530:3434): login pid=8229 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=133 >type=USER_ROLE_CHANGE msg=audit(1389204392.610:3435): pid=8229 uid=0 auid=0 ses=133 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204392.634:3436): pid=8229 uid=0 auid=0 ses=133 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1389204392.641:3437): pid=8229 uid=0 auid=0 ses=133 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204392.643:3438): pid=8229 uid=0 auid=0 ses=133 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204392.645:3439): pid=8232 uid=0 auid=0 ses=133 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=8232 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204392.645:3440): pid=8232 uid=0 auid=0 ses=133 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=8232 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRED_REFR msg=audit(1389204392.647:3441): pid=8232 uid=0 auid=0 ses=133 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204392.672:3442): pid=8229 uid=0 auid=0 ses=133 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRED_DISP msg=audit(1389204392.674:3443): pid=8229 uid=0 auid=0 ses=133 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204392.677:3444): pid=8229 uid=0 auid=0 ses=133 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1389204392.678:3445): pid=8229 uid=0 auid=0 ses=133 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204392.678:3446): pid=8229 uid=0 auid=0 ses=133 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=8229 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204392.679:3447): pid=8229 uid=0 auid=0 ses=133 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=8229 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204392.679:3448): pid=8229 uid=0 auid=0 ses=133 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=8229 suid=0 rport=33770 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204395.689:3449): pid=8241 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=8241 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204395.690:3450): pid=8241 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=8241 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204395.695:3451): pid=8240 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=8241 suid=74 rport=33771 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204395.695:3452): pid=8240 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=8241 suid=74 rport=33771 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204396.226:3453): pid=8240 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=33771 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204396.226:3454): pid=8240 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=4096 fp=8b:56:b0:3f:c8:ad:38:a6:94:f4:a7:26:83:75:cc:85 rport=33771 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_ACCT msg=audit(1389204396.230:3455): pid=8240 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204396.231:3456): pid=8240 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=8241 suid=74 rport=33771 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204396.232:3457): pid=8240 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1389204396.234:3458): pid=8240 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=LOGIN msg=audit(1389204396.234:3459): login pid=8240 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=134 >type=USER_ROLE_CHANGE msg=audit(1389204396.274:3460): pid=8240 uid=0 auid=0 ses=134 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204396.294:3461): pid=8240 uid=0 auid=0 ses=134 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1389204396.299:3462): pid=8240 uid=0 auid=0 ses=134 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204396.300:3463): pid=8240 uid=0 auid=0 ses=134 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204396.301:3464): pid=8243 uid=0 auid=0 ses=134 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=8243 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204396.301:3465): pid=8243 uid=0 auid=0 ses=134 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=8243 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRED_REFR msg=audit(1389204396.303:3466): pid=8243 uid=0 auid=0 ses=134 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204396.335:3467): pid=8240 uid=0 auid=0 ses=134 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRED_DISP msg=audit(1389204396.337:3468): pid=8240 uid=0 auid=0 ses=134 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204396.339:3469): pid=8240 uid=0 auid=0 ses=134 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1389204396.341:3470): pid=8240 uid=0 auid=0 ses=134 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204396.341:3471): pid=8240 uid=0 auid=0 ses=134 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=8240 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204396.341:3472): pid=8240 uid=0 auid=0 ses=134 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=8240 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204396.342:3473): pid=8240 uid=0 auid=0 ses=134 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=8240 suid=0 rport=33771 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204399.341:3474): pid=8252 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=8252 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204399.341:3475): pid=8252 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=8252 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204399.343:3476): pid=8251 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=8252 suid=74 rport=33772 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204399.343:3477): pid=8251 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=8252 suid=74 rport=33772 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204399.871:3478): pid=8251 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=33772 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204399.871:3479): pid=8251 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=4096 fp=8b:56:b0:3f:c8:ad:38:a6:94:f4:a7:26:83:75:cc:85 rport=33772 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_ACCT msg=audit(1389204399.876:3480): pid=8251 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204399.877:3481): pid=8251 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=8252 suid=74 rport=33772 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204399.878:3482): pid=8251 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1389204399.880:3483): pid=8251 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=LOGIN msg=audit(1389204399.880:3484): login pid=8251 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=135 >type=USER_ROLE_CHANGE msg=audit(1389204399.942:3485): pid=8251 uid=0 auid=0 ses=135 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204399.968:3486): pid=8251 uid=0 auid=0 ses=135 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1389204399.973:3487): pid=8251 uid=0 auid=0 ses=135 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204399.975:3488): pid=8251 uid=0 auid=0 ses=135 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204399.977:3489): pid=8254 uid=0 auid=0 ses=135 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=8254 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204399.977:3490): pid=8254 uid=0 auid=0 ses=135 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=8254 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRED_REFR msg=audit(1389204399.980:3491): pid=8254 uid=0 auid=0 ses=135 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204400.008:3492): pid=8251 uid=0 auid=0 ses=135 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRED_DISP msg=audit(1389204400.010:3493): pid=8251 uid=0 auid=0 ses=135 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204400.013:3494): pid=8251 uid=0 auid=0 ses=135 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1389204400.016:3495): pid=8251 uid=0 auid=0 ses=135 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204400.016:3496): pid=8251 uid=0 auid=0 ses=135 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=8251 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204400.016:3497): pid=8251 uid=0 auid=0 ses=135 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=8251 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204400.016:3498): pid=8251 uid=0 auid=0 ses=135 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=8251 suid=0 rport=33772 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204403.019:3499): pid=8263 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=8263 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204403.019:3500): pid=8263 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=8263 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204403.027:3501): pid=8262 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=8263 suid=74 rport=33773 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204403.027:3502): pid=8262 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=8263 suid=74 rport=33773 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204403.566:3503): pid=8262 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=33773 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204403.567:3504): pid=8262 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=4096 fp=8b:56:b0:3f:c8:ad:38:a6:94:f4:a7:26:83:75:cc:85 rport=33773 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_ACCT msg=audit(1389204403.573:3505): pid=8262 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204403.574:3506): pid=8262 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=8263 suid=74 rport=33773 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204403.576:3507): pid=8262 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1389204403.579:3508): pid=8262 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=LOGIN msg=audit(1389204403.579:3509): login pid=8262 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=136 >type=USER_ROLE_CHANGE msg=audit(1389204403.639:3510): pid=8262 uid=0 auid=0 ses=136 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204403.659:3511): pid=8262 uid=0 auid=0 ses=136 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1389204403.663:3512): pid=8262 uid=0 auid=0 ses=136 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204403.665:3513): pid=8262 uid=0 auid=0 ses=136 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204403.666:3514): pid=8265 uid=0 auid=0 ses=136 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=8265 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204403.666:3515): pid=8265 uid=0 auid=0 ses=136 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=8265 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRED_REFR msg=audit(1389204403.668:3516): pid=8265 uid=0 auid=0 ses=136 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204403.696:3517): pid=8262 uid=0 auid=0 ses=136 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRED_DISP msg=audit(1389204403.698:3518): pid=8262 uid=0 auid=0 ses=136 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204403.700:3519): pid=8262 uid=0 auid=0 ses=136 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1389204403.701:3520): pid=8262 uid=0 auid=0 ses=136 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204403.702:3521): pid=8262 uid=0 auid=0 ses=136 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=8262 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204403.702:3522): pid=8262 uid=0 auid=0 ses=136 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=8262 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204403.702:3523): pid=8262 uid=0 auid=0 ses=136 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=8262 suid=0 rport=33773 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=SERVICE_START msg=audit(1389204404.632:3524): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="openstack-nova-api" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204406.709:3525): pid=8326 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=8326 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204406.709:3526): pid=8326 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=8326 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204406.711:3527): pid=8325 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=8326 suid=74 rport=33774 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204406.711:3528): pid=8325 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=8326 suid=74 rport=33774 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204407.231:3529): pid=8325 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=33774 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204407.231:3530): pid=8325 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=4096 fp=8b:56:b0:3f:c8:ad:38:a6:94:f4:a7:26:83:75:cc:85 rport=33774 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_ACCT msg=audit(1389204407.236:3531): pid=8325 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204407.237:3532): pid=8325 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=8326 suid=74 rport=33774 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204407.237:3533): pid=8325 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1389204407.240:3534): pid=8325 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=LOGIN msg=audit(1389204407.240:3535): login pid=8325 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=137 >type=USER_ROLE_CHANGE msg=audit(1389204407.290:3536): pid=8325 uid=0 auid=0 ses=137 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204407.320:3537): pid=8325 uid=0 auid=0 ses=137 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1389204407.324:3538): pid=8325 uid=0 auid=0 ses=137 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204407.326:3539): pid=8325 uid=0 auid=0 ses=137 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204407.327:3540): pid=8328 uid=0 auid=0 ses=137 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=8328 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204407.328:3541): pid=8328 uid=0 auid=0 ses=137 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=8328 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRED_REFR msg=audit(1389204407.330:3542): pid=8328 uid=0 auid=0 ses=137 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204407.974:3543): pid=8325 uid=0 auid=0 ses=137 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRED_DISP msg=audit(1389204407.976:3544): pid=8325 uid=0 auid=0 ses=137 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204407.979:3545): pid=8325 uid=0 auid=0 ses=137 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1389204407.981:3546): pid=8325 uid=0 auid=0 ses=137 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204407.981:3547): pid=8325 uid=0 auid=0 ses=137 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=8325 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204407.981:3548): pid=8325 uid=0 auid=0 ses=137 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=8325 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204407.982:3549): pid=8325 uid=0 auid=0 ses=137 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=8325 suid=0 rport=33774 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204408.005:3550): pid=8335 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=8335 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204408.006:3551): pid=8335 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=8335 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204408.009:3552): pid=8334 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=8335 suid=74 rport=33775 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204408.010:3553): pid=8334 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=8335 suid=74 rport=33775 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204408.540:3554): pid=8334 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=33775 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204408.540:3555): pid=8334 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=4096 fp=8b:56:b0:3f:c8:ad:38:a6:94:f4:a7:26:83:75:cc:85 rport=33775 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_ACCT msg=audit(1389204408.548:3556): pid=8334 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204408.549:3557): pid=8334 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=8335 suid=74 rport=33775 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204408.551:3558): pid=8334 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1389204408.553:3559): pid=8334 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=LOGIN msg=audit(1389204408.553:3560): login pid=8334 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=138 >type=USER_ROLE_CHANGE msg=audit(1389204408.681:3561): pid=8334 uid=0 auid=0 ses=138 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204408.706:3562): pid=8334 uid=0 auid=0 ses=138 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1389204408.711:3563): pid=8334 uid=0 auid=0 ses=138 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204408.713:3564): pid=8334 uid=0 auid=0 ses=138 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204408.714:3565): pid=8338 uid=0 auid=0 ses=138 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=8338 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204408.714:3566): pid=8338 uid=0 auid=0 ses=138 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=8338 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRED_REFR msg=audit(1389204408.717:3567): pid=8338 uid=0 auid=0 ses=138 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204408.750:3568): pid=8334 uid=0 auid=0 ses=138 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRED_DISP msg=audit(1389204408.753:3569): pid=8334 uid=0 auid=0 ses=138 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204408.756:3570): pid=8334 uid=0 auid=0 ses=138 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1389204408.760:3571): pid=8334 uid=0 auid=0 ses=138 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204408.760:3572): pid=8334 uid=0 auid=0 ses=138 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=8334 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204408.760:3573): pid=8334 uid=0 auid=0 ses=138 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=8334 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204408.760:3574): pid=8334 uid=0 auid=0 ses=138 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=8334 suid=0 rport=33775 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204408.787:3575): pid=8352 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=8352 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204408.788:3576): pid=8352 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=8352 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204408.792:3577): pid=8351 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=8352 suid=74 rport=33776 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204408.793:3578): pid=8351 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=8352 suid=74 rport=33776 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_CMD msg=audit(1389204409.191:3579): pid=8359 uid=162 auid=4294967295 ses=4294967295 subj=system_u:system_r:nova_api_t:s0 msg='cwd="/" cmd=6E6F76612D726F6F7477726170202F6574632F6E6F76612F726F6F74777261702E636F6E662069707461626C65732D73617665202D63 terminal=? res=success' >type=USER_START msg=audit(1389204409.192:3580): pid=8359 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:nova_api_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_AUTH msg=audit(1389204409.327:3581): pid=8351 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=33776 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204409.327:3582): pid=8351 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=4096 fp=8b:56:b0:3f:c8:ad:38:a6:94:f4:a7:26:83:75:cc:85 rport=33776 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_ACCT msg=audit(1389204409.335:3583): pid=8351 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204409.336:3584): pid=8351 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=8352 suid=74 rport=33776 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204409.339:3585): pid=8351 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1389204409.342:3586): pid=8351 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=LOGIN msg=audit(1389204409.342:3587): login pid=8351 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=139 >type=USER_END msg=audit(1389204409.386:3588): pid=8359 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:nova_api_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1389204409.446:3589): pid=8363 uid=162 auid=4294967295 ses=4294967295 subj=system_u:system_r:nova_api_t:s0 msg='cwd="/" cmd=6E6F76612D726F6F7477726170202F6574632F6E6F76612F726F6F74777261702E636F6E662069707461626C65732D726573746F7265202D63 terminal=? res=success' >type=USER_START msg=audit(1389204409.446:3590): pid=8363 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:nova_api_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_ROLE_CHANGE msg=audit(1389204409.493:3591): pid=8351 uid=0 auid=0 ses=139 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204409.517:3592): pid=8351 uid=0 auid=0 ses=139 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1389204409.523:3593): pid=8351 uid=0 auid=0 ses=139 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204409.525:3594): pid=8351 uid=0 auid=0 ses=139 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204409.526:3595): pid=8365 uid=0 auid=0 ses=139 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=8365 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204409.526:3596): pid=8365 uid=0 auid=0 ses=139 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=8365 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRED_REFR msg=audit(1389204409.529:3597): pid=8365 uid=0 auid=0 ses=139 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204409.572:3598): pid=8351 uid=0 auid=0 ses=139 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRED_DISP msg=audit(1389204409.574:3599): pid=8351 uid=0 auid=0 ses=139 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204409.576:3600): pid=8351 uid=0 auid=0 ses=139 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1389204409.578:3601): pid=8351 uid=0 auid=0 ses=139 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204409.578:3602): pid=8351 uid=0 auid=0 ses=139 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=8351 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204409.578:3603): pid=8351 uid=0 auid=0 ses=139 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=8351 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204409.578:3604): pid=8351 uid=0 auid=0 ses=139 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=8351 suid=0 rport=33776 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=NETFILTER_CFG msg=audit(1389204410.007:3605): table=nat family=2 entries=0 >type=SYSCALL msg=audit(1389204410.007:3605): arch=c000003e syscall=313 success=yes exit=0 a0=0 a1=41a396 a2=0 a3=0 items=0 ppid=8371 pid=8372 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="modprobe" exe="/usr/bin/kmod" subj=system_u:system_r:insmod_t:s0 key=(null) >type=NETFILTER_CFG msg=audit(1389204410.009:3606): table=nat family=2 entries=5 >type=SYSCALL msg=audit(1389204410.009:3606): arch=c000003e syscall=54 success=yes exit=0 a0=3 a1=0 a2=40 a3=1ceb830 items=0 ppid=8364 pid=8370 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=NETFILTER_CFG msg=audit(1389204410.010:3607): table=mangle family=2 entries=0 >type=SYSCALL msg=audit(1389204410.010:3607): arch=c000003e syscall=313 success=yes exit=0 a0=0 a1=41a396 a2=0 a3=0 items=0 ppid=8381 pid=8382 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="modprobe" exe="/usr/bin/kmod" subj=system_u:system_r:insmod_t:s0 key=(null) >type=NETFILTER_CFG msg=audit(1389204410.011:3608): table=mangle family=2 entries=6 >type=SYSCALL msg=audit(1389204410.011:3608): arch=c000003e syscall=54 success=yes exit=0 a0=3 a1=0 a2=40 a3=1ceb260 items=0 ppid=8364 pid=8370 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=NETFILTER_CFG msg=audit(1389204410.059:3609): table=filter family=2 entries=10 >type=SYSCALL msg=audit(1389204410.059:3609): arch=c000003e syscall=54 success=yes exit=0 a0=3 a1=0 a2=40 a3=1cefcb0 items=0 ppid=8364 pid=8370 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=USER_END msg=audit(1389204410.063:3610): pid=8363 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:nova_api_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204412.583:3611): pid=8387 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=8387 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204412.583:3612): pid=8387 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=8387 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204412.586:3613): pid=8386 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=8387 suid=74 rport=33779 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204412.586:3614): pid=8386 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=8387 suid=74 rport=33779 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204413.112:3615): pid=8386 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=33779 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204413.112:3616): pid=8386 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=4096 fp=8b:56:b0:3f:c8:ad:38:a6:94:f4:a7:26:83:75:cc:85 rport=33779 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_ACCT msg=audit(1389204413.118:3617): pid=8386 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204413.120:3618): pid=8386 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=8387 suid=74 rport=33779 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204413.120:3619): pid=8386 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1389204413.123:3620): pid=8386 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=LOGIN msg=audit(1389204413.123:3621): login pid=8386 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=140 >type=USER_ROLE_CHANGE msg=audit(1389204413.170:3622): pid=8386 uid=0 auid=0 ses=140 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204413.185:3623): pid=8386 uid=0 auid=0 ses=140 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1389204413.190:3624): pid=8386 uid=0 auid=0 ses=140 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204413.191:3625): pid=8386 uid=0 auid=0 ses=140 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204413.192:3626): pid=8389 uid=0 auid=0 ses=140 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=8389 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204413.192:3627): pid=8389 uid=0 auid=0 ses=140 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=8389 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRED_REFR msg=audit(1389204413.194:3628): pid=8389 uid=0 auid=0 ses=140 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204413.215:3629): pid=8386 uid=0 auid=0 ses=140 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRED_DISP msg=audit(1389204413.216:3630): pid=8386 uid=0 auid=0 ses=140 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204413.219:3631): pid=8386 uid=0 auid=0 ses=140 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1389204413.221:3632): pid=8386 uid=0 auid=0 ses=140 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204413.221:3633): pid=8386 uid=0 auid=0 ses=140 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=8386 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204413.221:3634): pid=8386 uid=0 auid=0 ses=140 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=8386 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204413.221:3635): pid=8386 uid=0 auid=0 ses=140 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=8386 suid=0 rport=33779 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204416.223:3636): pid=8398 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=8398 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204416.223:3637): pid=8398 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=8398 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204416.225:3638): pid=8397 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=8398 suid=74 rport=33790 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204416.225:3639): pid=8397 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=8398 suid=74 rport=33790 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204416.750:3640): pid=8397 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=33790 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204416.750:3641): pid=8397 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=4096 fp=8b:56:b0:3f:c8:ad:38:a6:94:f4:a7:26:83:75:cc:85 rport=33790 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_ACCT msg=audit(1389204416.755:3642): pid=8397 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204416.756:3643): pid=8397 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=8398 suid=74 rport=33790 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204416.757:3644): pid=8397 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1389204416.759:3645): pid=8397 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=LOGIN msg=audit(1389204416.759:3646): login pid=8397 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=141 >type=USER_ROLE_CHANGE msg=audit(1389204416.804:3647): pid=8397 uid=0 auid=0 ses=141 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204416.824:3648): pid=8397 uid=0 auid=0 ses=141 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1389204416.828:3649): pid=8397 uid=0 auid=0 ses=141 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204416.830:3650): pid=8397 uid=0 auid=0 ses=141 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204416.831:3651): pid=8400 uid=0 auid=0 ses=141 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=8400 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204416.831:3652): pid=8400 uid=0 auid=0 ses=141 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=8400 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRED_REFR msg=audit(1389204416.834:3653): pid=8400 uid=0 auid=0 ses=141 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204416.857:3654): pid=8397 uid=0 auid=0 ses=141 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRED_DISP msg=audit(1389204416.860:3655): pid=8397 uid=0 auid=0 ses=141 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204416.862:3656): pid=8397 uid=0 auid=0 ses=141 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1389204416.864:3657): pid=8397 uid=0 auid=0 ses=141 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204416.864:3658): pid=8397 uid=0 auid=0 ses=141 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=8397 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204416.864:3659): pid=8397 uid=0 auid=0 ses=141 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=8397 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204416.864:3660): pid=8397 uid=0 auid=0 ses=141 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=8397 suid=0 rport=33790 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204419.867:3661): pid=8409 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=8409 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204419.867:3662): pid=8409 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=8409 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204419.869:3663): pid=8408 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=8409 suid=74 rport=33802 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204419.869:3664): pid=8408 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=8409 suid=74 rport=33802 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204420.395:3665): pid=8408 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=33802 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204420.395:3666): pid=8408 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=4096 fp=8b:56:b0:3f:c8:ad:38:a6:94:f4:a7:26:83:75:cc:85 rport=33802 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_ACCT msg=audit(1389204420.400:3667): pid=8408 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204420.401:3668): pid=8408 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=8409 suid=74 rport=33802 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204420.402:3669): pid=8408 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1389204420.404:3670): pid=8408 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=LOGIN msg=audit(1389204420.404:3671): login pid=8408 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=142 >type=USER_ROLE_CHANGE msg=audit(1389204420.447:3672): pid=8408 uid=0 auid=0 ses=142 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204420.462:3673): pid=8408 uid=0 auid=0 ses=142 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1389204420.467:3674): pid=8408 uid=0 auid=0 ses=142 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204420.469:3675): pid=8408 uid=0 auid=0 ses=142 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204420.470:3676): pid=8411 uid=0 auid=0 ses=142 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=8411 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204420.470:3677): pid=8411 uid=0 auid=0 ses=142 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=8411 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRED_REFR msg=audit(1389204420.473:3678): pid=8411 uid=0 auid=0 ses=142 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204420.495:3679): pid=8408 uid=0 auid=0 ses=142 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRED_DISP msg=audit(1389204420.497:3680): pid=8408 uid=0 auid=0 ses=142 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204420.499:3681): pid=8408 uid=0 auid=0 ses=142 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1389204420.501:3682): pid=8408 uid=0 auid=0 ses=142 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204420.501:3683): pid=8408 uid=0 auid=0 ses=142 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=8408 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204420.501:3684): pid=8408 uid=0 auid=0 ses=142 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=8408 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204420.501:3685): pid=8408 uid=0 auid=0 ses=142 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=8408 suid=0 rport=33802 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=NETFILTER_CFG msg=audit(1389204421.819:3686): table=filter family=2 entries=0 >type=NETFILTER_CFG msg=audit(1389204421.819:3686): table=nat family=2 entries=0 >type=NETFILTER_CFG msg=audit(1389204421.819:3686): table=mangle family=2 entries=0 >type=SYSCALL msg=audit(1389204421.819:3686): arch=c000003e syscall=272 success=yes exit=0 a0=40000000 a1=c0 a2=0 a3=7fff663e87a0 items=0 ppid=8544 pid=8551 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=138 tty=(none) comm="ip" exe="/usr/sbin/ip" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null) >type=NETFILTER_CFG msg=audit(1389204421.838:3687): table=filter family=2 entries=0 >type=NETFILTER_CFG msg=audit(1389204421.838:3687): table=nat family=2 entries=0 >type=NETFILTER_CFG msg=audit(1389204421.838:3687): table=mangle family=2 entries=0 >type=SYSCALL msg=audit(1389204421.838:3687): arch=c000003e syscall=272 success=yes exit=0 a0=40000000 a1=c0 a2=0 a3=7fffae86bf50 items=0 ppid=8544 pid=8557 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=138 tty=(none) comm="ip" exe="/usr/sbin/ip" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null) >type=NETFILTER_CFG msg=audit(1389204422.102:3688): table=filter family=2 entries=0 >type=NETFILTER_CFG msg=audit(1389204422.102:3688): table=nat family=2 entries=0 >type=NETFILTER_CFG msg=audit(1389204422.102:3688): table=mangle family=2 entries=0 >type=SYSCALL msg=audit(1389204422.102:3688): arch=c000003e syscall=272 success=yes exit=0 a0=40000000 a1=c0 a2=0 a3=7fff5ccfdfd0 items=0 ppid=8544 pid=8559 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=138 tty=(none) comm="ip" exe="/usr/sbin/ip" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null) >type=USER_CMD msg=audit(1389204422.756:3689): pid=8574 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D43204C414E473D4320766773202D2D6E6F68656164696E6773202D2D756E69743D67202D6F206E616D652C73697A652C667265652C6C765F636F756E742C75756964202D2D736570617261746F72203A202D2D6E6F7375666669782063696E6465722D766F6C756D6573 terminal=? res=success' >type=USER_START msg=audit(1389204422.757:3690): pid=8574 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1389204422.796:3691): pid=8574 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204423.514:3692): pid=8603 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=8603 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204423.518:3693): pid=8603 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=8603 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204423.520:3694): pid=8602 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=8603 suid=74 rport=33805 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204423.520:3695): pid=8602 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=8603 suid=74 rport=33805 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204424.043:3696): pid=8602 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=33805 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204424.043:3697): pid=8602 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=4096 fp=8b:56:b0:3f:c8:ad:38:a6:94:f4:a7:26:83:75:cc:85 rport=33805 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_ACCT msg=audit(1389204424.052:3698): pid=8602 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204424.052:3699): pid=8602 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=8603 suid=74 rport=33805 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204424.053:3700): pid=8602 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1389204424.056:3701): pid=8602 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=LOGIN msg=audit(1389204424.056:3702): login pid=8602 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=143 >type=USER_ROLE_CHANGE msg=audit(1389204424.153:3703): pid=8602 uid=0 auid=0 ses=143 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204424.174:3704): pid=8602 uid=0 auid=0 ses=143 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1389204424.179:3705): pid=8602 uid=0 auid=0 ses=143 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204424.181:3706): pid=8602 uid=0 auid=0 ses=143 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204424.183:3707): pid=8611 uid=0 auid=0 ses=143 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=8611 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204424.183:3708): pid=8611 uid=0 auid=0 ses=143 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=8611 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRED_REFR msg=audit(1389204424.185:3709): pid=8611 uid=0 auid=0 ses=143 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204424.211:3710): pid=8602 uid=0 auid=0 ses=143 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRED_DISP msg=audit(1389204424.213:3711): pid=8602 uid=0 auid=0 ses=143 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204424.216:3712): pid=8602 uid=0 auid=0 ses=143 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1389204424.218:3713): pid=8602 uid=0 auid=0 ses=143 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204424.218:3714): pid=8602 uid=0 auid=0 ses=143 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=8602 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204424.218:3715): pid=8602 uid=0 auid=0 ses=143 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=8602 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204424.218:3716): pid=8602 uid=0 auid=0 ses=143 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=8602 suid=0 rport=33805 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204427.223:3717): pid=8624 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=8624 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204427.223:3718): pid=8624 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=8624 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204427.225:3719): pid=8623 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=8624 suid=74 rport=33813 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204427.225:3720): pid=8623 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=8624 suid=74 rport=33813 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204428.739:3721): pid=8623 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=33813 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204428.739:3722): pid=8623 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=4096 fp=8b:56:b0:3f:c8:ad:38:a6:94:f4:a7:26:83:75:cc:85 rport=33813 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_ACCT msg=audit(1389204428.745:3723): pid=8623 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204428.746:3724): pid=8623 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=8624 suid=74 rport=33813 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204428.747:3725): pid=8623 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1389204428.749:3726): pid=8623 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=LOGIN msg=audit(1389204428.749:3727): login pid=8623 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=144 >type=USER_ROLE_CHANGE msg=audit(1389204428.792:3728): pid=8623 uid=0 auid=0 ses=144 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204428.809:3729): pid=8623 uid=0 auid=0 ses=144 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1389204428.814:3730): pid=8623 uid=0 auid=0 ses=144 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204428.816:3731): pid=8623 uid=0 auid=0 ses=144 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204428.818:3732): pid=8626 uid=0 auid=0 ses=144 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=8626 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204428.818:3733): pid=8626 uid=0 auid=0 ses=144 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=8626 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRED_REFR msg=audit(1389204428.820:3734): pid=8626 uid=0 auid=0 ses=144 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204428.845:3735): pid=8623 uid=0 auid=0 ses=144 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRED_DISP msg=audit(1389204428.847:3736): pid=8623 uid=0 auid=0 ses=144 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204428.850:3737): pid=8623 uid=0 auid=0 ses=144 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1389204428.852:3738): pid=8623 uid=0 auid=0 ses=144 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204428.852:3739): pid=8623 uid=0 auid=0 ses=144 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=8623 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204428.852:3740): pid=8623 uid=0 auid=0 ses=144 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=8623 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204428.852:3741): pid=8623 uid=0 auid=0 ses=144 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=8623 suid=0 rport=33813 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204431.855:3742): pid=8635 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=8635 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204431.855:3743): pid=8635 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=8635 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204431.857:3744): pid=8634 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=8635 suid=74 rport=33824 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204431.857:3745): pid=8634 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=8635 suid=74 rport=33824 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204432.417:3746): pid=8634 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=33824 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204432.417:3747): pid=8634 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=4096 fp=8b:56:b0:3f:c8:ad:38:a6:94:f4:a7:26:83:75:cc:85 rport=33824 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_ACCT msg=audit(1389204432.422:3748): pid=8634 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204432.423:3749): pid=8634 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=8635 suid=74 rport=33824 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204432.424:3750): pid=8634 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1389204432.426:3751): pid=8634 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=LOGIN msg=audit(1389204432.426:3752): login pid=8634 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=145 >type=USER_ROLE_CHANGE msg=audit(1389204432.470:3753): pid=8634 uid=0 auid=0 ses=145 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204432.487:3754): pid=8634 uid=0 auid=0 ses=145 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1389204432.492:3755): pid=8634 uid=0 auid=0 ses=145 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204432.494:3756): pid=8634 uid=0 auid=0 ses=145 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204432.495:3757): pid=8637 uid=0 auid=0 ses=145 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=8637 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204432.495:3758): pid=8637 uid=0 auid=0 ses=145 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=8637 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRED_REFR msg=audit(1389204432.497:3759): pid=8637 uid=0 auid=0 ses=145 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204432.518:3760): pid=8634 uid=0 auid=0 ses=145 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRED_DISP msg=audit(1389204432.520:3761): pid=8634 uid=0 auid=0 ses=145 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204432.523:3762): pid=8634 uid=0 auid=0 ses=145 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1389204432.524:3763): pid=8634 uid=0 auid=0 ses=145 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204432.524:3764): pid=8634 uid=0 auid=0 ses=145 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=8634 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204432.525:3765): pid=8634 uid=0 auid=0 ses=145 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=8634 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204432.525:3766): pid=8634 uid=0 auid=0 ses=145 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=8634 suid=0 rport=33824 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=NETFILTER_CFG msg=audit(1389204435.164:3767): table=filter family=2 entries=0 >type=NETFILTER_CFG msg=audit(1389204435.164:3767): table=nat family=2 entries=0 >type=NETFILTER_CFG msg=audit(1389204435.164:3767): table=mangle family=2 entries=0 >type=SYSCALL msg=audit(1389204435.164:3767): arch=c000003e syscall=272 success=yes exit=0 a0=40000000 a1=c0 a2=0 a3=7fff14aff420 items=0 ppid=8755 pid=8762 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=138 tty=(none) comm="ip" exe="/usr/sbin/ip" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null) >type=NETFILTER_CFG msg=audit(1389204435.181:3768): table=filter family=2 entries=0 >type=NETFILTER_CFG msg=audit(1389204435.181:3768): table=nat family=2 entries=0 >type=NETFILTER_CFG msg=audit(1389204435.181:3768): table=mangle family=2 entries=0 >type=SYSCALL msg=audit(1389204435.181:3768): arch=c000003e syscall=272 success=yes exit=0 a0=40000000 a1=c0 a2=0 a3=7fff6b257430 items=0 ppid=8755 pid=8768 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=138 tty=(none) comm="ip" exe="/usr/sbin/ip" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null) >type=NETFILTER_CFG msg=audit(1389204435.445:3769): table=filter family=2 entries=0 >type=NETFILTER_CFG msg=audit(1389204435.445:3769): table=nat family=2 entries=0 >type=NETFILTER_CFG msg=audit(1389204435.445:3769): table=mangle family=2 entries=0 >type=SYSCALL msg=audit(1389204435.445:3769): arch=c000003e syscall=272 success=yes exit=0 a0=40000000 a1=c0 a2=0 a3=7fff5fdaf850 items=0 ppid=8755 pid=8770 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=138 tty=(none) comm="ip" exe="/usr/sbin/ip" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null) >type=CRYPTO_KEY_USER msg=audit(1389204435.528:3770): pid=8789 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=8789 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204435.528:3771): pid=8789 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=8789 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204435.530:3772): pid=8788 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=8789 suid=74 rport=33833 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204435.530:3773): pid=8788 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=8789 suid=74 rport=33833 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204436.067:3774): pid=8788 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=33833 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204436.067:3775): pid=8788 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=4096 fp=8b:56:b0:3f:c8:ad:38:a6:94:f4:a7:26:83:75:cc:85 rport=33833 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_ACCT msg=audit(1389204436.072:3776): pid=8788 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204436.073:3777): pid=8788 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=8789 suid=74 rport=33833 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204436.074:3778): pid=8788 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1389204436.076:3779): pid=8788 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=LOGIN msg=audit(1389204436.076:3780): login pid=8788 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=146 >type=USER_ROLE_CHANGE msg=audit(1389204436.118:3781): pid=8788 uid=0 auid=0 ses=146 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204436.133:3782): pid=8788 uid=0 auid=0 ses=146 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1389204436.138:3783): pid=8788 uid=0 auid=0 ses=146 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204436.140:3784): pid=8788 uid=0 auid=0 ses=146 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204436.141:3785): pid=8791 uid=0 auid=0 ses=146 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=8791 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204436.141:3786): pid=8791 uid=0 auid=0 ses=146 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=8791 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRED_REFR msg=audit(1389204436.144:3787): pid=8791 uid=0 auid=0 ses=146 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204436.163:3788): pid=8788 uid=0 auid=0 ses=146 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRED_DISP msg=audit(1389204436.166:3789): pid=8788 uid=0 auid=0 ses=146 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204436.168:3790): pid=8788 uid=0 auid=0 ses=146 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1389204436.171:3791): pid=8788 uid=0 auid=0 ses=146 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204436.171:3792): pid=8788 uid=0 auid=0 ses=146 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=8788 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204436.171:3793): pid=8788 uid=0 auid=0 ses=146 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=8788 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204436.171:3794): pid=8788 uid=0 auid=0 ses=146 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=8788 suid=0 rport=33833 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=NETFILTER_CFG msg=audit(1389204437.084:3795): table=filter family=2 entries=27 >type=SYSCALL msg=audit(1389204437.084:3795): arch=c000003e syscall=54 success=yes exit=0 a0=3 a1=0 a2=40 a3=1795500 items=0 ppid=8348 pid=8818 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=138 tty=(none) comm="iptables" exe="/usr/sbin/xtables-multi" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null) >type=CRYPTO_KEY_USER msg=audit(1389204439.184:3796): pid=8836 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=8836 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204439.185:3797): pid=8836 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=8836 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204439.188:3798): pid=8835 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=8836 suid=74 rport=33834 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204439.188:3799): pid=8835 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=8836 suid=74 rport=33834 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204439.791:3800): pid=8835 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=33834 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204439.791:3801): pid=8835 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=4096 fp=8b:56:b0:3f:c8:ad:38:a6:94:f4:a7:26:83:75:cc:85 rport=33834 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_ACCT msg=audit(1389204439.797:3802): pid=8835 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204439.798:3803): pid=8835 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=8836 suid=74 rport=33834 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204439.799:3804): pid=8835 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1389204439.801:3805): pid=8835 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=LOGIN msg=audit(1389204439.801:3806): login pid=8835 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=147 >type=USER_ROLE_CHANGE msg=audit(1389204439.897:3807): pid=8835 uid=0 auid=0 ses=147 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204439.922:3808): pid=8835 uid=0 auid=0 ses=147 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1389204439.928:3809): pid=8835 uid=0 auid=0 ses=147 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204439.931:3810): pid=8835 uid=0 auid=0 ses=147 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204439.932:3811): pid=8838 uid=0 auid=0 ses=147 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=8838 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204439.932:3812): pid=8838 uid=0 auid=0 ses=147 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=8838 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRED_REFR msg=audit(1389204439.936:3813): pid=8838 uid=0 auid=0 ses=147 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204439.965:3814): pid=8835 uid=0 auid=0 ses=147 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRED_DISP msg=audit(1389204439.968:3815): pid=8835 uid=0 auid=0 ses=147 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204439.971:3816): pid=8835 uid=0 auid=0 ses=147 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1389204439.973:3817): pid=8835 uid=0 auid=0 ses=147 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204439.973:3818): pid=8835 uid=0 auid=0 ses=147 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=8835 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204439.973:3819): pid=8835 uid=0 auid=0 ses=147 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=8835 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204439.973:3820): pid=8835 uid=0 auid=0 ses=147 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=8835 suid=0 rport=33834 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204442.977:3821): pid=8861 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=8861 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204442.977:3822): pid=8861 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=8861 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204442.979:3823): pid=8860 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=8861 suid=74 rport=33846 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204442.980:3824): pid=8860 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=8861 suid=74 rport=33846 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204443.571:3825): pid=8860 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=33846 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204443.571:3826): pid=8860 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=4096 fp=8b:56:b0:3f:c8:ad:38:a6:94:f4:a7:26:83:75:cc:85 rport=33846 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_ACCT msg=audit(1389204443.577:3827): pid=8860 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204443.578:3828): pid=8860 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=8861 suid=74 rport=33846 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204443.578:3829): pid=8860 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1389204443.581:3830): pid=8860 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=LOGIN msg=audit(1389204443.581:3831): login pid=8860 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=148 >type=USER_ROLE_CHANGE msg=audit(1389204443.630:3832): pid=8860 uid=0 auid=0 ses=148 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204443.654:3833): pid=8860 uid=0 auid=0 ses=148 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1389204443.659:3834): pid=8860 uid=0 auid=0 ses=148 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204443.661:3835): pid=8860 uid=0 auid=0 ses=148 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204443.662:3836): pid=8863 uid=0 auid=0 ses=148 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=8863 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204443.662:3837): pid=8863 uid=0 auid=0 ses=148 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=8863 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRED_REFR msg=audit(1389204443.665:3838): pid=8863 uid=0 auid=0 ses=148 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204443.691:3839): pid=8860 uid=0 auid=0 ses=148 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRED_DISP msg=audit(1389204443.693:3840): pid=8860 uid=0 auid=0 ses=148 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204443.695:3841): pid=8860 uid=0 auid=0 ses=148 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1389204443.697:3842): pid=8860 uid=0 auid=0 ses=148 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204443.697:3843): pid=8860 uid=0 auid=0 ses=148 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=8860 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204443.697:3844): pid=8860 uid=0 auid=0 ses=148 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=8860 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204443.697:3845): pid=8860 uid=0 auid=0 ses=148 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=8860 suid=0 rport=33846 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204446.702:3846): pid=8880 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=8880 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204446.702:3847): pid=8880 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=8880 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204446.704:3848): pid=8879 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=8880 suid=74 rport=33852 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204446.704:3849): pid=8879 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=8880 suid=74 rport=33852 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204447.265:3850): pid=8879 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=33852 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204447.265:3851): pid=8879 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=4096 fp=8b:56:b0:3f:c8:ad:38:a6:94:f4:a7:26:83:75:cc:85 rport=33852 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_ACCT msg=audit(1389204447.271:3852): pid=8879 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204447.272:3853): pid=8879 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=8880 suid=74 rport=33852 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204447.272:3854): pid=8879 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1389204447.275:3855): pid=8879 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=LOGIN msg=audit(1389204447.275:3856): login pid=8879 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=149 >type=USER_ROLE_CHANGE msg=audit(1389204447.322:3857): pid=8879 uid=0 auid=0 ses=149 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204447.339:3858): pid=8879 uid=0 auid=0 ses=149 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1389204447.344:3859): pid=8879 uid=0 auid=0 ses=149 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204447.346:3860): pid=8879 uid=0 auid=0 ses=149 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204447.347:3861): pid=8884 uid=0 auid=0 ses=149 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=8884 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204447.347:3862): pid=8884 uid=0 auid=0 ses=149 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=8884 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRED_REFR msg=audit(1389204447.350:3863): pid=8884 uid=0 auid=0 ses=149 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204447.372:3864): pid=8879 uid=0 auid=0 ses=149 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRED_DISP msg=audit(1389204447.374:3865): pid=8879 uid=0 auid=0 ses=149 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204447.380:3866): pid=8879 uid=0 auid=0 ses=149 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1389204447.382:3867): pid=8879 uid=0 auid=0 ses=149 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204447.382:3868): pid=8879 uid=0 auid=0 ses=149 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=8879 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204447.382:3869): pid=8879 uid=0 auid=0 ses=149 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=8879 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204447.382:3870): pid=8879 uid=0 auid=0 ses=149 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=8879 suid=0 rport=33852 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204450.382:3871): pid=8893 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=8893 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204450.382:3872): pid=8893 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=8893 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204450.384:3873): pid=8892 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=8893 suid=74 rport=33857 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204450.384:3874): pid=8892 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=8893 suid=74 rport=33857 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204450.915:3875): pid=8892 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=33857 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204450.916:3876): pid=8892 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=4096 fp=8b:56:b0:3f:c8:ad:38:a6:94:f4:a7:26:83:75:cc:85 rport=33857 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_ACCT msg=audit(1389204450.921:3877): pid=8892 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204450.922:3878): pid=8892 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=8893 suid=74 rport=33857 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204450.923:3879): pid=8892 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1389204450.926:3880): pid=8892 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=LOGIN msg=audit(1389204450.926:3881): login pid=8892 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=150 >type=USER_ROLE_CHANGE msg=audit(1389204450.993:3882): pid=8892 uid=0 auid=0 ses=150 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204451.013:3883): pid=8892 uid=0 auid=0 ses=150 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1389204451.017:3884): pid=8892 uid=0 auid=0 ses=150 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204451.019:3885): pid=8892 uid=0 auid=0 ses=150 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204451.020:3886): pid=8895 uid=0 auid=0 ses=150 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=8895 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204451.020:3887): pid=8895 uid=0 auid=0 ses=150 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=8895 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRED_REFR msg=audit(1389204451.022:3888): pid=8895 uid=0 auid=0 ses=150 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204451.053:3889): pid=8892 uid=0 auid=0 ses=150 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRED_DISP msg=audit(1389204451.055:3890): pid=8892 uid=0 auid=0 ses=150 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204451.057:3891): pid=8892 uid=0 auid=0 ses=150 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1389204451.059:3892): pid=8892 uid=0 auid=0 ses=150 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204451.059:3893): pid=8892 uid=0 auid=0 ses=150 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=8892 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204451.059:3894): pid=8892 uid=0 auid=0 ses=150 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=8892 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204451.059:3895): pid=8892 uid=0 auid=0 ses=150 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=8892 suid=0 rport=33857 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204454.066:3896): pid=8919 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=8919 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204454.066:3897): pid=8919 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=8919 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204454.068:3898): pid=8918 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=8919 suid=74 rport=33858 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204454.069:3899): pid=8918 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=8919 suid=74 rport=33858 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204454.596:3900): pid=8918 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=33858 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204454.596:3901): pid=8918 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=4096 fp=8b:56:b0:3f:c8:ad:38:a6:94:f4:a7:26:83:75:cc:85 rport=33858 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_ACCT msg=audit(1389204454.602:3902): pid=8918 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204454.603:3903): pid=8918 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=8919 suid=74 rport=33858 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204454.604:3904): pid=8918 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1389204454.607:3905): pid=8918 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=LOGIN msg=audit(1389204454.607:3906): login pid=8918 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=151 >type=USER_ROLE_CHANGE msg=audit(1389204454.689:3907): pid=8918 uid=0 auid=0 ses=151 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204454.709:3908): pid=8918 uid=0 auid=0 ses=151 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1389204454.713:3909): pid=8918 uid=0 auid=0 ses=151 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204454.715:3910): pid=8918 uid=0 auid=0 ses=151 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204454.716:3911): pid=8924 uid=0 auid=0 ses=151 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=8924 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204454.716:3912): pid=8924 uid=0 auid=0 ses=151 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=8924 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRED_REFR msg=audit(1389204454.719:3913): pid=8924 uid=0 auid=0 ses=151 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204454.746:3914): pid=8918 uid=0 auid=0 ses=151 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRED_DISP msg=audit(1389204454.748:3915): pid=8918 uid=0 auid=0 ses=151 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204454.750:3916): pid=8918 uid=0 auid=0 ses=151 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1389204454.752:3917): pid=8918 uid=0 auid=0 ses=151 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204454.752:3918): pid=8918 uid=0 auid=0 ses=151 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=8918 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204454.752:3919): pid=8918 uid=0 auid=0 ses=151 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=8918 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204454.752:3920): pid=8918 uid=0 auid=0 ses=151 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=8918 suid=0 rport=33858 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204457.756:3921): pid=8935 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=8935 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204457.757:3922): pid=8935 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=8935 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204457.758:3923): pid=8934 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=8935 suid=74 rport=33859 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204457.758:3924): pid=8934 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=8935 suid=74 rport=33859 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204458.283:3925): pid=8934 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=33859 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204458.283:3926): pid=8934 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=4096 fp=8b:56:b0:3f:c8:ad:38:a6:94:f4:a7:26:83:75:cc:85 rport=33859 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_ACCT msg=audit(1389204458.288:3927): pid=8934 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204458.289:3928): pid=8934 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=8935 suid=74 rport=33859 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204458.290:3929): pid=8934 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1389204458.292:3930): pid=8934 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=LOGIN msg=audit(1389204458.292:3931): login pid=8934 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=152 >type=USER_ROLE_CHANGE msg=audit(1389204458.356:3932): pid=8934 uid=0 auid=0 ses=152 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204458.373:3933): pid=8934 uid=0 auid=0 ses=152 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1389204458.381:3934): pid=8934 uid=0 auid=0 ses=152 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204458.383:3935): pid=8934 uid=0 auid=0 ses=152 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204458.384:3936): pid=8938 uid=0 auid=0 ses=152 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=8938 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204458.384:3937): pid=8938 uid=0 auid=0 ses=152 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=8938 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRED_REFR msg=audit(1389204458.387:3938): pid=8938 uid=0 auid=0 ses=152 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204458.414:3939): pid=8934 uid=0 auid=0 ses=152 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRED_DISP msg=audit(1389204458.416:3940): pid=8934 uid=0 auid=0 ses=152 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204458.418:3941): pid=8934 uid=0 auid=0 ses=152 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1389204458.420:3942): pid=8934 uid=0 auid=0 ses=152 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204458.420:3943): pid=8934 uid=0 auid=0 ses=152 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=8934 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204458.421:3944): pid=8934 uid=0 auid=0 ses=152 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=8934 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204458.421:3945): pid=8934 uid=0 auid=0 ses=152 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=8934 suid=0 rport=33859 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=SERVICE_START msg=audit(1389204458.439:3946): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="systemd-tmpfiles-clean" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1389204458.440:3947): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="systemd-tmpfiles-clean" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=ADD_GROUP msg=audit(1389204459.128:3948): pid=8947 uid=0 auid=0 ses=138 subj=unconfined_u:system_r:groupadd_t:s0-s0:c0.c1023 msg='op=adding group to /etc/group id=996 exe="/usr/sbin/groupadd" hostname=? addr=? terminal=? res=success' >type=ADD_GROUP msg=audit(1389204459.135:3949): pid=8947 uid=0 auid=0 ses=138 subj=unconfined_u:system_r:groupadd_t:s0-s0:c0.c1023 msg='op=adding group to /etc/gshadow id=996 exe="/usr/sbin/groupadd" hostname=? addr=? terminal=? res=success' >type=ADD_GROUP msg=audit(1389204459.136:3950): pid=8947 uid=0 auid=0 ses=138 subj=unconfined_u:system_r:groupadd_t:s0-s0:c0.c1023 msg='op= id=996 exe="/usr/sbin/groupadd" hostname=? addr=? terminal=? res=success' >type=ADD_USER msg=audit(1389204459.162:3951): pid=8952 uid=0 auid=0 ses=138 subj=unconfined_u:system_r:useradd_t:s0-s0:c0.c1023 msg='op=adding user id=997 exe="/usr/sbin/useradd" hostname=? addr=? terminal=? res=success' >type=CRED_ACQ msg=audit(1389204459.883:3952): pid=8959 uid=0 auid=0 ses=138 subj=unconfined_u:system_r:rpm_script_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="unbound" exe="/usr/sbin/runuser" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1389204459.886:3953): pid=8959 uid=0 auid=0 ses=138 subj=unconfined_u:system_r:rpm_script_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="unbound" exe="/usr/sbin/runuser" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1389204460.092:3954): pid=8959 uid=0 auid=0 ses=138 subj=unconfined_u:system_r:rpm_script_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="unbound" exe="/usr/sbin/runuser" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1389204460.092:3955): pid=8959 uid=0 auid=0 ses=138 subj=unconfined_u:system_r:rpm_script_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="unbound" exe="/usr/sbin/runuser" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204461.427:3956): pid=8966 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=8966 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204461.427:3957): pid=8966 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=8966 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204461.429:3958): pid=8965 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=8966 suid=74 rport=33860 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204461.429:3959): pid=8965 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=8966 suid=74 rport=33860 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=ADD_GROUP msg=audit(1389204461.622:3960): pid=8969 uid=0 auid=0 ses=138 subj=unconfined_u:system_r:groupadd_t:s0-s0:c0.c1023 msg='op=adding group to /etc/group id=166 exe="/usr/sbin/groupadd" hostname=? addr=? terminal=? res=success' >type=ADD_GROUP msg=audit(1389204461.674:3961): pid=8969 uid=0 auid=0 ses=138 subj=unconfined_u:system_r:groupadd_t:s0-s0:c0.c1023 msg='op=adding group to /etc/gshadow id=166 exe="/usr/sbin/groupadd" hostname=? addr=? terminal=? res=success' >type=ADD_GROUP msg=audit(1389204461.674:3962): pid=8969 uid=0 auid=0 ses=138 subj=unconfined_u:system_r:groupadd_t:s0-s0:c0.c1023 msg='op= id=166 exe="/usr/sbin/groupadd" hostname=? addr=? terminal=? res=success' >type=ADD_USER msg=audit(1389204461.693:3963): pid=8974 uid=0 auid=0 ses=138 subj=unconfined_u:system_r:useradd_t:s0-s0:c0.c1023 msg='op=adding user id=166 exe="/usr/sbin/useradd" hostname=? addr=? terminal=? res=success' >type=ADD_USER msg=audit(1389204461.693:3964): pid=8974 uid=0 auid=0 ses=138 subj=unconfined_u:system_r:useradd_t:s0-s0:c0.c1023 msg='op=adding user to group acct="ceilometer" exe="/usr/sbin/useradd" hostname=? addr=? terminal=? res=success' >type=ADD_USER msg=audit(1389204461.693:3965): pid=8974 uid=0 auid=0 ses=138 subj=unconfined_u:system_r:useradd_t:s0-s0:c0.c1023 msg='op=adding user to group acct="ceilometer" exe="/usr/sbin/useradd" hostname=? addr=? terminal=? res=success' >type=ADD_USER msg=audit(1389204461.693:3966): pid=8974 uid=0 auid=0 ses=138 subj=unconfined_u:system_r:useradd_t:s0-s0:c0.c1023 msg='op=adding user to shadow group acct="ceilometer" exe="/usr/sbin/useradd" hostname=? addr=? terminal=? res=success' >type=ADD_USER msg=audit(1389204461.693:3967): pid=8974 uid=0 auid=0 ses=138 subj=unconfined_u:system_r:useradd_t:s0-s0:c0.c1023 msg='op=adding user to shadow group acct="ceilometer" exe="/usr/sbin/useradd" hostname=? addr=? terminal=? res=success' >type=USER_AUTH msg=audit(1389204461.952:3968): pid=8965 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=33860 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204461.952:3969): pid=8965 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=4096 fp=8b:56:b0:3f:c8:ad:38:a6:94:f4:a7:26:83:75:cc:85 rport=33860 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_ACCT msg=audit(1389204461.958:3970): pid=8965 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204461.959:3971): pid=8965 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=8966 suid=74 rport=33860 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204461.960:3972): pid=8965 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1389204461.962:3973): pid=8965 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=LOGIN msg=audit(1389204461.962:3974): login pid=8965 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=153 >type=USER_ROLE_CHANGE msg=audit(1389204462.009:3975): pid=8965 uid=0 auid=0 ses=153 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204462.027:3976): pid=8965 uid=0 auid=0 ses=153 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1389204462.032:3977): pid=8965 uid=0 auid=0 ses=153 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204462.034:3978): pid=8965 uid=0 auid=0 ses=153 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204462.035:3979): pid=8976 uid=0 auid=0 ses=153 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=8976 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204462.035:3980): pid=8976 uid=0 auid=0 ses=153 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=8976 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRED_REFR msg=audit(1389204462.038:3981): pid=8976 uid=0 auid=0 ses=153 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204462.058:3982): pid=8965 uid=0 auid=0 ses=153 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRED_DISP msg=audit(1389204462.060:3983): pid=8965 uid=0 auid=0 ses=153 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204462.062:3984): pid=8965 uid=0 auid=0 ses=153 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1389204462.064:3985): pid=8965 uid=0 auid=0 ses=153 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204462.064:3986): pid=8965 uid=0 auid=0 ses=153 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=8965 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204462.065:3987): pid=8965 uid=0 auid=0 ses=153 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=8965 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204462.065:3988): pid=8965 uid=0 auid=0 ses=153 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=8965 suid=0 rport=33860 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204465.072:3989): pid=9010 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=9010 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204465.072:3990): pid=9010 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=9010 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204465.074:3991): pid=9009 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=9010 suid=74 rport=33861 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204465.074:3992): pid=9009 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=9010 suid=74 rport=33861 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204465.591:3993): pid=9009 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=33861 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204465.591:3994): pid=9009 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=4096 fp=8b:56:b0:3f:c8:ad:38:a6:94:f4:a7:26:83:75:cc:85 rport=33861 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_ACCT msg=audit(1389204465.596:3995): pid=9009 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204465.597:3996): pid=9009 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=9010 suid=74 rport=33861 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204465.597:3997): pid=9009 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1389204465.600:3998): pid=9009 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=LOGIN msg=audit(1389204465.600:3999): login pid=9009 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=154 >type=USER_ROLE_CHANGE msg=audit(1389204465.643:4000): pid=9009 uid=0 auid=0 ses=154 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204465.677:4001): pid=9009 uid=0 auid=0 ses=154 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1389204465.682:4002): pid=9009 uid=0 auid=0 ses=154 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204465.684:4003): pid=9009 uid=0 auid=0 ses=154 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204465.685:4004): pid=9012 uid=0 auid=0 ses=154 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=9012 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204465.685:4005): pid=9012 uid=0 auid=0 ses=154 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=9012 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRED_REFR msg=audit(1389204465.687:4006): pid=9012 uid=0 auid=0 ses=154 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204465.711:4007): pid=9009 uid=0 auid=0 ses=154 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRED_DISP msg=audit(1389204465.713:4008): pid=9009 uid=0 auid=0 ses=154 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204465.715:4009): pid=9009 uid=0 auid=0 ses=154 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1389204465.717:4010): pid=9009 uid=0 auid=0 ses=154 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204465.717:4011): pid=9009 uid=0 auid=0 ses=154 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=9009 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204465.717:4012): pid=9009 uid=0 auid=0 ses=154 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=9009 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204465.717:4013): pid=9009 uid=0 auid=0 ses=154 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=9009 suid=0 rport=33861 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204468.736:4014): pid=9028 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=9028 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204468.736:4015): pid=9028 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=9028 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204468.739:4016): pid=9027 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=9028 suid=74 rport=33862 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204468.739:4017): pid=9027 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=9028 suid=74 rport=33862 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204469.259:4018): pid=9027 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=33862 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204469.260:4019): pid=9027 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=4096 fp=8b:56:b0:3f:c8:ad:38:a6:94:f4:a7:26:83:75:cc:85 rport=33862 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_ACCT msg=audit(1389204469.266:4020): pid=9027 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204469.267:4021): pid=9027 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=9028 suid=74 rport=33862 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204469.269:4022): pid=9027 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1389204469.271:4023): pid=9027 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=LOGIN msg=audit(1389204469.271:4024): login pid=9027 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=155 >type=USER_ROLE_CHANGE msg=audit(1389204469.364:4025): pid=9027 uid=0 auid=0 ses=155 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204469.385:4026): pid=9027 uid=0 auid=0 ses=155 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1389204469.391:4027): pid=9027 uid=0 auid=0 ses=155 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204469.393:4028): pid=9027 uid=0 auid=0 ses=155 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204469.394:4029): pid=9030 uid=0 auid=0 ses=155 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=9030 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204469.394:4030): pid=9030 uid=0 auid=0 ses=155 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=9030 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRED_REFR msg=audit(1389204469.396:4031): pid=9030 uid=0 auid=0 ses=155 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204469.425:4032): pid=9027 uid=0 auid=0 ses=155 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRED_DISP msg=audit(1389204469.427:4033): pid=9027 uid=0 auid=0 ses=155 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204469.429:4034): pid=9027 uid=0 auid=0 ses=155 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1389204469.430:4035): pid=9027 uid=0 auid=0 ses=155 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204469.430:4036): pid=9027 uid=0 auid=0 ses=155 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=9027 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204469.431:4037): pid=9027 uid=0 auid=0 ses=155 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=9027 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204469.431:4038): pid=9027 uid=0 auid=0 ses=155 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=9027 suid=0 rport=33862 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204472.447:4039): pid=9051 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=9051 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204472.447:4040): pid=9051 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=9051 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204472.451:4041): pid=9050 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=9051 suid=74 rport=33869 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204472.451:4042): pid=9050 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=9051 suid=74 rport=33869 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204473.019:4043): pid=9050 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=33869 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204473.019:4044): pid=9050 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=4096 fp=8b:56:b0:3f:c8:ad:38:a6:94:f4:a7:26:83:75:cc:85 rport=33869 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_ACCT msg=audit(1389204473.025:4045): pid=9050 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204473.026:4046): pid=9050 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=9051 suid=74 rport=33869 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204473.027:4047): pid=9050 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1389204473.029:4048): pid=9050 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=LOGIN msg=audit(1389204473.029:4049): login pid=9050 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=156 >type=USER_ROLE_CHANGE msg=audit(1389204473.078:4050): pid=9050 uid=0 auid=0 ses=156 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204473.104:4051): pid=9050 uid=0 auid=0 ses=156 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1389204473.110:4052): pid=9050 uid=0 auid=0 ses=156 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204473.112:4053): pid=9050 uid=0 auid=0 ses=156 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204473.113:4054): pid=9057 uid=0 auid=0 ses=156 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=9057 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204473.113:4055): pid=9057 uid=0 auid=0 ses=156 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=9057 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRED_REFR msg=audit(1389204473.116:4056): pid=9057 uid=0 auid=0 ses=156 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204473.138:4057): pid=9050 uid=0 auid=0 ses=156 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRED_DISP msg=audit(1389204473.140:4058): pid=9050 uid=0 auid=0 ses=156 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204473.142:4059): pid=9050 uid=0 auid=0 ses=156 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1389204473.145:4060): pid=9050 uid=0 auid=0 ses=156 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204473.145:4061): pid=9050 uid=0 auid=0 ses=156 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=9050 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204473.145:4062): pid=9050 uid=0 auid=0 ses=156 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=9050 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204473.145:4063): pid=9050 uid=0 auid=0 ses=156 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=9050 suid=0 rport=33869 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204476.151:4064): pid=9085 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=9085 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204476.152:4065): pid=9085 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=9085 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204476.154:4066): pid=9084 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=9085 suid=74 rport=33875 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204476.154:4067): pid=9084 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=9085 suid=74 rport=33875 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204476.715:4068): pid=9084 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=33875 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204476.715:4069): pid=9084 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=4096 fp=8b:56:b0:3f:c8:ad:38:a6:94:f4:a7:26:83:75:cc:85 rport=33875 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_ACCT msg=audit(1389204476.720:4070): pid=9084 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204476.721:4071): pid=9084 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=9085 suid=74 rport=33875 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204476.723:4072): pid=9084 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1389204476.726:4073): pid=9084 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=LOGIN msg=audit(1389204476.726:4074): login pid=9084 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=157 >type=USER_ROLE_CHANGE msg=audit(1389204476.778:4075): pid=9084 uid=0 auid=0 ses=157 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204476.796:4076): pid=9084 uid=0 auid=0 ses=157 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1389204476.805:4077): pid=9084 uid=0 auid=0 ses=157 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204476.808:4078): pid=9084 uid=0 auid=0 ses=157 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204476.809:4079): pid=9087 uid=0 auid=0 ses=157 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=9087 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204476.809:4080): pid=9087 uid=0 auid=0 ses=157 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=9087 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRED_REFR msg=audit(1389204476.811:4081): pid=9087 uid=0 auid=0 ses=157 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204476.837:4082): pid=9084 uid=0 auid=0 ses=157 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRED_DISP msg=audit(1389204476.841:4083): pid=9084 uid=0 auid=0 ses=157 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204476.844:4084): pid=9084 uid=0 auid=0 ses=157 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1389204476.846:4085): pid=9084 uid=0 auid=0 ses=157 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204476.846:4086): pid=9084 uid=0 auid=0 ses=157 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=9084 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204476.846:4087): pid=9084 uid=0 auid=0 ses=157 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=9084 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204476.846:4088): pid=9084 uid=0 auid=0 ses=157 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=9084 suid=0 rport=33875 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204479.848:4089): pid=9105 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=9105 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204479.848:4090): pid=9105 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=9105 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204479.850:4091): pid=9104 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=9105 suid=74 rport=33883 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204479.850:4092): pid=9104 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=9105 suid=74 rport=33883 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204480.412:4093): pid=9104 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=33883 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204480.412:4094): pid=9104 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=4096 fp=8b:56:b0:3f:c8:ad:38:a6:94:f4:a7:26:83:75:cc:85 rport=33883 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_ACCT msg=audit(1389204480.418:4095): pid=9104 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204480.419:4096): pid=9104 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=9105 suid=74 rport=33883 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204480.420:4097): pid=9104 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1389204480.422:4098): pid=9104 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=LOGIN msg=audit(1389204480.422:4099): login pid=9104 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=158 >type=USER_ROLE_CHANGE msg=audit(1389204480.469:4100): pid=9104 uid=0 auid=0 ses=158 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204480.486:4101): pid=9104 uid=0 auid=0 ses=158 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1389204480.491:4102): pid=9104 uid=0 auid=0 ses=158 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204480.493:4103): pid=9104 uid=0 auid=0 ses=158 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204480.495:4104): pid=9107 uid=0 auid=0 ses=158 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=9107 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204480.495:4105): pid=9107 uid=0 auid=0 ses=158 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=9107 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRED_REFR msg=audit(1389204480.497:4106): pid=9107 uid=0 auid=0 ses=158 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204480.519:4107): pid=9104 uid=0 auid=0 ses=158 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRED_DISP msg=audit(1389204480.521:4108): pid=9104 uid=0 auid=0 ses=158 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204480.524:4109): pid=9104 uid=0 auid=0 ses=158 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1389204480.526:4110): pid=9104 uid=0 auid=0 ses=158 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204480.526:4111): pid=9104 uid=0 auid=0 ses=158 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=9104 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204480.526:4112): pid=9104 uid=0 auid=0 ses=158 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=9104 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204480.526:4113): pid=9104 uid=0 auid=0 ses=158 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=9104 suid=0 rport=33883 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_CMD msg=audit(1389204482.819:4114): pid=9112 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D43204C414E473D4320766773202D2D6E6F68656164696E6773202D2D756E69743D67202D6F206E616D652C73697A652C667265652C6C765F636F756E742C75756964202D2D736570617261746F72203A202D2D6E6F7375666669782063696E6465722D766F6C756D6573 terminal=? res=success' >type=USER_START msg=audit(1389204482.821:4115): pid=9112 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1389204482.868:4116): pid=9112 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204483.538:4117): pid=9120 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=9120 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204483.538:4118): pid=9120 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=9120 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204483.541:4119): pid=9119 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=9120 suid=74 rport=33884 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204483.541:4120): pid=9119 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=9120 suid=74 rport=33884 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204484.097:4121): pid=9119 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=33884 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204484.097:4122): pid=9119 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=4096 fp=8b:56:b0:3f:c8:ad:38:a6:94:f4:a7:26:83:75:cc:85 rport=33884 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_ACCT msg=audit(1389204484.102:4123): pid=9119 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204484.103:4124): pid=9119 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=9120 suid=74 rport=33884 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204484.104:4125): pid=9119 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1389204484.106:4126): pid=9119 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=LOGIN msg=audit(1389204484.107:4127): login pid=9119 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=159 >type=USER_ROLE_CHANGE msg=audit(1389204484.156:4128): pid=9119 uid=0 auid=0 ses=159 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204484.177:4129): pid=9119 uid=0 auid=0 ses=159 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1389204484.182:4130): pid=9119 uid=0 auid=0 ses=159 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204484.184:4131): pid=9119 uid=0 auid=0 ses=159 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204484.186:4132): pid=9124 uid=0 auid=0 ses=159 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=9124 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204484.186:4133): pid=9124 uid=0 auid=0 ses=159 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=9124 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRED_REFR msg=audit(1389204484.188:4134): pid=9124 uid=0 auid=0 ses=159 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204484.210:4135): pid=9119 uid=0 auid=0 ses=159 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRED_DISP msg=audit(1389204484.213:4136): pid=9119 uid=0 auid=0 ses=159 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204484.215:4137): pid=9119 uid=0 auid=0 ses=159 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1389204484.217:4138): pid=9119 uid=0 auid=0 ses=159 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204484.218:4139): pid=9119 uid=0 auid=0 ses=159 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=9119 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204484.218:4140): pid=9119 uid=0 auid=0 ses=159 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=9119 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204484.218:4141): pid=9119 uid=0 auid=0 ses=159 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=9119 suid=0 rport=33884 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204487.221:4142): pid=9146 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=9146 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204487.221:4143): pid=9146 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=9146 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204487.223:4144): pid=9145 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=9146 suid=74 rport=33885 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204487.223:4145): pid=9145 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=9146 suid=74 rport=33885 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204487.738:4146): pid=9145 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=33885 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204487.738:4147): pid=9145 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=4096 fp=8b:56:b0:3f:c8:ad:38:a6:94:f4:a7:26:83:75:cc:85 rport=33885 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_ACCT msg=audit(1389204487.743:4148): pid=9145 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204487.744:4149): pid=9145 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=9146 suid=74 rport=33885 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204487.745:4150): pid=9145 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1389204487.747:4151): pid=9145 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=LOGIN msg=audit(1389204487.747:4152): login pid=9145 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=160 >type=USER_ROLE_CHANGE msg=audit(1389204487.789:4153): pid=9145 uid=0 auid=0 ses=160 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204487.805:4154): pid=9145 uid=0 auid=0 ses=160 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1389204487.810:4155): pid=9145 uid=0 auid=0 ses=160 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204487.812:4156): pid=9145 uid=0 auid=0 ses=160 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204487.813:4157): pid=9149 uid=0 auid=0 ses=160 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=9149 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204487.813:4158): pid=9149 uid=0 auid=0 ses=160 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=9149 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRED_REFR msg=audit(1389204487.816:4159): pid=9149 uid=0 auid=0 ses=160 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204487.839:4160): pid=9145 uid=0 auid=0 ses=160 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRED_DISP msg=audit(1389204487.841:4161): pid=9145 uid=0 auid=0 ses=160 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204487.844:4162): pid=9145 uid=0 auid=0 ses=160 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1389204487.846:4163): pid=9145 uid=0 auid=0 ses=160 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204487.846:4164): pid=9145 uid=0 auid=0 ses=160 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=9145 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204487.846:4165): pid=9145 uid=0 auid=0 ses=160 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=9145 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204487.847:4166): pid=9145 uid=0 auid=0 ses=160 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=9145 suid=0 rport=33885 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=ADD_GROUP msg=audit(1389204490.495:4167): pid=9159 uid=0 auid=0 ses=138 subj=unconfined_u:system_r:groupadd_t:s0-s0:c0.c1023 msg='op=adding group to /etc/group id=36 exe="/usr/sbin/groupadd" hostname=? addr=? terminal=? res=success' >type=ADD_GROUP msg=audit(1389204490.534:4168): pid=9159 uid=0 auid=0 ses=138 subj=unconfined_u:system_r:groupadd_t:s0-s0:c0.c1023 msg='op=adding group to /etc/gshadow id=36 exe="/usr/sbin/groupadd" hostname=? addr=? terminal=? res=success' >type=ADD_GROUP msg=audit(1389204490.535:4169): pid=9159 uid=0 auid=0 ses=138 subj=unconfined_u:system_r:groupadd_t:s0-s0:c0.c1023 msg='op= id=36 exe="/usr/sbin/groupadd" hostname=? addr=? terminal=? res=success' >type=ADD_GROUP msg=audit(1389204490.584:4170): pid=9164 uid=0 auid=0 ses=138 subj=unconfined_u:system_r:groupadd_t:s0-s0:c0.c1023 msg='op=adding group to /etc/group id=107 exe="/usr/sbin/groupadd" hostname=? addr=? terminal=? res=success' >type=ADD_GROUP msg=audit(1389204490.622:4171): pid=9164 uid=0 auid=0 ses=138 subj=unconfined_u:system_r:groupadd_t:s0-s0:c0.c1023 msg='op=adding group to /etc/gshadow id=107 exe="/usr/sbin/groupadd" hostname=? addr=? terminal=? res=success' >type=ADD_GROUP msg=audit(1389204490.623:4172): pid=9164 uid=0 auid=0 ses=138 subj=unconfined_u:system_r:groupadd_t:s0-s0:c0.c1023 msg='op= id=107 exe="/usr/sbin/groupadd" hostname=? addr=? terminal=? res=success' >type=ADD_USER msg=audit(1389204490.651:4173): pid=9169 uid=0 auid=0 ses=138 subj=unconfined_u:system_r:useradd_t:s0-s0:c0.c1023 msg='op=adding user id=107 exe="/usr/sbin/useradd" hostname=? addr=? terminal=? res=success' >type=ADD_USER msg=audit(1389204490.651:4174): pid=9169 uid=0 auid=0 ses=138 subj=unconfined_u:system_r:useradd_t:s0-s0:c0.c1023 msg='op=adding user to group acct="qemu" exe="/usr/sbin/useradd" hostname=? addr=? terminal=? res=success' >type=ADD_USER msg=audit(1389204490.652:4175): pid=9169 uid=0 auid=0 ses=138 subj=unconfined_u:system_r:useradd_t:s0-s0:c0.c1023 msg='op=adding user to shadow group acct="qemu" exe="/usr/sbin/useradd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204490.855:4176): pid=9178 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=9178 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204490.855:4177): pid=9178 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=9178 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204490.858:4178): pid=9177 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=9178 suid=74 rport=33886 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204490.858:4179): pid=9177 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=9178 suid=74 rport=33886 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204491.376:4180): pid=9177 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=33886 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204491.376:4181): pid=9177 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=4096 fp=8b:56:b0:3f:c8:ad:38:a6:94:f4:a7:26:83:75:cc:85 rport=33886 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_ACCT msg=audit(1389204491.381:4182): pid=9177 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204491.383:4183): pid=9177 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=9178 suid=74 rport=33886 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204491.384:4184): pid=9177 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1389204491.386:4185): pid=9177 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=LOGIN msg=audit(1389204491.386:4186): login pid=9177 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=161 >type=USER_ROLE_CHANGE msg=audit(1389204491.429:4187): pid=9177 uid=0 auid=0 ses=161 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204491.445:4188): pid=9177 uid=0 auid=0 ses=161 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1389204491.449:4189): pid=9177 uid=0 auid=0 ses=161 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204491.451:4190): pid=9177 uid=0 auid=0 ses=161 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204491.452:4191): pid=9183 uid=0 auid=0 ses=161 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=9183 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204491.452:4192): pid=9183 uid=0 auid=0 ses=161 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=9183 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRED_REFR msg=audit(1389204491.454:4193): pid=9183 uid=0 auid=0 ses=161 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204491.475:4194): pid=9177 uid=0 auid=0 ses=161 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRED_DISP msg=audit(1389204491.477:4195): pid=9177 uid=0 auid=0 ses=161 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204491.479:4196): pid=9177 uid=0 auid=0 ses=161 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1389204491.481:4197): pid=9177 uid=0 auid=0 ses=161 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204491.481:4198): pid=9177 uid=0 auid=0 ses=161 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=9177 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204491.481:4199): pid=9177 uid=0 auid=0 ses=161 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=9177 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204491.481:4200): pid=9177 uid=0 auid=0 ses=161 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=9177 suid=0 rport=33886 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204494.486:4201): pid=9201 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=9201 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204494.487:4202): pid=9201 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=9201 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204494.489:4203): pid=9200 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=9201 suid=74 rport=33887 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204494.489:4204): pid=9200 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=9201 suid=74 rport=33887 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204495.013:4205): pid=9200 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=33887 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204495.013:4206): pid=9200 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=4096 fp=8b:56:b0:3f:c8:ad:38:a6:94:f4:a7:26:83:75:cc:85 rport=33887 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_ACCT msg=audit(1389204495.018:4207): pid=9200 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204495.019:4208): pid=9200 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=9201 suid=74 rport=33887 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204495.020:4209): pid=9200 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1389204495.022:4210): pid=9200 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=LOGIN msg=audit(1389204495.022:4211): login pid=9200 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=162 >type=USER_ROLE_CHANGE msg=audit(1389204495.066:4212): pid=9200 uid=0 auid=0 ses=162 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204495.082:4213): pid=9200 uid=0 auid=0 ses=162 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1389204495.086:4214): pid=9200 uid=0 auid=0 ses=162 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204495.088:4215): pid=9200 uid=0 auid=0 ses=162 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204495.089:4216): pid=9203 uid=0 auid=0 ses=162 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=9203 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204495.089:4217): pid=9203 uid=0 auid=0 ses=162 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=9203 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRED_REFR msg=audit(1389204495.092:4218): pid=9203 uid=0 auid=0 ses=162 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204495.112:4219): pid=9200 uid=0 auid=0 ses=162 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRED_DISP msg=audit(1389204495.115:4220): pid=9200 uid=0 auid=0 ses=162 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204495.117:4221): pid=9200 uid=0 auid=0 ses=162 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1389204495.119:4222): pid=9200 uid=0 auid=0 ses=162 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204495.119:4223): pid=9200 uid=0 auid=0 ses=162 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=9200 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204495.119:4224): pid=9200 uid=0 auid=0 ses=162 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=9200 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204495.119:4225): pid=9200 uid=0 auid=0 ses=162 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=9200 suid=0 rport=33887 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204498.121:4226): pid=9220 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=9220 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204498.121:4227): pid=9220 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=9220 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204498.123:4228): pid=9219 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=9220 suid=74 rport=33888 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204498.123:4229): pid=9219 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=9220 suid=74 rport=33888 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204498.645:4230): pid=9219 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=33888 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204498.645:4231): pid=9219 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=4096 fp=8b:56:b0:3f:c8:ad:38:a6:94:f4:a7:26:83:75:cc:85 rport=33888 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_ACCT msg=audit(1389204498.650:4232): pid=9219 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204498.651:4233): pid=9219 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=9220 suid=74 rport=33888 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204498.652:4234): pid=9219 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1389204498.654:4235): pid=9219 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=LOGIN msg=audit(1389204498.654:4236): login pid=9219 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=163 >type=USER_ROLE_CHANGE msg=audit(1389204498.696:4237): pid=9219 uid=0 auid=0 ses=163 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204498.711:4238): pid=9219 uid=0 auid=0 ses=163 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1389204498.716:4239): pid=9219 uid=0 auid=0 ses=163 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204498.718:4240): pid=9219 uid=0 auid=0 ses=163 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204498.718:4241): pid=9223 uid=0 auid=0 ses=163 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=9223 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204498.719:4242): pid=9223 uid=0 auid=0 ses=163 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=9223 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRED_REFR msg=audit(1389204498.721:4243): pid=9223 uid=0 auid=0 ses=163 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204498.741:4244): pid=9219 uid=0 auid=0 ses=163 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRED_DISP msg=audit(1389204498.743:4245): pid=9219 uid=0 auid=0 ses=163 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204498.745:4246): pid=9219 uid=0 auid=0 ses=163 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1389204498.747:4247): pid=9219 uid=0 auid=0 ses=163 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204498.748:4248): pid=9219 uid=0 auid=0 ses=163 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=9219 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204498.748:4249): pid=9219 uid=0 auid=0 ses=163 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=9219 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204498.748:4250): pid=9219 uid=0 auid=0 ses=163 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=9219 suid=0 rport=33888 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204501.752:4251): pid=9235 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=9235 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204501.752:4252): pid=9235 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=9235 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204501.755:4253): pid=9234 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=9235 suid=74 rport=33889 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204501.755:4254): pid=9234 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=9235 suid=74 rport=33889 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204502.283:4255): pid=9234 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=33889 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204502.283:4256): pid=9234 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=4096 fp=8b:56:b0:3f:c8:ad:38:a6:94:f4:a7:26:83:75:cc:85 rport=33889 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_ACCT msg=audit(1389204502.288:4257): pid=9234 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204502.289:4258): pid=9234 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=9235 suid=74 rport=33889 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204502.290:4259): pid=9234 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1389204502.292:4260): pid=9234 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=LOGIN msg=audit(1389204502.292:4261): login pid=9234 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=164 >type=USER_ROLE_CHANGE msg=audit(1389204502.335:4262): pid=9234 uid=0 auid=0 ses=164 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204502.352:4263): pid=9234 uid=0 auid=0 ses=164 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1389204502.357:4264): pid=9234 uid=0 auid=0 ses=164 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204502.359:4265): pid=9234 uid=0 auid=0 ses=164 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204502.360:4266): pid=9237 uid=0 auid=0 ses=164 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=9237 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204502.360:4267): pid=9237 uid=0 auid=0 ses=164 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=9237 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRED_REFR msg=audit(1389204502.362:4268): pid=9237 uid=0 auid=0 ses=164 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204502.385:4269): pid=9234 uid=0 auid=0 ses=164 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRED_DISP msg=audit(1389204502.387:4270): pid=9234 uid=0 auid=0 ses=164 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204502.389:4271): pid=9234 uid=0 auid=0 ses=164 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1389204502.391:4272): pid=9234 uid=0 auid=0 ses=164 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204502.392:4273): pid=9234 uid=0 auid=0 ses=164 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=9234 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204502.392:4274): pid=9234 uid=0 auid=0 ses=164 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=9234 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204502.392:4275): pid=9234 uid=0 auid=0 ses=164 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=9234 suid=0 rport=33889 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204505.393:4276): pid=9252 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=9252 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204505.393:4277): pid=9252 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=9252 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204505.395:4278): pid=9251 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=9252 suid=74 rport=33890 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204505.395:4279): pid=9251 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=9252 suid=74 rport=33890 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204505.928:4280): pid=9251 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=33890 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204505.928:4281): pid=9251 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=4096 fp=8b:56:b0:3f:c8:ad:38:a6:94:f4:a7:26:83:75:cc:85 rport=33890 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_ACCT msg=audit(1389204505.934:4282): pid=9251 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204505.935:4283): pid=9251 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=9252 suid=74 rport=33890 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204505.936:4284): pid=9251 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1389204505.938:4285): pid=9251 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=LOGIN msg=audit(1389204505.938:4286): login pid=9251 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=165 >type=USER_ROLE_CHANGE msg=audit(1389204506.028:4287): pid=9251 uid=0 auid=0 ses=165 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204506.052:4288): pid=9251 uid=0 auid=0 ses=165 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1389204506.058:4289): pid=9251 uid=0 auid=0 ses=165 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204506.060:4290): pid=9251 uid=0 auid=0 ses=165 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204506.062:4291): pid=9260 uid=0 auid=0 ses=165 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=9260 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204506.062:4292): pid=9260 uid=0 auid=0 ses=165 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=9260 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRED_REFR msg=audit(1389204506.064:4293): pid=9260 uid=0 auid=0 ses=165 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204506.093:4294): pid=9251 uid=0 auid=0 ses=165 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRED_DISP msg=audit(1389204506.095:4295): pid=9251 uid=0 auid=0 ses=165 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204506.097:4296): pid=9251 uid=0 auid=0 ses=165 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1389204506.100:4297): pid=9251 uid=0 auid=0 ses=165 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204506.100:4298): pid=9251 uid=0 auid=0 ses=165 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=9251 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204506.100:4299): pid=9251 uid=0 auid=0 ses=165 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=9251 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204506.100:4300): pid=9251 uid=0 auid=0 ses=165 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=9251 suid=0 rport=33890 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=ADD_GROUP msg=audit(1389204506.683:4301): pid=9277 uid=0 auid=0 ses=138 subj=unconfined_u:system_r:groupadd_t:s0-s0:c0.c1023 msg='op=adding group to /etc/group id=995 exe="/usr/sbin/groupadd" hostname=? addr=? terminal=? res=success' >type=ADD_GROUP msg=audit(1389204506.689:4302): pid=9277 uid=0 auid=0 ses=138 subj=unconfined_u:system_r:groupadd_t:s0-s0:c0.c1023 msg='op=adding group to /etc/gshadow id=995 exe="/usr/sbin/groupadd" hostname=? addr=? terminal=? res=success' >type=ADD_GROUP msg=audit(1389204506.690:4303): pid=9277 uid=0 auid=0 ses=138 subj=unconfined_u:system_r:groupadd_t:s0-s0:c0.c1023 msg='op= id=995 exe="/usr/sbin/groupadd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204509.107:4304): pid=9294 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=9294 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204509.108:4305): pid=9294 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=9294 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204509.110:4306): pid=9293 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=9294 suid=74 rport=33891 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204509.110:4307): pid=9293 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=9294 suid=74 rport=33891 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204509.655:4308): pid=9293 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=33891 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204509.655:4309): pid=9293 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=4096 fp=8b:56:b0:3f:c8:ad:38:a6:94:f4:a7:26:83:75:cc:85 rport=33891 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_ACCT msg=audit(1389204509.660:4310): pid=9293 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204509.661:4311): pid=9293 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=9294 suid=74 rport=33891 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204509.662:4312): pid=9293 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1389204509.664:4313): pid=9293 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=LOGIN msg=audit(1389204509.664:4314): login pid=9293 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=166 >type=USER_ROLE_CHANGE msg=audit(1389204509.707:4315): pid=9293 uid=0 auid=0 ses=166 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204509.742:4316): pid=9293 uid=0 auid=0 ses=166 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1389204509.746:4317): pid=9293 uid=0 auid=0 ses=166 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204509.748:4318): pid=9293 uid=0 auid=0 ses=166 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204509.749:4319): pid=9298 uid=0 auid=0 ses=166 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=9298 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204509.750:4320): pid=9298 uid=0 auid=0 ses=166 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=9298 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRED_REFR msg=audit(1389204509.752:4321): pid=9298 uid=0 auid=0 ses=166 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204509.774:4322): pid=9293 uid=0 auid=0 ses=166 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRED_DISP msg=audit(1389204509.776:4323): pid=9293 uid=0 auid=0 ses=166 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204509.778:4324): pid=9293 uid=0 auid=0 ses=166 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1389204509.779:4325): pid=9293 uid=0 auid=0 ses=166 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204509.780:4326): pid=9293 uid=0 auid=0 ses=166 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=9293 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204509.780:4327): pid=9293 uid=0 auid=0 ses=166 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=9293 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204509.780:4328): pid=9293 uid=0 auid=0 ses=166 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=9293 suid=0 rport=33891 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204512.788:4329): pid=9312 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=9312 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204512.788:4330): pid=9312 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=9312 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204512.790:4331): pid=9311 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=9312 suid=74 rport=33892 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204512.790:4332): pid=9311 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=9312 suid=74 rport=33892 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204513.310:4333): pid=9311 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=33892 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204513.310:4334): pid=9311 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=4096 fp=8b:56:b0:3f:c8:ad:38:a6:94:f4:a7:26:83:75:cc:85 rport=33892 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_ACCT msg=audit(1389204513.315:4335): pid=9311 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204513.316:4336): pid=9311 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=9312 suid=74 rport=33892 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204513.317:4337): pid=9311 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1389204513.319:4338): pid=9311 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=LOGIN msg=audit(1389204513.319:4339): login pid=9311 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=167 >type=USER_ROLE_CHANGE msg=audit(1389204513.360:4340): pid=9311 uid=0 auid=0 ses=167 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204513.376:4341): pid=9311 uid=0 auid=0 ses=167 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1389204513.380:4342): pid=9311 uid=0 auid=0 ses=167 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204513.382:4343): pid=9311 uid=0 auid=0 ses=167 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204513.383:4344): pid=9314 uid=0 auid=0 ses=167 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=9314 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204513.384:4345): pid=9314 uid=0 auid=0 ses=167 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=9314 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRED_REFR msg=audit(1389204513.386:4346): pid=9314 uid=0 auid=0 ses=167 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204513.404:4347): pid=9311 uid=0 auid=0 ses=167 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRED_DISP msg=audit(1389204513.406:4348): pid=9311 uid=0 auid=0 ses=167 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204513.408:4349): pid=9311 uid=0 auid=0 ses=167 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1389204513.410:4350): pid=9311 uid=0 auid=0 ses=167 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204513.410:4351): pid=9311 uid=0 auid=0 ses=167 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=9311 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204513.410:4352): pid=9311 uid=0 auid=0 ses=167 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=9311 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204513.410:4353): pid=9311 uid=0 auid=0 ses=167 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=9311 suid=0 rport=33892 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204516.419:4354): pid=9332 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=9332 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204516.419:4355): pid=9332 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=9332 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204516.421:4356): pid=9331 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=9332 suid=74 rport=33893 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204516.421:4357): pid=9331 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=9332 suid=74 rport=33893 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204516.984:4358): pid=9331 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=33893 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204516.984:4359): pid=9331 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=4096 fp=8b:56:b0:3f:c8:ad:38:a6:94:f4:a7:26:83:75:cc:85 rport=33893 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_ACCT msg=audit(1389204516.989:4360): pid=9331 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204516.992:4361): pid=9331 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=9332 suid=74 rport=33893 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204516.993:4362): pid=9331 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1389204516.996:4363): pid=9331 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=LOGIN msg=audit(1389204516.996:4364): login pid=9331 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=168 >type=USER_ROLE_CHANGE msg=audit(1389204517.038:4365): pid=9331 uid=0 auid=0 ses=168 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204517.053:4366): pid=9331 uid=0 auid=0 ses=168 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1389204517.058:4367): pid=9331 uid=0 auid=0 ses=168 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204517.060:4368): pid=9331 uid=0 auid=0 ses=168 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204517.061:4369): pid=9335 uid=0 auid=0 ses=168 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=9335 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204517.061:4370): pid=9335 uid=0 auid=0 ses=168 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=9335 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRED_REFR msg=audit(1389204517.063:4371): pid=9335 uid=0 auid=0 ses=168 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204517.084:4372): pid=9331 uid=0 auid=0 ses=168 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRED_DISP msg=audit(1389204517.086:4373): pid=9331 uid=0 auid=0 ses=168 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204517.088:4374): pid=9331 uid=0 auid=0 ses=168 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1389204517.090:4375): pid=9331 uid=0 auid=0 ses=168 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204517.090:4376): pid=9331 uid=0 auid=0 ses=168 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=9331 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204517.090:4377): pid=9331 uid=0 auid=0 ses=168 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=9331 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204517.091:4378): pid=9331 uid=0 auid=0 ses=168 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=9331 suid=0 rport=33893 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204520.094:4379): pid=9350 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=9350 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204520.094:4380): pid=9350 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=9350 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204520.096:4381): pid=9349 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=9350 suid=74 rport=33894 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204520.096:4382): pid=9349 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=9350 suid=74 rport=33894 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204520.614:4383): pid=9349 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=33894 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204520.614:4384): pid=9349 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=4096 fp=8b:56:b0:3f:c8:ad:38:a6:94:f4:a7:26:83:75:cc:85 rport=33894 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_ACCT msg=audit(1389204520.620:4385): pid=9349 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204520.622:4386): pid=9349 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=9350 suid=74 rport=33894 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204520.622:4387): pid=9349 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1389204520.625:4388): pid=9349 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=LOGIN msg=audit(1389204520.625:4389): login pid=9349 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=169 >type=USER_ROLE_CHANGE msg=audit(1389204520.669:4390): pid=9349 uid=0 auid=0 ses=169 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204520.689:4391): pid=9349 uid=0 auid=0 ses=169 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1389204520.697:4392): pid=9349 uid=0 auid=0 ses=169 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204520.699:4393): pid=9349 uid=0 auid=0 ses=169 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204520.701:4394): pid=9352 uid=0 auid=0 ses=169 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=9352 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204520.701:4395): pid=9352 uid=0 auid=0 ses=169 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=9352 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRED_REFR msg=audit(1389204520.704:4396): pid=9352 uid=0 auid=0 ses=169 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204520.734:4397): pid=9349 uid=0 auid=0 ses=169 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRED_DISP msg=audit(1389204520.736:4398): pid=9349 uid=0 auid=0 ses=169 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204520.741:4399): pid=9349 uid=0 auid=0 ses=169 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1389204520.743:4400): pid=9349 uid=0 auid=0 ses=169 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204520.743:4401): pid=9349 uid=0 auid=0 ses=169 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=9349 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204520.743:4402): pid=9349 uid=0 auid=0 ses=169 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=9349 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204520.743:4403): pid=9349 uid=0 auid=0 ses=169 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=9349 suid=0 rport=33894 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204523.751:4404): pid=9361 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=9361 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204523.752:4405): pid=9361 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=9361 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204523.754:4406): pid=9360 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=9361 suid=74 rport=33895 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204523.754:4407): pid=9360 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=9361 suid=74 rport=33895 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204524.290:4408): pid=9360 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=33895 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204524.290:4409): pid=9360 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=4096 fp=8b:56:b0:3f:c8:ad:38:a6:94:f4:a7:26:83:75:cc:85 rport=33895 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_ACCT msg=audit(1389204524.297:4410): pid=9360 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204524.297:4411): pid=9360 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=9361 suid=74 rport=33895 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204524.299:4412): pid=9360 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1389204524.301:4413): pid=9360 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=LOGIN msg=audit(1389204524.301:4414): login pid=9360 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=170 >type=USER_ROLE_CHANGE msg=audit(1389204524.386:4415): pid=9360 uid=0 auid=0 ses=170 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204524.405:4416): pid=9360 uid=0 auid=0 ses=170 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1389204524.410:4417): pid=9360 uid=0 auid=0 ses=170 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204524.412:4418): pid=9360 uid=0 auid=0 ses=170 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204524.413:4419): pid=9369 uid=0 auid=0 ses=170 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=9369 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204524.413:4420): pid=9369 uid=0 auid=0 ses=170 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=9369 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRED_REFR msg=audit(1389204524.415:4421): pid=9369 uid=0 auid=0 ses=170 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204524.447:4422): pid=9360 uid=0 auid=0 ses=170 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRED_DISP msg=audit(1389204524.449:4423): pid=9360 uid=0 auid=0 ses=170 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204524.451:4424): pid=9360 uid=0 auid=0 ses=170 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1389204524.453:4425): pid=9360 uid=0 auid=0 ses=170 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204524.453:4426): pid=9360 uid=0 auid=0 ses=170 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=9360 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204524.453:4427): pid=9360 uid=0 auid=0 ses=170 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=9360 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204524.453:4428): pid=9360 uid=0 auid=0 ses=170 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=9360 suid=0 rport=33895 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204527.459:4429): pid=9399 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=9399 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204527.459:4430): pid=9399 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=9399 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204527.465:4431): pid=9398 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=9399 suid=74 rport=33898 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204527.465:4432): pid=9398 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=9399 suid=74 rport=33898 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204528.016:4433): pid=9398 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=33898 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204528.016:4434): pid=9398 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=4096 fp=8b:56:b0:3f:c8:ad:38:a6:94:f4:a7:26:83:75:cc:85 rport=33898 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_ACCT msg=audit(1389204528.021:4435): pid=9398 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204528.022:4436): pid=9398 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=9399 suid=74 rport=33898 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204528.023:4437): pid=9398 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1389204528.026:4438): pid=9398 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=LOGIN msg=audit(1389204528.026:4439): login pid=9398 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=171 >type=USER_ROLE_CHANGE msg=audit(1389204528.074:4440): pid=9398 uid=0 auid=0 ses=171 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204528.109:4441): pid=9398 uid=0 auid=0 ses=171 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1389204528.114:4442): pid=9398 uid=0 auid=0 ses=171 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204528.116:4443): pid=9398 uid=0 auid=0 ses=171 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204528.117:4444): pid=9411 uid=0 auid=0 ses=171 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=9411 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204528.117:4445): pid=9411 uid=0 auid=0 ses=171 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=9411 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRED_REFR msg=audit(1389204528.119:4446): pid=9411 uid=0 auid=0 ses=171 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204528.143:4447): pid=9398 uid=0 auid=0 ses=171 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRED_DISP msg=audit(1389204528.145:4448): pid=9398 uid=0 auid=0 ses=171 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204528.147:4449): pid=9398 uid=0 auid=0 ses=171 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1389204528.149:4450): pid=9398 uid=0 auid=0 ses=171 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204528.149:4451): pid=9398 uid=0 auid=0 ses=171 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=9398 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204528.149:4452): pid=9398 uid=0 auid=0 ses=171 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=9398 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204528.149:4453): pid=9398 uid=0 auid=0 ses=171 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=9398 suid=0 rport=33898 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204531.170:4454): pid=9434 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=9434 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204531.170:4455): pid=9434 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=9434 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204531.172:4456): pid=9433 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=9434 suid=74 rport=33899 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204531.172:4457): pid=9433 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=9434 suid=74 rport=33899 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204531.710:4458): pid=9433 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=33899 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204531.710:4459): pid=9433 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=4096 fp=8b:56:b0:3f:c8:ad:38:a6:94:f4:a7:26:83:75:cc:85 rport=33899 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_ACCT msg=audit(1389204531.716:4460): pid=9433 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204531.717:4461): pid=9433 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=9434 suid=74 rport=33899 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204531.718:4462): pid=9433 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1389204531.720:4463): pid=9433 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=LOGIN msg=audit(1389204531.720:4464): login pid=9433 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=172 >type=USER_ROLE_CHANGE msg=audit(1389204531.805:4465): pid=9433 uid=0 auid=0 ses=172 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204531.825:4466): pid=9433 uid=0 auid=0 ses=172 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1389204531.829:4467): pid=9433 uid=0 auid=0 ses=172 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204531.832:4468): pid=9433 uid=0 auid=0 ses=172 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204531.833:4469): pid=9437 uid=0 auid=0 ses=172 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=9437 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204531.833:4470): pid=9437 uid=0 auid=0 ses=172 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=9437 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRED_REFR msg=audit(1389204531.836:4471): pid=9437 uid=0 auid=0 ses=172 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204531.864:4472): pid=9433 uid=0 auid=0 ses=172 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRED_DISP msg=audit(1389204531.866:4473): pid=9433 uid=0 auid=0 ses=172 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204531.869:4474): pid=9433 uid=0 auid=0 ses=172 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1389204531.871:4475): pid=9433 uid=0 auid=0 ses=172 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204531.871:4476): pid=9433 uid=0 auid=0 ses=172 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=9433 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204531.871:4477): pid=9433 uid=0 auid=0 ses=172 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=9433 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204531.871:4478): pid=9433 uid=0 auid=0 ses=172 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=9433 suid=0 rport=33899 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204534.876:4479): pid=9455 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=9455 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204534.876:4480): pid=9455 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=9455 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204534.878:4481): pid=9454 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=9455 suid=74 rport=33907 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204534.878:4482): pid=9454 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=9455 suid=74 rport=33907 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204535.411:4483): pid=9454 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=33907 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204535.411:4484): pid=9454 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=4096 fp=8b:56:b0:3f:c8:ad:38:a6:94:f4:a7:26:83:75:cc:85 rport=33907 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_ACCT msg=audit(1389204535.417:4485): pid=9454 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204535.418:4486): pid=9454 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=9455 suid=74 rport=33907 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204535.419:4487): pid=9454 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1389204535.421:4488): pid=9454 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=LOGIN msg=audit(1389204535.421:4489): login pid=9454 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=173 >type=USER_ROLE_CHANGE msg=audit(1389204535.464:4490): pid=9454 uid=0 auid=0 ses=173 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204535.480:4491): pid=9454 uid=0 auid=0 ses=173 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1389204535.485:4492): pid=9454 uid=0 auid=0 ses=173 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204535.487:4493): pid=9454 uid=0 auid=0 ses=173 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204535.488:4494): pid=9457 uid=0 auid=0 ses=173 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=9457 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204535.488:4495): pid=9457 uid=0 auid=0 ses=173 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=9457 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRED_REFR msg=audit(1389204535.490:4496): pid=9457 uid=0 auid=0 ses=173 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204535.511:4497): pid=9454 uid=0 auid=0 ses=173 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRED_DISP msg=audit(1389204535.513:4498): pid=9454 uid=0 auid=0 ses=173 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204535.516:4499): pid=9454 uid=0 auid=0 ses=173 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1389204535.518:4500): pid=9454 uid=0 auid=0 ses=173 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204535.518:4501): pid=9454 uid=0 auid=0 ses=173 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=9454 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204535.518:4502): pid=9454 uid=0 auid=0 ses=173 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=9454 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204535.518:4503): pid=9454 uid=0 auid=0 ses=173 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=9454 suid=0 rport=33907 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204538.526:4504): pid=9530 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=9530 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204538.526:4505): pid=9530 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=9530 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204538.528:4506): pid=9529 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=9530 suid=74 rport=33908 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204538.528:4507): pid=9529 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=9530 suid=74 rport=33908 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204539.093:4508): pid=9529 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=33908 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204539.093:4509): pid=9529 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=4096 fp=8b:56:b0:3f:c8:ad:38:a6:94:f4:a7:26:83:75:cc:85 rport=33908 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_ACCT msg=audit(1389204539.099:4510): pid=9529 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204539.100:4511): pid=9529 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=9530 suid=74 rport=33908 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204539.101:4512): pid=9529 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1389204539.103:4513): pid=9529 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=LOGIN msg=audit(1389204539.103:4514): login pid=9529 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=174 >type=USER_ROLE_CHANGE msg=audit(1389204539.183:4515): pid=9529 uid=0 auid=0 ses=174 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204539.240:4516): pid=9529 uid=0 auid=0 ses=174 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1389204539.245:4517): pid=9529 uid=0 auid=0 ses=174 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204539.247:4518): pid=9529 uid=0 auid=0 ses=174 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204539.249:4519): pid=9534 uid=0 auid=0 ses=174 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=9534 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204539.249:4520): pid=9534 uid=0 auid=0 ses=174 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=9534 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRED_REFR msg=audit(1389204539.252:4521): pid=9534 uid=0 auid=0 ses=174 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204539.289:4522): pid=9529 uid=0 auid=0 ses=174 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRED_DISP msg=audit(1389204539.291:4523): pid=9529 uid=0 auid=0 ses=174 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204539.293:4524): pid=9529 uid=0 auid=0 ses=174 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1389204539.296:4525): pid=9529 uid=0 auid=0 ses=174 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204539.296:4526): pid=9529 uid=0 auid=0 ses=174 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=9529 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204539.296:4527): pid=9529 uid=0 auid=0 ses=174 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=9529 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204539.296:4528): pid=9529 uid=0 auid=0 ses=174 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=9529 suid=0 rport=33908 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204542.312:4529): pid=9555 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=9555 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204542.312:4530): pid=9555 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=9555 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204542.315:4531): pid=9554 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=9555 suid=74 rport=33909 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204542.315:4532): pid=9554 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=9555 suid=74 rport=33909 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204542.872:4533): pid=9554 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=33909 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204542.872:4534): pid=9554 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=4096 fp=8b:56:b0:3f:c8:ad:38:a6:94:f4:a7:26:83:75:cc:85 rport=33909 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_ACCT msg=audit(1389204542.884:4535): pid=9554 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204542.885:4536): pid=9554 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=9555 suid=74 rport=33909 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204542.886:4537): pid=9554 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1389204542.889:4538): pid=9554 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=LOGIN msg=audit(1389204542.889:4539): login pid=9554 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=175 >type=USER_CMD msg=audit(1389204542.929:4540): pid=9557 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D43204C414E473D4320766773202D2D6E6F68656164696E6773202D2D756E69743D67202D6F206E616D652C73697A652C667265652C6C765F636F756E742C75756964202D2D736570617261746F72203A202D2D6E6F7375666669782063696E6465722D766F6C756D6573 terminal=? res=success' >type=USER_START msg=audit(1389204542.935:4541): pid=9557 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_ROLE_CHANGE msg=audit(1389204543.030:4542): pid=9554 uid=0 auid=0 ses=175 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204543.059:4543): pid=9554 uid=0 auid=0 ses=175 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1389204543.063:4544): pid=9554 uid=0 auid=0 ses=175 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204543.065:4545): pid=9554 uid=0 auid=0 ses=175 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204543.066:4546): pid=9561 uid=0 auid=0 ses=175 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=9561 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204543.066:4547): pid=9561 uid=0 auid=0 ses=175 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=9561 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRED_REFR msg=audit(1389204543.069:4548): pid=9561 uid=0 auid=0 ses=175 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204543.092:4549): pid=9557 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1389204543.108:4550): pid=9554 uid=0 auid=0 ses=175 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRED_DISP msg=audit(1389204543.110:4551): pid=9554 uid=0 auid=0 ses=175 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204543.112:4552): pid=9554 uid=0 auid=0 ses=175 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1389204543.114:4553): pid=9554 uid=0 auid=0 ses=175 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204543.114:4554): pid=9554 uid=0 auid=0 ses=175 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=9554 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204543.114:4555): pid=9554 uid=0 auid=0 ses=175 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=9554 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204543.114:4556): pid=9554 uid=0 auid=0 ses=175 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=9554 suid=0 rport=33909 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204546.120:4557): pid=9571 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=9571 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204546.120:4558): pid=9571 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=9571 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204546.122:4559): pid=9570 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=9571 suid=74 rport=33911 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204546.122:4560): pid=9570 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=9571 suid=74 rport=33911 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204546.948:4561): pid=9570 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=33911 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204546.948:4562): pid=9570 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=4096 fp=8b:56:b0:3f:c8:ad:38:a6:94:f4:a7:26:83:75:cc:85 rport=33911 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_ACCT msg=audit(1389204546.954:4563): pid=9570 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204546.955:4564): pid=9570 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=9571 suid=74 rport=33911 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204546.956:4565): pid=9570 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1389204546.959:4566): pid=9570 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=LOGIN msg=audit(1389204546.959:4567): login pid=9570 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=176 >type=USER_ROLE_CHANGE msg=audit(1389204547.011:4568): pid=9570 uid=0 auid=0 ses=176 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204547.029:4569): pid=9570 uid=0 auid=0 ses=176 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1389204547.034:4570): pid=9570 uid=0 auid=0 ses=176 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204547.036:4571): pid=9570 uid=0 auid=0 ses=176 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204547.038:4572): pid=9573 uid=0 auid=0 ses=176 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=9573 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204547.038:4573): pid=9573 uid=0 auid=0 ses=176 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=9573 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRED_REFR msg=audit(1389204547.040:4574): pid=9573 uid=0 auid=0 ses=176 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204547.064:4575): pid=9570 uid=0 auid=0 ses=176 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRED_DISP msg=audit(1389204547.067:4576): pid=9570 uid=0 auid=0 ses=176 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204547.069:4577): pid=9570 uid=0 auid=0 ses=176 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1389204547.071:4578): pid=9570 uid=0 auid=0 ses=176 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204547.071:4579): pid=9570 uid=0 auid=0 ses=176 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=9570 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204547.071:4580): pid=9570 uid=0 auid=0 ses=176 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=9570 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204547.072:4581): pid=9570 uid=0 auid=0 ses=176 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=9570 suid=0 rport=33911 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204550.077:4582): pid=9582 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=9582 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204550.078:4583): pid=9582 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=9582 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204550.080:4584): pid=9581 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=9582 suid=74 rport=33912 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204550.080:4585): pid=9581 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=9582 suid=74 rport=33912 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204550.876:4586): pid=9581 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=33912 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204550.876:4587): pid=9581 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=4096 fp=8b:56:b0:3f:c8:ad:38:a6:94:f4:a7:26:83:75:cc:85 rport=33912 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_ACCT msg=audit(1389204550.882:4588): pid=9581 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204550.883:4589): pid=9581 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=9582 suid=74 rport=33912 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204550.885:4590): pid=9581 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1389204550.887:4591): pid=9581 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=LOGIN msg=audit(1389204550.888:4592): login pid=9581 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=177 >type=USER_ROLE_CHANGE msg=audit(1389204550.935:4593): pid=9581 uid=0 auid=0 ses=177 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204550.954:4594): pid=9581 uid=0 auid=0 ses=177 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1389204550.959:4595): pid=9581 uid=0 auid=0 ses=177 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204550.961:4596): pid=9581 uid=0 auid=0 ses=177 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204550.963:4597): pid=9584 uid=0 auid=0 ses=177 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=9584 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204550.963:4598): pid=9584 uid=0 auid=0 ses=177 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=9584 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRED_REFR msg=audit(1389204550.965:4599): pid=9584 uid=0 auid=0 ses=177 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204550.989:4600): pid=9581 uid=0 auid=0 ses=177 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRED_DISP msg=audit(1389204550.991:4601): pid=9581 uid=0 auid=0 ses=177 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204550.993:4602): pid=9581 uid=0 auid=0 ses=177 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1389204550.995:4603): pid=9581 uid=0 auid=0 ses=177 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204550.995:4604): pid=9581 uid=0 auid=0 ses=177 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=9581 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204550.995:4605): pid=9581 uid=0 auid=0 ses=177 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=9581 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204550.995:4606): pid=9581 uid=0 auid=0 ses=177 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=9581 suid=0 rport=33912 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204554.001:4607): pid=9593 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=9593 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204554.001:4608): pid=9593 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=9593 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204554.004:4609): pid=9592 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=9593 suid=74 rport=33913 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204554.004:4610): pid=9592 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=9593 suid=74 rport=33913 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204554.853:4611): pid=9592 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=33913 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204554.853:4612): pid=9592 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=4096 fp=8b:56:b0:3f:c8:ad:38:a6:94:f4:a7:26:83:75:cc:85 rport=33913 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_ACCT msg=audit(1389204554.859:4613): pid=9592 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204554.860:4614): pid=9592 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=9593 suid=74 rport=33913 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204554.861:4615): pid=9592 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1389204554.864:4616): pid=9592 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=LOGIN msg=audit(1389204554.864:4617): login pid=9592 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=178 >type=USER_ROLE_CHANGE msg=audit(1389204554.912:4618): pid=9592 uid=0 auid=0 ses=178 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204554.930:4619): pid=9592 uid=0 auid=0 ses=178 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1389204554.935:4620): pid=9592 uid=0 auid=0 ses=178 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204554.937:4621): pid=9592 uid=0 auid=0 ses=178 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204554.939:4622): pid=9595 uid=0 auid=0 ses=178 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=9595 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204554.939:4623): pid=9595 uid=0 auid=0 ses=178 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=9595 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRED_REFR msg=audit(1389204554.941:4624): pid=9595 uid=0 auid=0 ses=178 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204554.965:4625): pid=9592 uid=0 auid=0 ses=178 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRED_DISP msg=audit(1389204554.968:4626): pid=9592 uid=0 auid=0 ses=178 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204554.970:4627): pid=9592 uid=0 auid=0 ses=178 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1389204554.972:4628): pid=9592 uid=0 auid=0 ses=178 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204554.972:4629): pid=9592 uid=0 auid=0 ses=178 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=9592 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204554.972:4630): pid=9592 uid=0 auid=0 ses=178 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=9592 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204554.973:4631): pid=9592 uid=0 auid=0 ses=178 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=9592 suid=0 rport=33913 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204557.986:4632): pid=9604 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=9604 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204557.986:4633): pid=9604 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=9604 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204557.990:4634): pid=9603 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=9604 suid=74 rport=33914 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204557.990:4635): pid=9603 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=9604 suid=74 rport=33914 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204558.853:4636): pid=9603 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=33914 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204558.853:4637): pid=9603 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=4096 fp=8b:56:b0:3f:c8:ad:38:a6:94:f4:a7:26:83:75:cc:85 rport=33914 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_ACCT msg=audit(1389204558.862:4638): pid=9603 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204558.862:4639): pid=9603 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=9604 suid=74 rport=33914 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204558.863:4640): pid=9603 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1389204558.865:4641): pid=9603 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=LOGIN msg=audit(1389204558.865:4642): login pid=9603 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=179 >type=USER_ROLE_CHANGE msg=audit(1389204558.947:4643): pid=9603 uid=0 auid=0 ses=179 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204558.966:4644): pid=9603 uid=0 auid=0 ses=179 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1389204558.971:4645): pid=9603 uid=0 auid=0 ses=179 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204558.973:4646): pid=9603 uid=0 auid=0 ses=179 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204558.974:4647): pid=9606 uid=0 auid=0 ses=179 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=9606 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204558.974:4648): pid=9606 uid=0 auid=0 ses=179 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=9606 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRED_REFR msg=audit(1389204558.976:4649): pid=9606 uid=0 auid=0 ses=179 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204559.001:4650): pid=9603 uid=0 auid=0 ses=179 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRED_DISP msg=audit(1389204559.003:4651): pid=9603 uid=0 auid=0 ses=179 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204559.005:4652): pid=9603 uid=0 auid=0 ses=179 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1389204559.007:4653): pid=9603 uid=0 auid=0 ses=179 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204559.007:4654): pid=9603 uid=0 auid=0 ses=179 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=9603 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204559.007:4655): pid=9603 uid=0 auid=0 ses=179 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=9603 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204559.007:4656): pid=9603 uid=0 auid=0 ses=179 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=9603 suid=0 rport=33914 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204562.023:4657): pid=9615 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=9615 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204562.024:4658): pid=9615 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=9615 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204562.027:4659): pid=9614 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=9615 suid=74 rport=33915 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204562.028:4660): pid=9614 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=9615 suid=74 rport=33915 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204562.555:4661): pid=9614 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=33915 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204562.555:4662): pid=9614 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=4096 fp=8b:56:b0:3f:c8:ad:38:a6:94:f4:a7:26:83:75:cc:85 rport=33915 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_ACCT msg=audit(1389204562.561:4663): pid=9614 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204562.562:4664): pid=9614 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=9615 suid=74 rport=33915 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204562.563:4665): pid=9614 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1389204562.566:4666): pid=9614 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=LOGIN msg=audit(1389204562.566:4667): login pid=9614 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=180 >type=USER_ROLE_CHANGE msg=audit(1389204562.647:4668): pid=9614 uid=0 auid=0 ses=180 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204562.665:4669): pid=9614 uid=0 auid=0 ses=180 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1389204562.670:4670): pid=9614 uid=0 auid=0 ses=180 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204562.672:4671): pid=9614 uid=0 auid=0 ses=180 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204562.673:4672): pid=9617 uid=0 auid=0 ses=180 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=9617 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204562.673:4673): pid=9617 uid=0 auid=0 ses=180 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=9617 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRED_REFR msg=audit(1389204562.675:4674): pid=9617 uid=0 auid=0 ses=180 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204562.704:4675): pid=9614 uid=0 auid=0 ses=180 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRED_DISP msg=audit(1389204562.706:4676): pid=9614 uid=0 auid=0 ses=180 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204562.708:4677): pid=9614 uid=0 auid=0 ses=180 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1389204562.710:4678): pid=9614 uid=0 auid=0 ses=180 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204562.710:4679): pid=9614 uid=0 auid=0 ses=180 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=9614 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204562.710:4680): pid=9614 uid=0 auid=0 ses=180 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=9614 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204562.710:4681): pid=9614 uid=0 auid=0 ses=180 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=9614 suid=0 rport=33915 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204565.714:4682): pid=9628 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=9628 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204565.715:4683): pid=9628 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=9628 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204565.717:4684): pid=9627 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=9628 suid=74 rport=33919 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204565.717:4685): pid=9627 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=9628 suid=74 rport=33919 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204566.556:4686): pid=9627 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=33919 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204566.556:4687): pid=9627 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=4096 fp=8b:56:b0:3f:c8:ad:38:a6:94:f4:a7:26:83:75:cc:85 rport=33919 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_ACCT msg=audit(1389204566.561:4688): pid=9627 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204566.563:4689): pid=9627 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=9628 suid=74 rport=33919 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204566.563:4690): pid=9627 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1389204566.566:4691): pid=9627 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=LOGIN msg=audit(1389204566.566:4692): login pid=9627 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=181 >type=USER_ROLE_CHANGE msg=audit(1389204566.617:4693): pid=9627 uid=0 auid=0 ses=181 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204566.635:4694): pid=9627 uid=0 auid=0 ses=181 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1389204566.641:4695): pid=9627 uid=0 auid=0 ses=181 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204566.643:4696): pid=9627 uid=0 auid=0 ses=181 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204566.644:4697): pid=9630 uid=0 auid=0 ses=181 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=9630 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204566.645:4698): pid=9630 uid=0 auid=0 ses=181 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=9630 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRED_REFR msg=audit(1389204566.647:4699): pid=9630 uid=0 auid=0 ses=181 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204566.671:4700): pid=9627 uid=0 auid=0 ses=181 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRED_DISP msg=audit(1389204566.673:4701): pid=9627 uid=0 auid=0 ses=181 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204566.676:4702): pid=9627 uid=0 auid=0 ses=181 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1389204566.678:4703): pid=9627 uid=0 auid=0 ses=181 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204566.678:4704): pid=9627 uid=0 auid=0 ses=181 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=9627 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204566.678:4705): pid=9627 uid=0 auid=0 ses=181 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=9627 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204566.679:4706): pid=9627 uid=0 auid=0 ses=181 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=9627 suid=0 rport=33919 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204569.690:4707): pid=9639 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=9639 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204569.691:4708): pid=9639 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=9639 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204569.692:4709): pid=9638 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=9639 suid=74 rport=33920 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204569.694:4710): pid=9638 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=9639 suid=74 rport=33920 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204570.214:4711): pid=9638 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=33920 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204570.214:4712): pid=9638 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=4096 fp=8b:56:b0:3f:c8:ad:38:a6:94:f4:a7:26:83:75:cc:85 rport=33920 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_ACCT msg=audit(1389204570.220:4713): pid=9638 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204570.221:4714): pid=9638 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=9639 suid=74 rport=33920 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204570.222:4715): pid=9638 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1389204570.224:4716): pid=9638 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=LOGIN msg=audit(1389204570.224:4717): login pid=9638 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=182 >type=USER_ROLE_CHANGE msg=audit(1389204570.318:4718): pid=9638 uid=0 auid=0 ses=182 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204570.345:4719): pid=9638 uid=0 auid=0 ses=182 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1389204570.349:4720): pid=9638 uid=0 auid=0 ses=182 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204570.352:4721): pid=9638 uid=0 auid=0 ses=182 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204570.353:4722): pid=9653 uid=0 auid=0 ses=182 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=9653 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204570.353:4723): pid=9653 uid=0 auid=0 ses=182 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=9653 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRED_REFR msg=audit(1389204570.355:4724): pid=9653 uid=0 auid=0 ses=182 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204570.389:4725): pid=9638 uid=0 auid=0 ses=182 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRED_DISP msg=audit(1389204570.391:4726): pid=9638 uid=0 auid=0 ses=182 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204570.393:4727): pid=9638 uid=0 auid=0 ses=182 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1389204570.395:4728): pid=9638 uid=0 auid=0 ses=182 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204570.395:4729): pid=9638 uid=0 auid=0 ses=182 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=9638 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204570.395:4730): pid=9638 uid=0 auid=0 ses=182 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=9638 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204570.395:4731): pid=9638 uid=0 auid=0 ses=182 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=9638 suid=0 rport=33920 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204573.402:4732): pid=9680 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=9680 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204573.403:4733): pid=9680 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=9680 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204573.404:4734): pid=9679 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=9680 suid=74 rport=33931 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204573.405:4735): pid=9679 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=9680 suid=74 rport=33931 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204574.474:4736): pid=9679 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=33931 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204574.474:4737): pid=9679 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=4096 fp=8b:56:b0:3f:c8:ad:38:a6:94:f4:a7:26:83:75:cc:85 rport=33931 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_ACCT msg=audit(1389204574.480:4738): pid=9679 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204574.481:4739): pid=9679 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=9680 suid=74 rport=33931 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204574.482:4740): pid=9679 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1389204574.484:4741): pid=9679 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=LOGIN msg=audit(1389204574.484:4742): login pid=9679 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=183 >type=USER_ROLE_CHANGE msg=audit(1389204574.531:4743): pid=9679 uid=0 auid=0 ses=183 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204574.548:4744): pid=9679 uid=0 auid=0 ses=183 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1389204574.554:4745): pid=9679 uid=0 auid=0 ses=183 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204574.556:4746): pid=9679 uid=0 auid=0 ses=183 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204574.557:4747): pid=9682 uid=0 auid=0 ses=183 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=9682 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204574.557:4748): pid=9682 uid=0 auid=0 ses=183 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=9682 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRED_REFR msg=audit(1389204574.560:4749): pid=9682 uid=0 auid=0 ses=183 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204574.581:4750): pid=9679 uid=0 auid=0 ses=183 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRED_DISP msg=audit(1389204574.583:4751): pid=9679 uid=0 auid=0 ses=183 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204574.586:4752): pid=9679 uid=0 auid=0 ses=183 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1389204574.588:4753): pid=9679 uid=0 auid=0 ses=183 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204574.588:4754): pid=9679 uid=0 auid=0 ses=183 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=9679 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204574.589:4755): pid=9679 uid=0 auid=0 ses=183 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=9679 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204574.589:4756): pid=9679 uid=0 auid=0 ses=183 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=9679 suid=0 rport=33931 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204577.591:4757): pid=9699 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=9699 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204577.591:4758): pid=9699 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=9699 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204577.593:4759): pid=9698 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=9699 suid=74 rport=33940 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204577.593:4760): pid=9698 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=9699 suid=74 rport=33940 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204579.004:4761): pid=9698 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=33940 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204579.004:4762): pid=9698 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=4096 fp=8b:56:b0:3f:c8:ad:38:a6:94:f4:a7:26:83:75:cc:85 rport=33940 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_ACCT msg=audit(1389204579.009:4763): pid=9698 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204579.011:4764): pid=9698 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=9699 suid=74 rport=33940 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204579.012:4765): pid=9698 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1389204579.014:4766): pid=9698 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=LOGIN msg=audit(1389204579.014:4767): login pid=9698 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=184 >type=USER_ROLE_CHANGE msg=audit(1389204579.062:4768): pid=9698 uid=0 auid=0 ses=184 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204579.080:4769): pid=9698 uid=0 auid=0 ses=184 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1389204579.085:4770): pid=9698 uid=0 auid=0 ses=184 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204579.087:4771): pid=9698 uid=0 auid=0 ses=184 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204579.088:4772): pid=9701 uid=0 auid=0 ses=184 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=9701 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204579.089:4773): pid=9701 uid=0 auid=0 ses=184 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=9701 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRED_REFR msg=audit(1389204579.091:4774): pid=9701 uid=0 auid=0 ses=184 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204579.112:4775): pid=9698 uid=0 auid=0 ses=184 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRED_DISP msg=audit(1389204579.114:4776): pid=9698 uid=0 auid=0 ses=184 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204579.117:4777): pid=9698 uid=0 auid=0 ses=184 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1389204579.119:4778): pid=9698 uid=0 auid=0 ses=184 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204579.119:4779): pid=9698 uid=0 auid=0 ses=184 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=9698 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204579.119:4780): pid=9698 uid=0 auid=0 ses=184 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=9698 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204579.119:4781): pid=9698 uid=0 auid=0 ses=184 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=9698 suid=0 rport=33940 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204582.124:4782): pid=9710 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=9710 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204582.124:4783): pid=9710 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=9710 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204582.126:4784): pid=9709 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=9710 suid=74 rport=33942 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204582.127:4785): pid=9709 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=9710 suid=74 rport=33942 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204582.774:4786): pid=9709 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=33942 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204582.774:4787): pid=9709 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=4096 fp=8b:56:b0:3f:c8:ad:38:a6:94:f4:a7:26:83:75:cc:85 rport=33942 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_ACCT msg=audit(1389204582.779:4788): pid=9709 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204582.781:4789): pid=9709 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=9710 suid=74 rport=33942 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204582.782:4790): pid=9709 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1389204582.784:4791): pid=9709 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=LOGIN msg=audit(1389204582.784:4792): login pid=9709 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=185 >type=USER_ROLE_CHANGE msg=audit(1389204582.833:4793): pid=9709 uid=0 auid=0 ses=185 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204582.854:4794): pid=9709 uid=0 auid=0 ses=185 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1389204582.859:4795): pid=9709 uid=0 auid=0 ses=185 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204582.861:4796): pid=9709 uid=0 auid=0 ses=185 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204582.862:4797): pid=9715 uid=0 auid=0 ses=185 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=9715 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204582.862:4798): pid=9715 uid=0 auid=0 ses=185 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=9715 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRED_REFR msg=audit(1389204582.865:4799): pid=9715 uid=0 auid=0 ses=185 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204582.894:4800): pid=9709 uid=0 auid=0 ses=185 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRED_DISP msg=audit(1389204582.896:4801): pid=9709 uid=0 auid=0 ses=185 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204582.898:4802): pid=9709 uid=0 auid=0 ses=185 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1389204582.900:4803): pid=9709 uid=0 auid=0 ses=185 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204582.900:4804): pid=9709 uid=0 auid=0 ses=185 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=9709 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204582.900:4805): pid=9709 uid=0 auid=0 ses=185 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=9709 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204582.900:4806): pid=9709 uid=0 auid=0 ses=185 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=9709 suid=0 rport=33942 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204585.915:4807): pid=9733 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=9733 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204585.915:4808): pid=9733 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=9733 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204585.918:4809): pid=9732 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=9733 suid=74 rport=33951 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204585.918:4810): pid=9732 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=9733 suid=74 rport=33951 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204586.800:4811): pid=9732 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=33951 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204586.800:4812): pid=9732 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=4096 fp=8b:56:b0:3f:c8:ad:38:a6:94:f4:a7:26:83:75:cc:85 rport=33951 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_ACCT msg=audit(1389204586.806:4813): pid=9732 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204586.806:4814): pid=9732 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=9733 suid=74 rport=33951 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204586.807:4815): pid=9732 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1389204586.810:4816): pid=9732 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=LOGIN msg=audit(1389204586.810:4817): login pid=9732 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=186 >type=USER_ROLE_CHANGE msg=audit(1389204586.857:4818): pid=9732 uid=0 auid=0 ses=186 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204586.875:4819): pid=9732 uid=0 auid=0 ses=186 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1389204586.881:4820): pid=9732 uid=0 auid=0 ses=186 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204586.883:4821): pid=9732 uid=0 auid=0 ses=186 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204586.885:4822): pid=9735 uid=0 auid=0 ses=186 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=9735 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204586.885:4823): pid=9735 uid=0 auid=0 ses=186 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=9735 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRED_REFR msg=audit(1389204586.887:4824): pid=9735 uid=0 auid=0 ses=186 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204586.915:4825): pid=9732 uid=0 auid=0 ses=186 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRED_DISP msg=audit(1389204586.918:4826): pid=9732 uid=0 auid=0 ses=186 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204586.921:4827): pid=9732 uid=0 auid=0 ses=186 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1389204586.924:4828): pid=9732 uid=0 auid=0 ses=186 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204586.924:4829): pid=9732 uid=0 auid=0 ses=186 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=9732 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204586.924:4830): pid=9732 uid=0 auid=0 ses=186 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=9732 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204586.924:4831): pid=9732 uid=0 auid=0 ses=186 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=9732 suid=0 rport=33951 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204589.926:4832): pid=9746 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=9746 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204589.926:4833): pid=9746 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=9746 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204589.928:4834): pid=9745 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=9746 suid=74 rport=33957 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204589.929:4835): pid=9745 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=9746 suid=74 rport=33957 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204590.554:4836): pid=9745 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=33957 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204590.554:4837): pid=9745 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=4096 fp=8b:56:b0:3f:c8:ad:38:a6:94:f4:a7:26:83:75:cc:85 rport=33957 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_ACCT msg=audit(1389204590.561:4838): pid=9745 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204590.563:4839): pid=9745 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=9746 suid=74 rport=33957 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204590.564:4840): pid=9745 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1389204590.568:4841): pid=9745 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=LOGIN msg=audit(1389204590.568:4842): login pid=9745 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=187 >type=USER_ROLE_CHANGE msg=audit(1389204590.623:4843): pid=9745 uid=0 auid=0 ses=187 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204590.643:4844): pid=9745 uid=0 auid=0 ses=187 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1389204590.649:4845): pid=9745 uid=0 auid=0 ses=187 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204590.651:4846): pid=9745 uid=0 auid=0 ses=187 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204590.653:4847): pid=9748 uid=0 auid=0 ses=187 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=9748 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204590.653:4848): pid=9748 uid=0 auid=0 ses=187 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=9748 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRED_REFR msg=audit(1389204590.656:4849): pid=9748 uid=0 auid=0 ses=187 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204590.680:4850): pid=9745 uid=0 auid=0 ses=187 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRED_DISP msg=audit(1389204590.682:4851): pid=9745 uid=0 auid=0 ses=187 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204590.685:4852): pid=9745 uid=0 auid=0 ses=187 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1389204590.687:4853): pid=9745 uid=0 auid=0 ses=187 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204590.687:4854): pid=9745 uid=0 auid=0 ses=187 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=9745 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204590.687:4855): pid=9745 uid=0 auid=0 ses=187 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=9745 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204590.687:4856): pid=9745 uid=0 auid=0 ses=187 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=9745 suid=0 rport=33957 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204593.689:4857): pid=9757 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=9757 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204593.690:4858): pid=9757 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=9757 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204593.692:4859): pid=9756 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=9757 suid=74 rport=33961 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204593.692:4860): pid=9756 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=9757 suid=74 rport=33961 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204594.573:4861): pid=9756 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=33961 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204594.573:4862): pid=9756 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=4096 fp=8b:56:b0:3f:c8:ad:38:a6:94:f4:a7:26:83:75:cc:85 rport=33961 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_ACCT msg=audit(1389204594.580:4863): pid=9756 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204594.581:4864): pid=9756 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=9757 suid=74 rport=33961 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204594.581:4865): pid=9756 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1389204594.588:4866): pid=9756 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=LOGIN msg=audit(1389204594.588:4867): login pid=9756 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=188 >type=USER_ROLE_CHANGE msg=audit(1389204594.640:4868): pid=9756 uid=0 auid=0 ses=188 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204594.657:4869): pid=9756 uid=0 auid=0 ses=188 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1389204594.661:4870): pid=9756 uid=0 auid=0 ses=188 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204594.663:4871): pid=9756 uid=0 auid=0 ses=188 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204594.665:4872): pid=9759 uid=0 auid=0 ses=188 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=9759 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204594.665:4873): pid=9759 uid=0 auid=0 ses=188 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=9759 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRED_REFR msg=audit(1389204594.667:4874): pid=9759 uid=0 auid=0 ses=188 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204594.689:4875): pid=9756 uid=0 auid=0 ses=188 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRED_DISP msg=audit(1389204594.692:4876): pid=9756 uid=0 auid=0 ses=188 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204594.694:4877): pid=9756 uid=0 auid=0 ses=188 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1389204594.696:4878): pid=9756 uid=0 auid=0 ses=188 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204594.696:4879): pid=9756 uid=0 auid=0 ses=188 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=9756 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204594.696:4880): pid=9756 uid=0 auid=0 ses=188 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=9756 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204594.696:4881): pid=9756 uid=0 auid=0 ses=188 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=9756 suid=0 rport=33961 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204597.706:4882): pid=9770 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=9770 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204597.706:4883): pid=9770 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=9770 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204597.709:4884): pid=9769 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=9770 suid=74 rport=33964 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204597.709:4885): pid=9769 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=9770 suid=74 rport=33964 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204598.460:4886): pid=9769 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=33964 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204598.460:4887): pid=9769 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=4096 fp=8b:56:b0:3f:c8:ad:38:a6:94:f4:a7:26:83:75:cc:85 rport=33964 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_ACCT msg=audit(1389204598.466:4888): pid=9769 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204598.467:4889): pid=9769 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=9770 suid=74 rport=33964 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204598.468:4890): pid=9769 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1389204598.472:4891): pid=9769 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=LOGIN msg=audit(1389204598.472:4892): login pid=9769 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=189 >type=USER_ROLE_CHANGE msg=audit(1389204598.522:4893): pid=9769 uid=0 auid=0 ses=189 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204598.541:4894): pid=9769 uid=0 auid=0 ses=189 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1389204598.547:4895): pid=9769 uid=0 auid=0 ses=189 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204598.549:4896): pid=9769 uid=0 auid=0 ses=189 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204598.551:4897): pid=9774 uid=0 auid=0 ses=189 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=9774 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204598.551:4898): pid=9774 uid=0 auid=0 ses=189 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=9774 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRED_REFR msg=audit(1389204598.554:4899): pid=9774 uid=0 auid=0 ses=189 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204598.585:4900): pid=9769 uid=0 auid=0 ses=189 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRED_DISP msg=audit(1389204598.587:4901): pid=9769 uid=0 auid=0 ses=189 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204598.590:4902): pid=9769 uid=0 auid=0 ses=189 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1389204598.592:4903): pid=9769 uid=0 auid=0 ses=189 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204598.592:4904): pid=9769 uid=0 auid=0 ses=189 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=9769 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204598.592:4905): pid=9769 uid=0 auid=0 ses=189 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=9769 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204598.592:4906): pid=9769 uid=0 auid=0 ses=189 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=9769 suid=0 rport=33964 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204601.601:4907): pid=9783 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=9783 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204601.602:4908): pid=9783 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=9783 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204601.605:4909): pid=9782 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=9783 suid=74 rport=33967 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204601.605:4910): pid=9782 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=9783 suid=74 rport=33967 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204602.503:4911): pid=9782 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=33967 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204602.503:4912): pid=9782 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=4096 fp=8b:56:b0:3f:c8:ad:38:a6:94:f4:a7:26:83:75:cc:85 rport=33967 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_ACCT msg=audit(1389204602.509:4913): pid=9782 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204602.510:4914): pid=9782 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=9783 suid=74 rport=33967 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204602.511:4915): pid=9782 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1389204602.514:4916): pid=9782 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=LOGIN msg=audit(1389204602.514:4917): login pid=9782 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=190 >type=USER_ROLE_CHANGE msg=audit(1389204602.572:4918): pid=9782 uid=0 auid=0 ses=190 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204602.591:4919): pid=9782 uid=0 auid=0 ses=190 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1389204602.596:4920): pid=9782 uid=0 auid=0 ses=190 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204602.598:4921): pid=9782 uid=0 auid=0 ses=190 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204602.600:4922): pid=9785 uid=0 auid=0 ses=190 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=9785 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204602.600:4923): pid=9785 uid=0 auid=0 ses=190 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=9785 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRED_REFR msg=audit(1389204602.604:4924): pid=9785 uid=0 auid=0 ses=190 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204602.629:4925): pid=9782 uid=0 auid=0 ses=190 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRED_DISP msg=audit(1389204602.631:4926): pid=9782 uid=0 auid=0 ses=190 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204602.634:4927): pid=9782 uid=0 auid=0 ses=190 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1389204602.637:4928): pid=9782 uid=0 auid=0 ses=190 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204602.637:4929): pid=9782 uid=0 auid=0 ses=190 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=9782 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204602.637:4930): pid=9782 uid=0 auid=0 ses=190 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=9782 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204602.637:4931): pid=9782 uid=0 auid=0 ses=190 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=9782 suid=0 rport=33967 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_CMD msg=audit(1389204603.114:4932): pid=9790 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D43204C414E473D4320766773202D2D6E6F68656164696E6773202D2D756E69743D67202D6F206E616D652C73697A652C667265652C6C765F636F756E742C75756964202D2D736570617261746F72203A202D2D6E6F7375666669782063696E6465722D766F6C756D6573 terminal=? res=success' >type=USER_START msg=audit(1389204603.116:4933): pid=9790 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1389204603.167:4934): pid=9790 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204605.642:4935): pid=9798 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=9798 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204605.642:4936): pid=9798 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=9798 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204605.645:4937): pid=9797 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=9798 suid=74 rport=33968 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204605.645:4938): pid=9797 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=9798 suid=74 rport=33968 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204606.602:4939): pid=9797 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=33968 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204606.602:4940): pid=9797 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=4096 fp=8b:56:b0:3f:c8:ad:38:a6:94:f4:a7:26:83:75:cc:85 rport=33968 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_ACCT msg=audit(1389204606.608:4941): pid=9797 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204606.610:4942): pid=9797 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=9798 suid=74 rport=33968 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204606.610:4943): pid=9797 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1389204606.613:4944): pid=9797 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=LOGIN msg=audit(1389204606.613:4945): login pid=9797 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=191 >type=USER_ROLE_CHANGE msg=audit(1389204606.705:4946): pid=9797 uid=0 auid=0 ses=191 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204606.724:4947): pid=9797 uid=0 auid=0 ses=191 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1389204606.728:4948): pid=9797 uid=0 auid=0 ses=191 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204606.730:4949): pid=9797 uid=0 auid=0 ses=191 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204606.730:4950): pid=9802 uid=0 auid=0 ses=191 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=9802 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204606.731:4951): pid=9802 uid=0 auid=0 ses=191 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=9802 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRED_REFR msg=audit(1389204606.735:4952): pid=9802 uid=0 auid=0 ses=191 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204606.761:4953): pid=9797 uid=0 auid=0 ses=191 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRED_DISP msg=audit(1389204606.764:4954): pid=9797 uid=0 auid=0 ses=191 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204606.766:4955): pid=9797 uid=0 auid=0 ses=191 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1389204606.769:4956): pid=9797 uid=0 auid=0 ses=191 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204606.769:4957): pid=9797 uid=0 auid=0 ses=191 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=9797 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204606.769:4958): pid=9797 uid=0 auid=0 ses=191 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=9797 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204606.769:4959): pid=9797 uid=0 auid=0 ses=191 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=9797 suid=0 rport=33968 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204609.769:4960): pid=9819 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=9819 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204609.769:4961): pid=9819 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=9819 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204609.771:4962): pid=9818 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=9819 suid=74 rport=33975 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204609.772:4963): pid=9818 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=9819 suid=74 rport=33975 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204610.420:4964): pid=9818 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=33975 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204610.420:4965): pid=9818 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=4096 fp=8b:56:b0:3f:c8:ad:38:a6:94:f4:a7:26:83:75:cc:85 rport=33975 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_ACCT msg=audit(1389204610.425:4966): pid=9818 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204610.426:4967): pid=9818 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=9819 suid=74 rport=33975 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204610.427:4968): pid=9818 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1389204610.429:4969): pid=9818 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=LOGIN msg=audit(1389204610.429:4970): login pid=9818 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=192 >type=USER_ROLE_CHANGE msg=audit(1389204610.479:4971): pid=9818 uid=0 auid=0 ses=192 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204610.495:4972): pid=9818 uid=0 auid=0 ses=192 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1389204610.499:4973): pid=9818 uid=0 auid=0 ses=192 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204610.502:4974): pid=9818 uid=0 auid=0 ses=192 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204610.503:4975): pid=9821 uid=0 auid=0 ses=192 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=9821 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204610.503:4976): pid=9821 uid=0 auid=0 ses=192 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=9821 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRED_REFR msg=audit(1389204610.505:4977): pid=9821 uid=0 auid=0 ses=192 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204610.525:4978): pid=9818 uid=0 auid=0 ses=192 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRED_DISP msg=audit(1389204610.527:4979): pid=9818 uid=0 auid=0 ses=192 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204610.529:4980): pid=9818 uid=0 auid=0 ses=192 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1389204610.531:4981): pid=9818 uid=0 auid=0 ses=192 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204610.531:4982): pid=9818 uid=0 auid=0 ses=192 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=9818 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204610.531:4983): pid=9818 uid=0 auid=0 ses=192 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=9818 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204610.531:4984): pid=9818 uid=0 auid=0 ses=192 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=9818 suid=0 rport=33975 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204613.537:4985): pid=9830 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=9830 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204613.537:4986): pid=9830 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=9830 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204613.539:4987): pid=9829 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=9830 suid=74 rport=33977 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204613.539:4988): pid=9829 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=9830 suid=74 rport=33977 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204614.068:4989): pid=9829 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=33977 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204614.068:4990): pid=9829 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=4096 fp=8b:56:b0:3f:c8:ad:38:a6:94:f4:a7:26:83:75:cc:85 rport=33977 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_ACCT msg=audit(1389204614.075:4991): pid=9829 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204614.076:4992): pid=9829 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=9830 suid=74 rport=33977 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204614.077:4993): pid=9829 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1389204614.079:4994): pid=9829 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=LOGIN msg=audit(1389204614.079:4995): login pid=9829 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=193 >type=USER_ROLE_CHANGE msg=audit(1389204614.125:4996): pid=9829 uid=0 auid=0 ses=193 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204614.142:4997): pid=9829 uid=0 auid=0 ses=193 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1389204614.146:4998): pid=9829 uid=0 auid=0 ses=193 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204614.149:4999): pid=9829 uid=0 auid=0 ses=193 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204614.150:5000): pid=9832 uid=0 auid=0 ses=193 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=9832 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204614.150:5001): pid=9832 uid=0 auid=0 ses=193 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=9832 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRED_REFR msg=audit(1389204614.152:5002): pid=9832 uid=0 auid=0 ses=193 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204614.175:5003): pid=9829 uid=0 auid=0 ses=193 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRED_DISP msg=audit(1389204614.178:5004): pid=9829 uid=0 auid=0 ses=193 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204614.180:5005): pid=9829 uid=0 auid=0 ses=193 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1389204614.182:5006): pid=9829 uid=0 auid=0 ses=193 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204614.182:5007): pid=9829 uid=0 auid=0 ses=193 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=9829 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204614.182:5008): pid=9829 uid=0 auid=0 ses=193 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=9829 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204614.182:5009): pid=9829 uid=0 auid=0 ses=193 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=9829 suid=0 rport=33977 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204617.191:5010): pid=9854 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=9854 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204617.191:5011): pid=9854 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=9854 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204617.193:5012): pid=9853 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=9854 suid=74 rport=33978 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204617.193:5013): pid=9853 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=9854 suid=74 rport=33978 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204617.746:5014): pid=9853 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=33978 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204617.746:5015): pid=9853 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=4096 fp=8b:56:b0:3f:c8:ad:38:a6:94:f4:a7:26:83:75:cc:85 rport=33978 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_ACCT msg=audit(1389204617.752:5016): pid=9853 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204617.753:5017): pid=9853 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=9854 suid=74 rport=33978 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204617.754:5018): pid=9853 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1389204617.756:5019): pid=9853 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=LOGIN msg=audit(1389204617.756:5020): login pid=9853 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=194 >type=USER_ROLE_CHANGE msg=audit(1389204617.831:5021): pid=9853 uid=0 auid=0 ses=194 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204617.870:5022): pid=9853 uid=0 auid=0 ses=194 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1389204617.875:5023): pid=9853 uid=0 auid=0 ses=194 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204617.876:5024): pid=9853 uid=0 auid=0 ses=194 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204617.878:5025): pid=9857 uid=0 auid=0 ses=194 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=9857 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204617.878:5026): pid=9857 uid=0 auid=0 ses=194 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=9857 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRED_REFR msg=audit(1389204617.881:5027): pid=9857 uid=0 auid=0 ses=194 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204617.905:5028): pid=9853 uid=0 auid=0 ses=194 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRED_DISP msg=audit(1389204617.907:5029): pid=9853 uid=0 auid=0 ses=194 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204617.909:5030): pid=9853 uid=0 auid=0 ses=194 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1389204617.915:5031): pid=9853 uid=0 auid=0 ses=194 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204617.915:5032): pid=9853 uid=0 auid=0 ses=194 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=9853 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204617.915:5033): pid=9853 uid=0 auid=0 ses=194 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=9853 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204617.915:5034): pid=9853 uid=0 auid=0 ses=194 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=9853 suid=0 rport=33978 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204620.933:5035): pid=9923 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=9923 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204620.933:5036): pid=9923 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=9923 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204620.936:5037): pid=9922 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=9923 suid=74 rport=33979 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204620.937:5038): pid=9922 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=9923 suid=74 rport=33979 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204621.466:5039): pid=9922 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=33979 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204621.466:5040): pid=9922 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=4096 fp=8b:56:b0:3f:c8:ad:38:a6:94:f4:a7:26:83:75:cc:85 rport=33979 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_ACCT msg=audit(1389204621.472:5041): pid=9922 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204621.473:5042): pid=9922 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=9923 suid=74 rport=33979 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204621.474:5043): pid=9922 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1389204621.477:5044): pid=9922 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=LOGIN msg=audit(1389204621.477:5045): login pid=9922 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=195 >type=USER_ROLE_CHANGE msg=audit(1389204621.561:5046): pid=9922 uid=0 auid=0 ses=195 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204621.619:5047): pid=9922 uid=0 auid=0 ses=195 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1389204621.623:5048): pid=9922 uid=0 auid=0 ses=195 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204621.625:5049): pid=9922 uid=0 auid=0 ses=195 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204621.627:5050): pid=9925 uid=0 auid=0 ses=195 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=9925 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204621.627:5051): pid=9925 uid=0 auid=0 ses=195 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=9925 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRED_REFR msg=audit(1389204621.629:5052): pid=9925 uid=0 auid=0 ses=195 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204621.659:5053): pid=9922 uid=0 auid=0 ses=195 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRED_DISP msg=audit(1389204621.661:5054): pid=9922 uid=0 auid=0 ses=195 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204621.663:5055): pid=9922 uid=0 auid=0 ses=195 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1389204621.664:5056): pid=9922 uid=0 auid=0 ses=195 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204621.665:5057): pid=9922 uid=0 auid=0 ses=195 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=9922 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204621.665:5058): pid=9922 uid=0 auid=0 ses=195 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=9922 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204621.665:5059): pid=9922 uid=0 auid=0 ses=195 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=9922 suid=0 rport=33979 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204624.672:5060): pid=9940 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=9940 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204624.672:5061): pid=9940 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=9940 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204624.674:5062): pid=9939 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=9940 suid=74 rport=33980 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204624.674:5063): pid=9939 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=9940 suid=74 rport=33980 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=ADD_GROUP msg=audit(1389204624.715:5064): pid=9945 uid=0 auid=0 ses=138 subj=unconfined_u:system_r:groupadd_t:s0-s0:c0.c1023 msg='op=adding group to /etc/group id=32 exe="/usr/sbin/groupadd" hostname=? addr=? terminal=? res=success' >type=ADD_GROUP msg=audit(1389204624.721:5065): pid=9945 uid=0 auid=0 ses=138 subj=unconfined_u:system_r:groupadd_t:s0-s0:c0.c1023 msg='op=adding group to /etc/gshadow id=32 exe="/usr/sbin/groupadd" hostname=? addr=? terminal=? res=success' >type=ADD_GROUP msg=audit(1389204624.722:5066): pid=9945 uid=0 auid=0 ses=138 subj=unconfined_u:system_r:groupadd_t:s0-s0:c0.c1023 msg='op= id=32 exe="/usr/sbin/groupadd" hostname=? addr=? terminal=? res=success' >type=ADD_USER msg=audit(1389204624.760:5067): pid=9949 uid=0 auid=0 ses=138 subj=unconfined_u:system_r:useradd_t:s0-s0:c0.c1023 msg='op=adding user id=32 exe="/usr/sbin/useradd" hostname=? addr=? terminal=? res=success' >type=USER_AUTH msg=audit(1389204625.192:5068): pid=9939 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=33980 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204625.192:5069): pid=9939 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=4096 fp=8b:56:b0:3f:c8:ad:38:a6:94:f4:a7:26:83:75:cc:85 rport=33980 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_ACCT msg=audit(1389204625.198:5070): pid=9939 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204625.199:5071): pid=9939 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=9940 suid=74 rport=33980 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204625.200:5072): pid=9939 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1389204625.202:5073): pid=9939 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=LOGIN msg=audit(1389204625.202:5074): login pid=9939 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=196 >type=USER_ROLE_CHANGE msg=audit(1389204625.247:5075): pid=9939 uid=0 auid=0 ses=196 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204625.282:5076): pid=9939 uid=0 auid=0 ses=196 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1389204625.287:5077): pid=9939 uid=0 auid=0 ses=196 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204625.290:5078): pid=9939 uid=0 auid=0 ses=196 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204625.291:5079): pid=9965 uid=0 auid=0 ses=196 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=9965 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204625.291:5080): pid=9965 uid=0 auid=0 ses=196 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=9965 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRED_REFR msg=audit(1389204625.293:5081): pid=9965 uid=0 auid=0 ses=196 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204625.314:5082): pid=9939 uid=0 auid=0 ses=196 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRED_DISP msg=audit(1389204625.316:5083): pid=9939 uid=0 auid=0 ses=196 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204625.318:5084): pid=9939 uid=0 auid=0 ses=196 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1389204625.320:5085): pid=9939 uid=0 auid=0 ses=196 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204625.320:5086): pid=9939 uid=0 auid=0 ses=196 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=9939 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204625.320:5087): pid=9939 uid=0 auid=0 ses=196 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=9939 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204625.320:5088): pid=9939 uid=0 auid=0 ses=196 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=9939 suid=0 rport=33980 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204628.329:5089): pid=9979 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=9979 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204628.329:5090): pid=9979 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=9979 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204628.331:5091): pid=9978 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=9979 suid=74 rport=33981 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204628.331:5092): pid=9978 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=9979 suid=74 rport=33981 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204628.851:5093): pid=9978 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=33981 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204628.851:5094): pid=9978 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=4096 fp=8b:56:b0:3f:c8:ad:38:a6:94:f4:a7:26:83:75:cc:85 rport=33981 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_ACCT msg=audit(1389204628.857:5095): pid=9978 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204628.858:5096): pid=9978 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=9979 suid=74 rport=33981 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204628.858:5097): pid=9978 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1389204628.860:5098): pid=9978 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=LOGIN msg=audit(1389204628.860:5099): login pid=9978 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=197 >type=USER_ROLE_CHANGE msg=audit(1389204628.940:5100): pid=9978 uid=0 auid=0 ses=197 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204628.960:5101): pid=9978 uid=0 auid=0 ses=197 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1389204628.964:5102): pid=9978 uid=0 auid=0 ses=197 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204628.965:5103): pid=9978 uid=0 auid=0 ses=197 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204628.967:5104): pid=9985 uid=0 auid=0 ses=197 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=9985 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204628.967:5105): pid=9985 uid=0 auid=0 ses=197 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=9985 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRED_REFR msg=audit(1389204628.969:5106): pid=9985 uid=0 auid=0 ses=197 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204628.995:5107): pid=9978 uid=0 auid=0 ses=197 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRED_DISP msg=audit(1389204628.996:5108): pid=9978 uid=0 auid=0 ses=197 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204628.998:5109): pid=9978 uid=0 auid=0 ses=197 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1389204629.000:5110): pid=9978 uid=0 auid=0 ses=197 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204629.000:5111): pid=9978 uid=0 auid=0 ses=197 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=9978 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204629.000:5112): pid=9978 uid=0 auid=0 ses=197 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=9978 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204629.000:5113): pid=9978 uid=0 auid=0 ses=197 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=9978 suid=0 rport=33981 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204632.028:5114): pid=10009 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=10009 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204632.030:5115): pid=10009 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=10009 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204632.037:5116): pid=10008 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=10009 suid=74 rport=33982 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204632.038:5117): pid=10008 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=10009 suid=74 rport=33982 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204632.564:5118): pid=10008 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=33982 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204632.564:5119): pid=10008 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=4096 fp=8b:56:b0:3f:c8:ad:38:a6:94:f4:a7:26:83:75:cc:85 rport=33982 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_ACCT msg=audit(1389204632.569:5120): pid=10008 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204632.570:5121): pid=10008 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=10009 suid=74 rport=33982 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204632.571:5122): pid=10008 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1389204632.573:5123): pid=10008 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=LOGIN msg=audit(1389204632.573:5124): login pid=10008 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=198 >type=USER_ROLE_CHANGE msg=audit(1389204632.618:5125): pid=10008 uid=0 auid=0 ses=198 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204632.655:5126): pid=10008 uid=0 auid=0 ses=198 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1389204632.659:5127): pid=10008 uid=0 auid=0 ses=198 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204632.662:5128): pid=10008 uid=0 auid=0 ses=198 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204632.663:5129): pid=10012 uid=0 auid=0 ses=198 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=10012 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204632.663:5130): pid=10012 uid=0 auid=0 ses=198 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=10012 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRED_REFR msg=audit(1389204632.666:5131): pid=10012 uid=0 auid=0 ses=198 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204632.692:5132): pid=10008 uid=0 auid=0 ses=198 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRED_DISP msg=audit(1389204632.695:5133): pid=10008 uid=0 auid=0 ses=198 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204632.697:5134): pid=10008 uid=0 auid=0 ses=198 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1389204632.701:5135): pid=10008 uid=0 auid=0 ses=198 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204632.701:5136): pid=10008 uid=0 auid=0 ses=198 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=10008 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204632.701:5137): pid=10008 uid=0 auid=0 ses=198 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=10008 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204632.701:5138): pid=10008 uid=0 auid=0 ses=198 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=10008 suid=0 rport=33982 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=ADD_GROUP msg=audit(1389204632.751:5139): pid=10019 uid=0 auid=0 ses=138 subj=unconfined_u:system_r:groupadd_t:s0-s0:c0.c1023 msg='op=adding group to /etc/group id=994 exe="/usr/sbin/groupadd" hostname=? addr=? terminal=? res=success' >type=ADD_GROUP msg=audit(1389204632.759:5140): pid=10019 uid=0 auid=0 ses=138 subj=unconfined_u:system_r:groupadd_t:s0-s0:c0.c1023 msg='op=adding group to /etc/gshadow id=994 exe="/usr/sbin/groupadd" hostname=? addr=? terminal=? res=success' >type=ADD_GROUP msg=audit(1389204632.760:5141): pid=10019 uid=0 auid=0 ses=138 subj=unconfined_u:system_r:groupadd_t:s0-s0:c0.c1023 msg='op= id=994 exe="/usr/sbin/groupadd" hostname=? addr=? terminal=? res=success' >type=ADD_GROUP msg=audit(1389204634.399:5142): pid=10046 uid=0 auid=0 ses=138 subj=unconfined_u:system_r:groupadd_t:s0-s0:c0.c1023 msg='op=adding group to /etc/group id=993 exe="/usr/sbin/groupadd" hostname=? addr=? terminal=? res=success' >type=ADD_GROUP msg=audit(1389204634.405:5143): pid=10046 uid=0 auid=0 ses=138 subj=unconfined_u:system_r:groupadd_t:s0-s0:c0.c1023 msg='op=adding group to /etc/gshadow id=993 exe="/usr/sbin/groupadd" hostname=? addr=? terminal=? res=success' >type=ADD_GROUP msg=audit(1389204634.406:5144): pid=10046 uid=0 auid=0 ses=138 subj=unconfined_u:system_r:groupadd_t:s0-s0:c0.c1023 msg='op= id=993 exe="/usr/sbin/groupadd" hostname=? addr=? terminal=? res=success' >type=ADD_USER msg=audit(1389204634.432:5145): pid=10051 uid=0 auid=0 ses=138 subj=unconfined_u:system_r:useradd_t:s0-s0:c0.c1023 msg='op=adding user id=996 exe="/usr/sbin/useradd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204635.710:5146): pid=10071 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=10071 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204635.710:5147): pid=10071 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=10071 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204635.712:5148): pid=10070 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=10071 suid=74 rport=33983 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204635.712:5149): pid=10070 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=10071 suid=74 rport=33983 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204636.241:5150): pid=10070 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=33983 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204636.241:5151): pid=10070 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=4096 fp=8b:56:b0:3f:c8:ad:38:a6:94:f4:a7:26:83:75:cc:85 rport=33983 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_ACCT msg=audit(1389204636.246:5152): pid=10070 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204636.248:5153): pid=10070 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=10071 suid=74 rport=33983 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204636.248:5154): pid=10070 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1389204636.250:5155): pid=10070 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=LOGIN msg=audit(1389204636.250:5156): login pid=10070 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=199 >type=USER_ROLE_CHANGE msg=audit(1389204636.296:5157): pid=10070 uid=0 auid=0 ses=199 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204636.330:5158): pid=10070 uid=0 auid=0 ses=199 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1389204636.335:5159): pid=10070 uid=0 auid=0 ses=199 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204636.337:5160): pid=10070 uid=0 auid=0 ses=199 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204636.338:5161): pid=10074 uid=0 auid=0 ses=199 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=10074 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204636.338:5162): pid=10074 uid=0 auid=0 ses=199 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=10074 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRED_REFR msg=audit(1389204636.340:5163): pid=10074 uid=0 auid=0 ses=199 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204636.364:5164): pid=10070 uid=0 auid=0 ses=199 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRED_DISP msg=audit(1389204636.366:5165): pid=10070 uid=0 auid=0 ses=199 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204636.368:5166): pid=10070 uid=0 auid=0 ses=199 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1389204636.370:5167): pid=10070 uid=0 auid=0 ses=199 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204636.370:5168): pid=10070 uid=0 auid=0 ses=199 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=10070 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204636.370:5169): pid=10070 uid=0 auid=0 ses=199 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=10070 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204636.370:5170): pid=10070 uid=0 auid=0 ses=199 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=10070 suid=0 rport=33983 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204639.380:5171): pid=10084 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=10084 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204639.381:5172): pid=10084 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=10084 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204639.382:5173): pid=10083 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=10084 suid=74 rport=33984 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204639.383:5174): pid=10083 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=10084 suid=74 rport=33984 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204639.904:5175): pid=10083 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=33984 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204639.904:5176): pid=10083 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=4096 fp=8b:56:b0:3f:c8:ad:38:a6:94:f4:a7:26:83:75:cc:85 rport=33984 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_ACCT msg=audit(1389204639.910:5177): pid=10083 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204639.911:5178): pid=10083 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=10084 suid=74 rport=33984 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204639.912:5179): pid=10083 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1389204639.915:5180): pid=10083 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=LOGIN msg=audit(1389204639.915:5181): login pid=10083 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=200 >type=USER_ROLE_CHANGE msg=audit(1389204640.004:5182): pid=10083 uid=0 auid=0 ses=200 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204640.026:5183): pid=10083 uid=0 auid=0 ses=200 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1389204640.031:5184): pid=10083 uid=0 auid=0 ses=200 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204640.034:5185): pid=10083 uid=0 auid=0 ses=200 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204640.035:5186): pid=10086 uid=0 auid=0 ses=200 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=10086 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204640.035:5187): pid=10086 uid=0 auid=0 ses=200 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=10086 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRED_REFR msg=audit(1389204640.038:5188): pid=10086 uid=0 auid=0 ses=200 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204640.067:5189): pid=10083 uid=0 auid=0 ses=200 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRED_DISP msg=audit(1389204640.070:5190): pid=10083 uid=0 auid=0 ses=200 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204640.073:5191): pid=10083 uid=0 auid=0 ses=200 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1389204640.075:5192): pid=10083 uid=0 auid=0 ses=200 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204640.075:5193): pid=10083 uid=0 auid=0 ses=200 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=10083 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204640.075:5194): pid=10083 uid=0 auid=0 ses=200 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=10083 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204640.075:5195): pid=10083 uid=0 auid=0 ses=200 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=10083 suid=0 rport=33984 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204643.081:5196): pid=10119 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=10119 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204643.081:5197): pid=10119 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=10119 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204643.083:5198): pid=10118 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=10119 suid=74 rport=33985 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204643.083:5199): pid=10118 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=10119 suid=74 rport=33985 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204643.612:5200): pid=10118 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=33985 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204643.612:5201): pid=10118 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=4096 fp=8b:56:b0:3f:c8:ad:38:a6:94:f4:a7:26:83:75:cc:85 rport=33985 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_ACCT msg=audit(1389204643.617:5202): pid=10118 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204643.619:5203): pid=10118 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=10119 suid=74 rport=33985 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204643.620:5204): pid=10118 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1389204643.622:5205): pid=10118 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=LOGIN msg=audit(1389204643.622:5206): login pid=10118 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=201 >type=USER_ROLE_CHANGE msg=audit(1389204643.667:5207): pid=10118 uid=0 auid=0 ses=201 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204643.704:5208): pid=10118 uid=0 auid=0 ses=201 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1389204643.708:5209): pid=10118 uid=0 auid=0 ses=201 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204643.710:5210): pid=10118 uid=0 auid=0 ses=201 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204643.711:5211): pid=10121 uid=0 auid=0 ses=201 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=10121 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204643.711:5212): pid=10121 uid=0 auid=0 ses=201 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=10121 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRED_REFR msg=audit(1389204643.713:5213): pid=10121 uid=0 auid=0 ses=201 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204643.735:5214): pid=10118 uid=0 auid=0 ses=201 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRED_DISP msg=audit(1389204643.737:5215): pid=10118 uid=0 auid=0 ses=201 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204643.739:5216): pid=10118 uid=0 auid=0 ses=201 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1389204643.740:5217): pid=10118 uid=0 auid=0 ses=201 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204643.740:5218): pid=10118 uid=0 auid=0 ses=201 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=10118 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204643.740:5219): pid=10118 uid=0 auid=0 ses=201 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=10118 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204643.741:5220): pid=10118 uid=0 auid=0 ses=201 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=10118 suid=0 rport=33985 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204646.755:5221): pid=10164 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=10164 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204646.755:5222): pid=10164 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=10164 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204646.757:5223): pid=10163 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=10164 suid=74 rport=33986 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204646.757:5224): pid=10163 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=10164 suid=74 rport=33986 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204647.279:5225): pid=10163 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=33986 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204647.279:5226): pid=10163 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=4096 fp=8b:56:b0:3f:c8:ad:38:a6:94:f4:a7:26:83:75:cc:85 rport=33986 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_ACCT msg=audit(1389204647.285:5227): pid=10163 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204647.286:5228): pid=10163 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=10164 suid=74 rport=33986 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204647.288:5229): pid=10163 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1389204647.290:5230): pid=10163 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=LOGIN msg=audit(1389204647.290:5231): login pid=10163 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=202 >type=USER_ROLE_CHANGE msg=audit(1389204647.337:5232): pid=10163 uid=0 auid=0 ses=202 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204647.370:5233): pid=10163 uid=0 auid=0 ses=202 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1389204647.375:5234): pid=10163 uid=0 auid=0 ses=202 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204647.377:5235): pid=10163 uid=0 auid=0 ses=202 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204647.378:5236): pid=10166 uid=0 auid=0 ses=202 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=10166 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204647.378:5237): pid=10166 uid=0 auid=0 ses=202 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=10166 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRED_REFR msg=audit(1389204647.380:5238): pid=10166 uid=0 auid=0 ses=202 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204647.403:5239): pid=10163 uid=0 auid=0 ses=202 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRED_DISP msg=audit(1389204647.404:5240): pid=10163 uid=0 auid=0 ses=202 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204647.407:5241): pid=10163 uid=0 auid=0 ses=202 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1389204647.408:5242): pid=10163 uid=0 auid=0 ses=202 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204647.408:5243): pid=10163 uid=0 auid=0 ses=202 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=10163 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204647.408:5244): pid=10163 uid=0 auid=0 ses=202 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=10163 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204647.409:5245): pid=10163 uid=0 auid=0 ses=202 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=10163 suid=0 rport=33986 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204650.419:5246): pid=10175 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=10175 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204650.419:5247): pid=10175 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=10175 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204650.421:5248): pid=10174 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=10175 suid=74 rport=33987 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204650.421:5249): pid=10174 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=10175 suid=74 rport=33987 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204650.946:5250): pid=10174 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=33987 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204650.946:5251): pid=10174 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=4096 fp=8b:56:b0:3f:c8:ad:38:a6:94:f4:a7:26:83:75:cc:85 rport=33987 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_ACCT msg=audit(1389204650.951:5252): pid=10174 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204650.952:5253): pid=10174 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=10175 suid=74 rport=33987 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204650.953:5254): pid=10174 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1389204650.955:5255): pid=10174 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=LOGIN msg=audit(1389204650.955:5256): login pid=10174 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=203 >type=USER_ROLE_CHANGE msg=audit(1389204651.001:5257): pid=10174 uid=0 auid=0 ses=203 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204651.036:5258): pid=10174 uid=0 auid=0 ses=203 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1389204651.041:5259): pid=10174 uid=0 auid=0 ses=203 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204651.043:5260): pid=10174 uid=0 auid=0 ses=203 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204651.044:5261): pid=10188 uid=0 auid=0 ses=203 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=10188 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204651.044:5262): pid=10188 uid=0 auid=0 ses=203 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=10188 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRED_REFR msg=audit(1389204651.046:5263): pid=10188 uid=0 auid=0 ses=203 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204651.070:5264): pid=10174 uid=0 auid=0 ses=203 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRED_DISP msg=audit(1389204651.072:5265): pid=10174 uid=0 auid=0 ses=203 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204651.074:5266): pid=10174 uid=0 auid=0 ses=203 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1389204651.075:5267): pid=10174 uid=0 auid=0 ses=203 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204651.075:5268): pid=10174 uid=0 auid=0 ses=203 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=10174 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204651.075:5269): pid=10174 uid=0 auid=0 ses=203 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=10174 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204651.075:5270): pid=10174 uid=0 auid=0 ses=203 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=10174 suid=0 rport=33987 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204654.089:5271): pid=10198 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=10198 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204654.089:5272): pid=10198 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=10198 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204654.091:5273): pid=10197 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=10198 suid=74 rport=33988 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204654.091:5274): pid=10197 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=10198 suid=74 rport=33988 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204654.610:5275): pid=10197 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=33988 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204654.610:5276): pid=10197 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=4096 fp=8b:56:b0:3f:c8:ad:38:a6:94:f4:a7:26:83:75:cc:85 rport=33988 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_ACCT msg=audit(1389204654.615:5277): pid=10197 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204654.616:5278): pid=10197 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=10198 suid=74 rport=33988 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204654.617:5279): pid=10197 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1389204654.619:5280): pid=10197 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=LOGIN msg=audit(1389204654.619:5281): login pid=10197 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=204 >type=USER_ROLE_CHANGE msg=audit(1389204654.686:5282): pid=10197 uid=0 auid=0 ses=204 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204654.707:5283): pid=10197 uid=0 auid=0 ses=204 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1389204654.712:5284): pid=10197 uid=0 auid=0 ses=204 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204654.713:5285): pid=10197 uid=0 auid=0 ses=204 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204654.715:5286): pid=10200 uid=0 auid=0 ses=204 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=10200 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204654.715:5287): pid=10200 uid=0 auid=0 ses=204 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=10200 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRED_REFR msg=audit(1389204654.717:5288): pid=10200 uid=0 auid=0 ses=204 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204654.745:5289): pid=10197 uid=0 auid=0 ses=204 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRED_DISP msg=audit(1389204654.746:5290): pid=10197 uid=0 auid=0 ses=204 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204654.748:5291): pid=10197 uid=0 auid=0 ses=204 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1389204654.750:5292): pid=10197 uid=0 auid=0 ses=204 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204654.750:5293): pid=10197 uid=0 auid=0 ses=204 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=10197 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204654.750:5294): pid=10197 uid=0 auid=0 ses=204 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=10197 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204654.750:5295): pid=10197 uid=0 auid=0 ses=204 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=10197 suid=0 rport=33988 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204657.755:5296): pid=10210 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=10210 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204657.755:5297): pid=10210 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=10210 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204657.757:5298): pid=10209 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=10210 suid=74 rport=33989 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204657.757:5299): pid=10209 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=10210 suid=74 rport=33989 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204658.279:5300): pid=10209 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=33989 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204658.279:5301): pid=10209 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=4096 fp=8b:56:b0:3f:c8:ad:38:a6:94:f4:a7:26:83:75:cc:85 rport=33989 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_ACCT msg=audit(1389204658.284:5302): pid=10209 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204658.285:5303): pid=10209 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=10210 suid=74 rport=33989 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204658.286:5304): pid=10209 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1389204658.288:5305): pid=10209 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=LOGIN msg=audit(1389204658.288:5306): login pid=10209 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=205 >type=USER_ROLE_CHANGE msg=audit(1389204658.331:5307): pid=10209 uid=0 auid=0 ses=205 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204658.345:5308): pid=10209 uid=0 auid=0 ses=205 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1389204658.350:5309): pid=10209 uid=0 auid=0 ses=205 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204658.351:5310): pid=10209 uid=0 auid=0 ses=205 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204658.353:5311): pid=10212 uid=0 auid=0 ses=205 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=10212 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204658.353:5312): pid=10212 uid=0 auid=0 ses=205 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=10212 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRED_REFR msg=audit(1389204658.355:5313): pid=10212 uid=0 auid=0 ses=205 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204658.375:5314): pid=10209 uid=0 auid=0 ses=205 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRED_DISP msg=audit(1389204658.377:5315): pid=10209 uid=0 auid=0 ses=205 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204658.379:5316): pid=10209 uid=0 auid=0 ses=205 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1389204658.381:5317): pid=10209 uid=0 auid=0 ses=205 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204658.381:5318): pid=10209 uid=0 auid=0 ses=205 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=10209 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204658.381:5319): pid=10209 uid=0 auid=0 ses=205 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=10209 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204658.381:5320): pid=10209 uid=0 auid=0 ses=205 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=10209 suid=0 rport=33989 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204661.393:5321): pid=10227 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=10227 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204661.394:5322): pid=10227 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=10227 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204661.396:5323): pid=10226 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=10227 suid=74 rport=33990 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204661.396:5324): pid=10226 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=10227 suid=74 rport=33990 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204661.926:5325): pid=10226 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=33990 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204661.926:5326): pid=10226 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=4096 fp=8b:56:b0:3f:c8:ad:38:a6:94:f4:a7:26:83:75:cc:85 rport=33990 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_ACCT msg=audit(1389204661.931:5327): pid=10226 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204661.932:5328): pid=10226 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=10227 suid=74 rport=33990 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204661.933:5329): pid=10226 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1389204661.935:5330): pid=10226 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=LOGIN msg=audit(1389204661.935:5331): login pid=10226 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=206 >type=USER_ROLE_CHANGE msg=audit(1389204661.980:5332): pid=10226 uid=0 auid=0 ses=206 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204661.996:5333): pid=10226 uid=0 auid=0 ses=206 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1389204662.001:5334): pid=10226 uid=0 auid=0 ses=206 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204662.003:5335): pid=10226 uid=0 auid=0 ses=206 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204662.004:5336): pid=10236 uid=0 auid=0 ses=206 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=10236 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204662.004:5337): pid=10236 uid=0 auid=0 ses=206 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=10236 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRED_REFR msg=audit(1389204662.007:5338): pid=10236 uid=0 auid=0 ses=206 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204662.028:5339): pid=10226 uid=0 auid=0 ses=206 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRED_DISP msg=audit(1389204662.031:5340): pid=10226 uid=0 auid=0 ses=206 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204662.033:5341): pid=10226 uid=0 auid=0 ses=206 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1389204662.036:5342): pid=10226 uid=0 auid=0 ses=206 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204662.036:5343): pid=10226 uid=0 auid=0 ses=206 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=10226 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204662.036:5344): pid=10226 uid=0 auid=0 ses=206 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=10226 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204662.036:5345): pid=10226 uid=0 auid=0 ses=206 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=10226 suid=0 rport=33990 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_CMD msg=audit(1389204663.185:5346): pid=10251 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D43204C414E473D4320766773202D2D6E6F68656164696E6773202D2D756E69743D67202D6F206E616D652C73697A652C667265652C6C765F636F756E742C75756964202D2D736570617261746F72203A202D2D6E6F7375666669782063696E6465722D766F6C756D6573 terminal=? res=success' >type=USER_START msg=audit(1389204663.187:5347): pid=10251 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1389204663.222:5348): pid=10251 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=ADD_GROUP msg=audit(1389204663.763:5349): pid=10256 uid=0 auid=0 ses=138 subj=unconfined_u:system_r:useradd_t:s0-s0:c0.c1023 msg='op=adding group acct="rpcuser" exe="/usr/sbin/useradd" hostname=? addr=? terminal=? res=success' >type=ADD_USER msg=audit(1389204663.763:5350): pid=10256 uid=0 auid=0 ses=138 subj=unconfined_u:system_r:useradd_t:s0-s0:c0.c1023 msg='op=adding user id=29 exe="/usr/sbin/useradd" hostname=? addr=? terminal=? res=success' >type=ADD_GROUP msg=audit(1389204664.376:5351): pid=10265 uid=0 auid=0 ses=138 subj=unconfined_u:system_r:groupadd_t:s0-s0:c0.c1023 msg='op=adding group to /etc/group id=65534 exe="/usr/sbin/groupadd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204665.041:5352): pid=10270 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=10270 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204665.041:5353): pid=10270 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=10270 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204665.043:5354): pid=10269 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=10270 suid=74 rport=33991 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204665.043:5355): pid=10269 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=10270 suid=74 rport=33991 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=ADD_GROUP msg=audit(1389204665.547:5356): pid=10265 uid=0 auid=0 ses=138 subj=unconfined_u:system_r:groupadd_t:s0-s0:c0.c1023 msg='op=adding group to /etc/gshadow id=65534 exe="/usr/sbin/groupadd" hostname=? addr=? terminal=? res=success' >type=ADD_GROUP msg=audit(1389204665.548:5357): pid=10265 uid=0 auid=0 ses=138 subj=unconfined_u:system_r:groupadd_t:s0-s0:c0.c1023 msg='op= id=65534 exe="/usr/sbin/groupadd" hostname=? addr=? terminal=? res=success' >type=ADD_USER msg=audit(1389204665.552:5358): pid=10277 uid=0 auid=0 ses=138 subj=unconfined_u:system_r:useradd_t:s0-s0:c0.c1023 msg='op=adding user id=65534 exe="/usr/sbin/useradd" hostname=? addr=? terminal=? res=success' >type=USER_AUTH msg=audit(1389204665.571:5359): pid=10269 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=33991 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204665.571:5360): pid=10269 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=4096 fp=8b:56:b0:3f:c8:ad:38:a6:94:f4:a7:26:83:75:cc:85 rport=33991 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_ACCT msg=audit(1389204665.577:5361): pid=10269 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204665.579:5362): pid=10269 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=10270 suid=74 rport=33991 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204665.580:5363): pid=10269 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1389204665.585:5364): pid=10269 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=LOGIN msg=audit(1389204665.585:5365): login pid=10269 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=207 >type=USER_ROLE_CHANGE msg=audit(1389204665.672:5366): pid=10269 uid=0 auid=0 ses=207 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204665.728:5367): pid=10269 uid=0 auid=0 ses=207 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1389204665.733:5368): pid=10269 uid=0 auid=0 ses=207 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204665.736:5369): pid=10269 uid=0 auid=0 ses=207 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204665.737:5370): pid=10283 uid=0 auid=0 ses=207 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=10283 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204665.737:5371): pid=10283 uid=0 auid=0 ses=207 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=10283 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRED_REFR msg=audit(1389204665.740:5372): pid=10283 uid=0 auid=0 ses=207 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204665.765:5373): pid=10269 uid=0 auid=0 ses=207 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRED_DISP msg=audit(1389204665.766:5374): pid=10269 uid=0 auid=0 ses=207 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204665.768:5375): pid=10269 uid=0 auid=0 ses=207 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1389204665.770:5376): pid=10269 uid=0 auid=0 ses=207 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204665.770:5377): pid=10269 uid=0 auid=0 ses=207 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=10269 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204665.770:5378): pid=10269 uid=0 auid=0 ses=207 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=10269 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204665.770:5379): pid=10269 uid=0 auid=0 ses=207 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=10269 suid=0 rport=33991 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=SERVICE_START msg=audit(1389204666.654:5380): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="rpcbind" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1389204666.861:5381): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="nfs-lock" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204668.785:5382): pid=10336 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=10336 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204668.785:5383): pid=10336 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=10336 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204668.787:5384): pid=10335 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=10336 suid=74 rport=33992 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204668.788:5385): pid=10335 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=10336 suid=74 rport=33992 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204669.315:5386): pid=10335 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=33992 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204669.315:5387): pid=10335 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=4096 fp=8b:56:b0:3f:c8:ad:38:a6:94:f4:a7:26:83:75:cc:85 rport=33992 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_ACCT msg=audit(1389204669.322:5388): pid=10335 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204669.323:5389): pid=10335 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=10336 suid=74 rport=33992 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204669.324:5390): pid=10335 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1389204669.326:5391): pid=10335 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=LOGIN msg=audit(1389204669.326:5392): login pid=10335 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=208 >type=USER_ROLE_CHANGE msg=audit(1389204669.374:5393): pid=10335 uid=0 auid=0 ses=208 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204669.410:5394): pid=10335 uid=0 auid=0 ses=208 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1389204669.414:5395): pid=10335 uid=0 auid=0 ses=208 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204669.416:5396): pid=10335 uid=0 auid=0 ses=208 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204669.417:5397): pid=10355 uid=0 auid=0 ses=208 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=10355 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204669.418:5398): pid=10355 uid=0 auid=0 ses=208 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=10355 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRED_REFR msg=audit(1389204669.420:5399): pid=10355 uid=0 auid=0 ses=208 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204669.443:5400): pid=10335 uid=0 auid=0 ses=208 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRED_DISP msg=audit(1389204669.444:5401): pid=10335 uid=0 auid=0 ses=208 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204669.446:5402): pid=10335 uid=0 auid=0 ses=208 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1389204669.448:5403): pid=10335 uid=0 auid=0 ses=208 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204669.448:5404): pid=10335 uid=0 auid=0 ses=208 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=10335 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204669.448:5405): pid=10335 uid=0 auid=0 ses=208 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=10335 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204669.448:5406): pid=10335 uid=0 auid=0 ses=208 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=10335 suid=0 rport=33992 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204672.456:5407): pid=10366 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=10366 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204672.456:5408): pid=10366 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=10366 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204672.458:5409): pid=10365 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=10366 suid=74 rport=33993 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204672.459:5410): pid=10365 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=10366 suid=74 rport=33993 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204672.977:5411): pid=10365 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=33993 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204672.977:5412): pid=10365 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=4096 fp=8b:56:b0:3f:c8:ad:38:a6:94:f4:a7:26:83:75:cc:85 rport=33993 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_ACCT msg=audit(1389204672.982:5413): pid=10365 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204672.983:5414): pid=10365 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=10366 suid=74 rport=33993 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204672.984:5415): pid=10365 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1389204672.986:5416): pid=10365 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=LOGIN msg=audit(1389204672.986:5417): login pid=10365 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=209 >type=USER_ROLE_CHANGE msg=audit(1389204673.031:5418): pid=10365 uid=0 auid=0 ses=209 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204673.047:5419): pid=10365 uid=0 auid=0 ses=209 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1389204673.052:5420): pid=10365 uid=0 auid=0 ses=209 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204673.054:5421): pid=10365 uid=0 auid=0 ses=209 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204673.055:5422): pid=10368 uid=0 auid=0 ses=209 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=10368 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204673.055:5423): pid=10368 uid=0 auid=0 ses=209 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=10368 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRED_REFR msg=audit(1389204673.057:5424): pid=10368 uid=0 auid=0 ses=209 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204673.079:5425): pid=10365 uid=0 auid=0 ses=209 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRED_DISP msg=audit(1389204673.081:5426): pid=10365 uid=0 auid=0 ses=209 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204673.083:5427): pid=10365 uid=0 auid=0 ses=209 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1389204673.085:5428): pid=10365 uid=0 auid=0 ses=209 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204673.085:5429): pid=10365 uid=0 auid=0 ses=209 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=10365 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204673.085:5430): pid=10365 uid=0 auid=0 ses=209 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=10365 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204673.085:5431): pid=10365 uid=0 auid=0 ses=209 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=10365 suid=0 rport=33993 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=ADD_GROUP msg=audit(1389204675.338:5432): pid=10376 uid=0 auid=0 ses=138 subj=unconfined_u:system_r:groupadd_t:s0-s0:c0.c1023 msg='op=adding group to /etc/group id=75 exe="/usr/sbin/groupadd" hostname=? addr=? terminal=? res=success' >type=ADD_GROUP msg=audit(1389204675.345:5433): pid=10376 uid=0 auid=0 ses=138 subj=unconfined_u:system_r:groupadd_t:s0-s0:c0.c1023 msg='op=adding group to /etc/gshadow id=75 exe="/usr/sbin/groupadd" hostname=? addr=? terminal=? res=success' >type=ADD_GROUP msg=audit(1389204675.347:5434): pid=10376 uid=0 auid=0 ses=138 subj=unconfined_u:system_r:groupadd_t:s0-s0:c0.c1023 msg='op= id=75 exe="/usr/sbin/groupadd" hostname=? addr=? terminal=? res=success' >type=ADD_USER msg=audit(1389204675.624:5435): pid=10381 uid=0 auid=0 ses=138 subj=unconfined_u:system_r:useradd_t:s0-s0:c0.c1023 msg='op=adding user id=75 exe="/usr/sbin/useradd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204676.107:5436): pid=10400 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=10400 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204676.109:5437): pid=10400 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=10400 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204676.112:5438): pid=10399 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=10400 suid=74 rport=33994 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204676.112:5439): pid=10399 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=10400 suid=74 rport=33994 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204676.646:5440): pid=10399 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=33994 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204676.646:5441): pid=10399 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=4096 fp=8b:56:b0:3f:c8:ad:38:a6:94:f4:a7:26:83:75:cc:85 rport=33994 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_ACCT msg=audit(1389204676.651:5442): pid=10399 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204676.652:5443): pid=10399 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=10400 suid=74 rport=33994 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204676.653:5444): pid=10399 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1389204676.655:5445): pid=10399 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=LOGIN msg=audit(1389204676.655:5446): login pid=10399 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=210 >type=USER_ROLE_CHANGE msg=audit(1389204676.702:5447): pid=10399 uid=0 auid=0 ses=210 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204676.749:5448): pid=10399 uid=0 auid=0 ses=210 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1389204676.755:5449): pid=10399 uid=0 auid=0 ses=210 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204676.757:5450): pid=10399 uid=0 auid=0 ses=210 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204676.759:5451): pid=10402 uid=0 auid=0 ses=210 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=10402 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204676.759:5452): pid=10402 uid=0 auid=0 ses=210 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=10402 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRED_REFR msg=audit(1389204676.761:5453): pid=10402 uid=0 auid=0 ses=210 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204676.791:5454): pid=10399 uid=0 auid=0 ses=210 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRED_DISP msg=audit(1389204676.793:5455): pid=10399 uid=0 auid=0 ses=210 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204676.795:5456): pid=10399 uid=0 auid=0 ses=210 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1389204676.796:5457): pid=10399 uid=0 auid=0 ses=210 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204676.797:5458): pid=10399 uid=0 auid=0 ses=210 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=10399 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204676.797:5459): pid=10399 uid=0 auid=0 ses=210 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=10399 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204676.797:5460): pid=10399 uid=0 auid=0 ses=210 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=10399 suid=0 rport=33994 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_CHAUTHTOK msg=audit(1389204678.822:5461): pid=10409 uid=0 auid=0 ses=138 subj=unconfined_u:system_r:useradd_t:s0-s0:c0.c1023 msg='op=adding user to group acct="nova" exe="/usr/sbin/usermod" hostname=? addr=? terminal=? res=success' >type=USER_CHAUTHTOK msg=audit(1389204678.823:5462): pid=10409 uid=0 auid=0 ses=138 subj=unconfined_u:system_r:useradd_t:s0-s0:c0.c1023 msg='op=adding user to shadow group acct="nova" exe="/usr/sbin/usermod" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204679.809:5463): pid=10478 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=10478 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204679.809:5464): pid=10478 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=10478 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204679.811:5465): pid=10477 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=10478 suid=74 rport=33995 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204679.811:5466): pid=10477 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=10478 suid=74 rport=33995 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204680.347:5467): pid=10477 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=33995 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204680.347:5468): pid=10477 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=4096 fp=8b:56:b0:3f:c8:ad:38:a6:94:f4:a7:26:83:75:cc:85 rport=33995 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_ACCT msg=audit(1389204680.353:5469): pid=10477 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204680.354:5470): pid=10477 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=10478 suid=74 rport=33995 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204680.354:5471): pid=10477 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1389204680.357:5472): pid=10477 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=LOGIN msg=audit(1389204680.357:5473): login pid=10477 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=211 >type=USER_ROLE_CHANGE msg=audit(1389204680.436:5474): pid=10477 uid=0 auid=0 ses=211 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204680.504:5475): pid=10477 uid=0 auid=0 ses=211 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1389204680.509:5476): pid=10477 uid=0 auid=0 ses=211 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204680.511:5477): pid=10477 uid=0 auid=0 ses=211 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204680.512:5478): pid=10836 uid=0 auid=0 ses=211 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=10836 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204680.512:5479): pid=10836 uid=0 auid=0 ses=211 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=10836 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRED_REFR msg=audit(1389204680.515:5480): pid=10836 uid=0 auid=0 ses=211 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204680.544:5481): pid=10477 uid=0 auid=0 ses=211 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRED_DISP msg=audit(1389204680.547:5482): pid=10477 uid=0 auid=0 ses=211 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204680.549:5483): pid=10477 uid=0 auid=0 ses=211 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1389204680.551:5484): pid=10477 uid=0 auid=0 ses=211 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204680.551:5485): pid=10477 uid=0 auid=0 ses=211 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=10477 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204680.551:5486): pid=10477 uid=0 auid=0 ses=211 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=10477 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204680.551:5487): pid=10477 uid=0 auid=0 ses=211 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=10477 suid=0 rport=33995 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204683.567:5488): pid=11395 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=11395 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204683.568:5489): pid=11395 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=11395 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204683.569:5490): pid=11393 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=11395 suid=74 rport=33996 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204683.571:5491): pid=11393 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=11395 suid=74 rport=33996 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204684.103:5492): pid=11393 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=33996 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204684.103:5493): pid=11393 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=4096 fp=8b:56:b0:3f:c8:ad:38:a6:94:f4:a7:26:83:75:cc:85 rport=33996 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_ACCT msg=audit(1389204684.109:5494): pid=11393 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204684.110:5495): pid=11393 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=11395 suid=74 rport=33996 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204684.111:5496): pid=11393 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1389204684.113:5497): pid=11393 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=LOGIN msg=audit(1389204684.113:5498): login pid=11393 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=212 >type=USER_ROLE_CHANGE msg=audit(1389204684.203:5499): pid=11393 uid=0 auid=0 ses=212 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204684.224:5500): pid=11393 uid=0 auid=0 ses=212 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1389204684.228:5501): pid=11393 uid=0 auid=0 ses=212 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204684.230:5502): pid=11393 uid=0 auid=0 ses=212 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204684.231:5503): pid=11578 uid=0 auid=0 ses=212 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=11578 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204684.231:5504): pid=11578 uid=0 auid=0 ses=212 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=11578 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRED_REFR msg=audit(1389204684.234:5505): pid=11578 uid=0 auid=0 ses=212 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204684.262:5506): pid=11393 uid=0 auid=0 ses=212 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRED_DISP msg=audit(1389204684.264:5507): pid=11393 uid=0 auid=0 ses=212 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204684.266:5508): pid=11393 uid=0 auid=0 ses=212 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1389204684.267:5509): pid=11393 uid=0 auid=0 ses=212 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204684.267:5510): pid=11393 uid=0 auid=0 ses=212 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=11393 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204684.267:5511): pid=11393 uid=0 auid=0 ses=212 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=11393 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204684.267:5512): pid=11393 uid=0 auid=0 ses=212 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=11393 suid=0 rport=33996 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204687.280:5513): pid=13728 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=13728 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204687.281:5514): pid=13728 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=13728 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204687.285:5515): pid=13725 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=13728 suid=74 rport=33997 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204687.286:5516): pid=13725 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=13728 suid=74 rport=33997 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204687.816:5517): pid=13725 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=33997 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204687.816:5518): pid=13725 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=4096 fp=8b:56:b0:3f:c8:ad:38:a6:94:f4:a7:26:83:75:cc:85 rport=33997 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_ACCT msg=audit(1389204687.821:5519): pid=13725 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204687.822:5520): pid=13725 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=13728 suid=74 rport=33997 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204687.823:5521): pid=13725 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1389204687.825:5522): pid=13725 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=LOGIN msg=audit(1389204687.825:5523): login pid=13725 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=213 >type=USER_ROLE_CHANGE msg=audit(1389204687.873:5524): pid=13725 uid=0 auid=0 ses=213 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204687.893:5525): pid=13725 uid=0 auid=0 ses=213 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1389204687.898:5526): pid=13725 uid=0 auid=0 ses=213 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204687.900:5527): pid=13725 uid=0 auid=0 ses=213 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204687.901:5528): pid=14104 uid=0 auid=0 ses=213 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=14104 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204687.902:5529): pid=14104 uid=0 auid=0 ses=213 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=14104 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRED_REFR msg=audit(1389204687.904:5530): pid=14104 uid=0 auid=0 ses=213 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204687.926:5531): pid=13725 uid=0 auid=0 ses=213 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRED_DISP msg=audit(1389204687.928:5532): pid=13725 uid=0 auid=0 ses=213 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204687.930:5533): pid=13725 uid=0 auid=0 ses=213 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1389204687.933:5534): pid=13725 uid=0 auid=0 ses=213 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204687.933:5535): pid=13725 uid=0 auid=0 ses=213 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=13725 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204687.933:5536): pid=13725 uid=0 auid=0 ses=213 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=13725 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204687.933:5537): pid=13725 uid=0 auid=0 ses=213 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=13725 suid=0 rport=33997 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204690.944:5538): pid=15460 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=15460 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204690.944:5539): pid=15460 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=15460 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204690.946:5540): pid=15459 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=15460 suid=74 rport=33998 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204690.947:5541): pid=15459 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=15460 suid=74 rport=33998 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204691.489:5542): pid=15459 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=33998 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204691.489:5543): pid=15459 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=4096 fp=8b:56:b0:3f:c8:ad:38:a6:94:f4:a7:26:83:75:cc:85 rport=33998 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_ACCT msg=audit(1389204691.496:5544): pid=15459 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204691.498:5545): pid=15459 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=15460 suid=74 rport=33998 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204691.498:5546): pid=15459 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1389204691.500:5547): pid=15459 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=LOGIN msg=audit(1389204691.500:5548): login pid=15459 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=214 >type=USER_ROLE_CHANGE msg=audit(1389204691.581:5549): pid=15459 uid=0 auid=0 ses=214 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204691.600:5550): pid=15459 uid=0 auid=0 ses=214 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1389204691.605:5551): pid=15459 uid=0 auid=0 ses=214 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204691.608:5552): pid=15459 uid=0 auid=0 ses=214 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204691.609:5553): pid=15462 uid=0 auid=0 ses=214 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=15462 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204691.609:5554): pid=15462 uid=0 auid=0 ses=214 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=15462 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRED_REFR msg=audit(1389204691.611:5555): pid=15462 uid=0 auid=0 ses=214 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204691.638:5556): pid=15459 uid=0 auid=0 ses=214 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRED_DISP msg=audit(1389204691.640:5557): pid=15459 uid=0 auid=0 ses=214 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204691.642:5558): pid=15459 uid=0 auid=0 ses=214 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1389204691.644:5559): pid=15459 uid=0 auid=0 ses=214 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204691.644:5560): pid=15459 uid=0 auid=0 ses=214 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=15459 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204691.644:5561): pid=15459 uid=0 auid=0 ses=214 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=15459 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204691.644:5562): pid=15459 uid=0 auid=0 ses=214 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=15459 suid=0 rport=33998 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204694.655:5563): pid=15471 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=15471 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204694.656:5564): pid=15471 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=15471 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204694.658:5565): pid=15470 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=15471 suid=74 rport=33999 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204694.659:5566): pid=15470 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=15471 suid=74 rport=33999 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204695.176:5567): pid=15470 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=33999 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204695.176:5568): pid=15470 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=4096 fp=8b:56:b0:3f:c8:ad:38:a6:94:f4:a7:26:83:75:cc:85 rport=33999 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_ACCT msg=audit(1389204695.182:5569): pid=15470 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204695.183:5570): pid=15470 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=15471 suid=74 rport=33999 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204695.183:5571): pid=15470 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1389204695.187:5572): pid=15470 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=LOGIN msg=audit(1389204695.187:5573): login pid=15470 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=215 >type=USER_ROLE_CHANGE msg=audit(1389204695.264:5574): pid=15470 uid=0 auid=0 ses=215 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204695.285:5575): pid=15470 uid=0 auid=0 ses=215 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1389204695.290:5576): pid=15470 uid=0 auid=0 ses=215 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204695.291:5577): pid=15470 uid=0 auid=0 ses=215 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204695.293:5578): pid=15473 uid=0 auid=0 ses=215 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=15473 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204695.293:5579): pid=15473 uid=0 auid=0 ses=215 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=15473 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRED_REFR msg=audit(1389204695.295:5580): pid=15473 uid=0 auid=0 ses=215 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204695.322:5581): pid=15470 uid=0 auid=0 ses=215 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRED_DISP msg=audit(1389204695.323:5582): pid=15470 uid=0 auid=0 ses=215 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204695.325:5583): pid=15470 uid=0 auid=0 ses=215 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1389204695.327:5584): pid=15470 uid=0 auid=0 ses=215 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204695.327:5585): pid=15470 uid=0 auid=0 ses=215 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=15470 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204695.327:5586): pid=15470 uid=0 auid=0 ses=215 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=15470 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204695.327:5587): pid=15470 uid=0 auid=0 ses=215 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=15470 suid=0 rport=33999 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204698.340:5588): pid=15482 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=15482 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204698.341:5589): pid=15482 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=15482 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204698.344:5590): pid=15481 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=15482 suid=74 rport=34000 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204698.344:5591): pid=15481 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=15482 suid=74 rport=34000 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204698.875:5592): pid=15481 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=34000 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204698.875:5593): pid=15481 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=4096 fp=8b:56:b0:3f:c8:ad:38:a6:94:f4:a7:26:83:75:cc:85 rport=34000 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_ACCT msg=audit(1389204698.884:5594): pid=15481 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204698.884:5595): pid=15481 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=15482 suid=74 rport=34000 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204698.886:5596): pid=15481 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1389204698.888:5597): pid=15481 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=LOGIN msg=audit(1389204698.888:5598): login pid=15481 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=216 >type=USER_ROLE_CHANGE msg=audit(1389204698.977:5599): pid=15481 uid=0 auid=0 ses=216 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204698.998:5600): pid=15481 uid=0 auid=0 ses=216 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1389204699.004:5601): pid=15481 uid=0 auid=0 ses=216 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204699.006:5602): pid=15481 uid=0 auid=0 ses=216 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204699.008:5603): pid=15484 uid=0 auid=0 ses=216 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=15484 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204699.008:5604): pid=15484 uid=0 auid=0 ses=216 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=15484 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRED_REFR msg=audit(1389204699.010:5605): pid=15484 uid=0 auid=0 ses=216 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204699.039:5606): pid=15481 uid=0 auid=0 ses=216 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRED_DISP msg=audit(1389204699.042:5607): pid=15481 uid=0 auid=0 ses=216 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204699.044:5608): pid=15481 uid=0 auid=0 ses=216 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1389204699.047:5609): pid=15481 uid=0 auid=0 ses=216 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204699.047:5610): pid=15481 uid=0 auid=0 ses=216 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=15481 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204699.047:5611): pid=15481 uid=0 auid=0 ses=216 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=15481 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204699.047:5612): pid=15481 uid=0 auid=0 ses=216 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=15481 suid=0 rport=34000 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204702.058:5613): pid=15493 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=15493 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204702.059:5614): pid=15493 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=15493 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204702.061:5615): pid=15492 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=15493 suid=74 rport=34001 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204702.061:5616): pid=15492 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=15493 suid=74 rport=34001 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204702.582:5617): pid=15492 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=34001 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204702.582:5618): pid=15492 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=4096 fp=8b:56:b0:3f:c8:ad:38:a6:94:f4:a7:26:83:75:cc:85 rport=34001 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_ACCT msg=audit(1389204702.589:5619): pid=15492 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204702.589:5620): pid=15492 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=15493 suid=74 rport=34001 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204702.591:5621): pid=15492 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1389204702.593:5622): pid=15492 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=LOGIN msg=audit(1389204702.593:5623): login pid=15492 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=217 >type=USER_ROLE_CHANGE msg=audit(1389204702.677:5624): pid=15492 uid=0 auid=0 ses=217 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204702.700:5625): pid=15492 uid=0 auid=0 ses=217 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1389204702.705:5626): pid=15492 uid=0 auid=0 ses=217 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204702.707:5627): pid=15492 uid=0 auid=0 ses=217 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204702.708:5628): pid=15495 uid=0 auid=0 ses=217 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=15495 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204702.708:5629): pid=15495 uid=0 auid=0 ses=217 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=15495 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRED_REFR msg=audit(1389204702.711:5630): pid=15495 uid=0 auid=0 ses=217 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204702.739:5631): pid=15492 uid=0 auid=0 ses=217 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRED_DISP msg=audit(1389204702.741:5632): pid=15492 uid=0 auid=0 ses=217 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204702.743:5633): pid=15492 uid=0 auid=0 ses=217 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1389204702.745:5634): pid=15492 uid=0 auid=0 ses=217 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204702.746:5635): pid=15492 uid=0 auid=0 ses=217 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=15492 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204702.746:5636): pid=15492 uid=0 auid=0 ses=217 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=15492 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204702.746:5637): pid=15492 uid=0 auid=0 ses=217 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=15492 suid=0 rport=34001 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204705.755:5638): pid=15504 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=15504 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204705.756:5639): pid=15504 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=15504 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204705.759:5640): pid=15503 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=15504 suid=74 rport=34002 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204705.759:5641): pid=15503 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=15504 suid=74 rport=34002 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204706.279:5642): pid=15503 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=34002 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204706.279:5643): pid=15503 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=4096 fp=8b:56:b0:3f:c8:ad:38:a6:94:f4:a7:26:83:75:cc:85 rport=34002 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_ACCT msg=audit(1389204706.285:5644): pid=15503 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204706.287:5645): pid=15503 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=15504 suid=74 rport=34002 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204706.288:5646): pid=15503 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1389204706.290:5647): pid=15503 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=LOGIN msg=audit(1389204706.290:5648): login pid=15503 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=218 >type=USER_ROLE_CHANGE msg=audit(1389204706.372:5649): pid=15503 uid=0 auid=0 ses=218 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204706.393:5650): pid=15503 uid=0 auid=0 ses=218 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1389204706.398:5651): pid=15503 uid=0 auid=0 ses=218 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204706.400:5652): pid=15503 uid=0 auid=0 ses=218 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204706.401:5653): pid=15506 uid=0 auid=0 ses=218 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=15506 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204706.401:5654): pid=15506 uid=0 auid=0 ses=218 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=15506 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRED_REFR msg=audit(1389204706.403:5655): pid=15506 uid=0 auid=0 ses=218 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204706.430:5656): pid=15503 uid=0 auid=0 ses=218 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRED_DISP msg=audit(1389204706.432:5657): pid=15503 uid=0 auid=0 ses=218 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204706.434:5658): pid=15503 uid=0 auid=0 ses=218 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1389204706.437:5659): pid=15503 uid=0 auid=0 ses=218 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204706.437:5660): pid=15503 uid=0 auid=0 ses=218 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=15503 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204706.437:5661): pid=15503 uid=0 auid=0 ses=218 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=15503 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204706.437:5662): pid=15503 uid=0 auid=0 ses=218 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=15503 suid=0 rport=34002 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204709.447:5663): pid=15532 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=15532 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204709.448:5664): pid=15532 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=15532 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204709.451:5665): pid=15531 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=15532 suid=74 rport=34003 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204709.451:5666): pid=15531 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=15532 suid=74 rport=34003 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204709.979:5667): pid=15531 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=34003 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204709.979:5668): pid=15531 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=4096 fp=8b:56:b0:3f:c8:ad:38:a6:94:f4:a7:26:83:75:cc:85 rport=34003 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_ACCT msg=audit(1389204709.985:5669): pid=15531 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204709.986:5670): pid=15531 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=15532 suid=74 rport=34003 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204709.987:5671): pid=15531 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1389204709.990:5672): pid=15531 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=LOGIN msg=audit(1389204709.990:5673): login pid=15531 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=219 >type=USER_ROLE_CHANGE msg=audit(1389204710.073:5674): pid=15531 uid=0 auid=0 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204710.097:5675): pid=15531 uid=0 auid=0 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1389204710.102:5676): pid=15531 uid=0 auid=0 ses=219 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204710.104:5677): pid=15531 uid=0 auid=0 ses=219 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204710.106:5678): pid=15578 uid=0 auid=0 ses=219 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=15578 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204710.106:5679): pid=15578 uid=0 auid=0 ses=219 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=15578 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRED_REFR msg=audit(1389204710.108:5680): pid=15578 uid=0 auid=0 ses=219 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204710.141:5681): pid=15531 uid=0 auid=0 ses=219 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRED_DISP msg=audit(1389204710.143:5682): pid=15531 uid=0 auid=0 ses=219 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204710.146:5683): pid=15531 uid=0 auid=0 ses=219 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1389204710.148:5684): pid=15531 uid=0 auid=0 ses=219 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204710.148:5685): pid=15531 uid=0 auid=0 ses=219 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=15531 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204710.148:5686): pid=15531 uid=0 auid=0 ses=219 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=15531 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204710.148:5687): pid=15531 uid=0 auid=0 ses=219 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=15531 suid=0 rport=34003 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204713.151:5688): pid=19643 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=19643 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204713.151:5689): pid=19643 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=19643 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204713.153:5690): pid=19642 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=19643 suid=74 rport=34004 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204713.153:5691): pid=19642 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=19643 suid=74 rport=34004 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204713.680:5692): pid=19642 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=34004 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204713.680:5693): pid=19642 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=4096 fp=8b:56:b0:3f:c8:ad:38:a6:94:f4:a7:26:83:75:cc:85 rport=34004 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_ACCT msg=audit(1389204713.685:5694): pid=19642 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204713.686:5695): pid=19642 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=19643 suid=74 rport=34004 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204713.687:5696): pid=19642 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1389204713.689:5697): pid=19642 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=LOGIN msg=audit(1389204713.689:5698): login pid=19642 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=220 >type=USER_ROLE_CHANGE msg=audit(1389204713.749:5699): pid=19642 uid=0 auid=0 ses=220 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204713.771:5700): pid=19642 uid=0 auid=0 ses=220 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1389204713.778:5701): pid=19642 uid=0 auid=0 ses=220 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204713.781:5702): pid=19642 uid=0 auid=0 ses=220 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204713.782:5703): pid=19645 uid=0 auid=0 ses=220 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=19645 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204713.782:5704): pid=19645 uid=0 auid=0 ses=220 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=19645 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRED_REFR msg=audit(1389204713.785:5705): pid=19645 uid=0 auid=0 ses=220 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204713.816:5706): pid=19642 uid=0 auid=0 ses=220 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRED_DISP msg=audit(1389204713.818:5707): pid=19642 uid=0 auid=0 ses=220 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204713.821:5708): pid=19642 uid=0 auid=0 ses=220 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1389204713.823:5709): pid=19642 uid=0 auid=0 ses=220 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204713.823:5710): pid=19642 uid=0 auid=0 ses=220 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=19642 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204713.823:5711): pid=19642 uid=0 auid=0 ses=220 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=19642 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204713.823:5712): pid=19642 uid=0 auid=0 ses=220 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=19642 suid=0 rport=34004 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204716.824:5713): pid=19655 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=19655 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204716.825:5714): pid=19655 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=19655 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204716.826:5715): pid=19654 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=19655 suid=74 rport=34005 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204716.827:5716): pid=19654 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=19655 suid=74 rport=34005 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204717.354:5717): pid=19654 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=34005 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204717.354:5718): pid=19654 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=4096 fp=8b:56:b0:3f:c8:ad:38:a6:94:f4:a7:26:83:75:cc:85 rport=34005 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_ACCT msg=audit(1389204717.359:5719): pid=19654 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204717.361:5720): pid=19654 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=19655 suid=74 rport=34005 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204717.361:5721): pid=19654 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1389204717.363:5722): pid=19654 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=LOGIN msg=audit(1389204717.363:5723): login pid=19654 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=221 >type=USER_ROLE_CHANGE msg=audit(1389204717.407:5724): pid=19654 uid=0 auid=0 ses=221 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204717.422:5725): pid=19654 uid=0 auid=0 ses=221 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1389204717.427:5726): pid=19654 uid=0 auid=0 ses=221 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204717.429:5727): pid=19654 uid=0 auid=0 ses=221 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204717.430:5728): pid=19657 uid=0 auid=0 ses=221 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=19657 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204717.430:5729): pid=19657 uid=0 auid=0 ses=221 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=19657 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRED_REFR msg=audit(1389204717.432:5730): pid=19657 uid=0 auid=0 ses=221 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204717.452:5731): pid=19654 uid=0 auid=0 ses=221 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRED_DISP msg=audit(1389204717.454:5732): pid=19654 uid=0 auid=0 ses=221 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204717.456:5733): pid=19654 uid=0 auid=0 ses=221 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1389204717.459:5734): pid=19654 uid=0 auid=0 ses=221 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204717.459:5735): pid=19654 uid=0 auid=0 ses=221 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=19654 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204717.459:5736): pid=19654 uid=0 auid=0 ses=221 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=19654 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204717.459:5737): pid=19654 uid=0 auid=0 ses=221 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=19654 suid=0 rport=34005 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=NETFILTER_CFG msg=audit(1389204719.085:5738): table=filter family=2 entries=28 >type=SYSCALL msg=audit(1389204719.085:5738): arch=c000003e syscall=54 success=yes exit=0 a0=3 a1=0 a2=40 a3=2447950 items=0 ppid=8348 pid=19671 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=138 tty=(none) comm="iptables" exe="/usr/sbin/xtables-multi" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null) >type=SERVICE_START msg=audit(1389204719.133:5739): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="libvirtd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=NETFILTER_CFG msg=audit(1389204719.783:5740): table=filter family=10 entries=0 >type=SYSCALL msg=audit(1389204719.783:5740): arch=c000003e syscall=313 success=yes exit=0 a0=0 a1=41a396 a2=0 a3=0 items=0 ppid=19742 pid=19743 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="modprobe" exe="/usr/bin/kmod" subj=system_u:system_r:insmod_t:s0 key=(null) >type=USER_CHAUTHTOK msg=audit(1389204719.843:5741): pid=19747 uid=0 auid=0 ses=138 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=adding user to group acct="ceilometer" exe="/usr/sbin/usermod" hostname=? addr=? terminal=? res=success' >type=USER_CHAUTHTOK msg=audit(1389204719.845:5742): pid=19747 uid=0 auid=0 ses=138 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=adding user to shadow group acct="ceilometer" exe="/usr/sbin/usermod" hostname=? addr=? terminal=? res=success' >type=NETFILTER_CFG msg=audit(1389204720.424:5743): table=filter family=2 entries=0 >type=NETFILTER_CFG msg=audit(1389204720.424:5743): table=nat family=2 entries=0 >type=NETFILTER_CFG msg=audit(1389204720.424:5743): table=mangle family=2 entries=0 >type=NETFILTER_CFG msg=audit(1389204720.424:5743): table=filter family=10 entries=0 >type=SYSCALL msg=audit(1389204720.424:5743): arch=c000003e syscall=56 success=yes exit=19799 a0=6c020011 a1=7f652c1dc710 a2=2000000 a3=7f6535b21060 items=0 ppid=1 pid=19721 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="libvirtd" exe="/usr/sbin/libvirtd" subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 key=(null) >type=CRYPTO_KEY_USER msg=audit(1389204720.484:5744): pid=19807 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=19807 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204720.484:5745): pid=19807 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=19807 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204720.486:5746): pid=19806 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=19807 suid=74 rport=34006 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204720.486:5747): pid=19806 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=19807 suid=74 rport=34006 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=NETFILTER_CFG msg=audit(1389204720.511:5748): table=filter family=2 entries=29 >type=SYSCALL msg=audit(1389204720.511:5748): arch=c000003e syscall=54 success=yes exit=0 a0=3 a1=0 a2=40 a3=13c03f0 items=0 ppid=19703 pid=19811 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0-s0:c0.c1023 key=(null) >type=NETFILTER_CFG msg=audit(1389204720.531:5749): table=filter family=2 entries=30 >type=SYSCALL msg=audit(1389204720.531:5749): arch=c000003e syscall=54 success=yes exit=0 a0=3 a1=0 a2=40 a3=14955e0 items=0 ppid=19703 pid=19812 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0-s0:c0.c1023 key=(null) >type=NETFILTER_CFG msg=audit(1389204720.539:5750): table=mangle family=2 entries=9 >type=SYSCALL msg=audit(1389204720.539:5750): arch=c000003e syscall=54 success=yes exit=0 a0=3 a1=0 a2=40 a3=77e3c0 items=0 ppid=19703 pid=19813 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0-s0:c0.c1023 key=(null) >type=NETFILTER_CFG msg=audit(1389204720.554:5751): table=filter family=2 entries=31 >type=SYSCALL msg=audit(1389204720.554:5751): arch=c000003e syscall=54 success=yes exit=0 a0=3 a1=0 a2=40 a3=25dd7a0 items=0 ppid=19703 pid=19822 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0-s0:c0.c1023 key=(null) >type=NETFILTER_CFG msg=audit(1389204720.556:5752): table=filter family=2 entries=32 >type=SYSCALL msg=audit(1389204720.556:5752): arch=c000003e syscall=54 success=yes exit=0 a0=3 a1=0 a2=40 a3=1b8f990 items=0 ppid=19703 pid=19823 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0-s0:c0.c1023 key=(null) >type=NETFILTER_CFG msg=audit(1389204720.559:5753): table=filter family=2 entries=33 >type=SYSCALL msg=audit(1389204720.559:5753): arch=c000003e syscall=54 success=yes exit=0 a0=3 a1=0 a2=40 a3=1f77010 items=0 ppid=19703 pid=19824 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0-s0:c0.c1023 key=(null) >type=NETFILTER_CFG msg=audit(1389204720.560:5754): table=filter family=2 entries=34 >type=SYSCALL msg=audit(1389204720.560:5754): arch=c000003e syscall=54 success=yes exit=0 a0=3 a1=0 a2=40 a3=1a74180 items=0 ppid=19703 pid=19825 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0-s0:c0.c1023 key=(null) >type=NETFILTER_CFG msg=audit(1389204720.564:5755): table=filter family=2 entries=35 >type=SYSCALL msg=audit(1389204720.564:5755): arch=c000003e syscall=54 success=yes exit=0 a0=3 a1=0 a2=40 a3=a22e30 items=0 ppid=19703 pid=19826 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0-s0:c0.c1023 key=(null) >type=NETFILTER_CFG msg=audit(1389204720.566:5756): table=filter family=2 entries=36 >type=SYSCALL msg=audit(1389204720.566:5756): arch=c000003e syscall=54 success=yes exit=0 a0=3 a1=0 a2=40 a3=695fa0 items=0 ppid=19703 pid=19828 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0-s0:c0.c1023 key=(null) >type=NETFILTER_CFG msg=audit(1389204720.672:5757): table=filter family=2 entries=37 >type=SYSCALL msg=audit(1389204720.672:5757): arch=c000003e syscall=54 success=yes exit=0 a0=3 a1=0 a2=40 a3=18fbfe0 items=0 ppid=19703 pid=19829 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0-s0:c0.c1023 key=(null) >type=NETFILTER_CFG msg=audit(1389204720.803:5758): table=nat family=2 entries=23 >type=SYSCALL msg=audit(1389204720.803:5758): arch=c000003e syscall=54 success=yes exit=0 a0=3 a1=0 a2=40 a3=2030770 items=0 ppid=19703 pid=19832 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0-s0:c0.c1023 key=(null) >type=NETFILTER_CFG msg=audit(1389204720.815:5759): table=nat family=2 entries=24 >type=SYSCALL msg=audit(1389204720.815:5759): arch=c000003e syscall=54 success=yes exit=0 a0=3 a1=0 a2=40 a3=1d2fcf0 items=0 ppid=19703 pid=19835 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0-s0:c0.c1023 key=(null) >type=NETFILTER_CFG msg=audit(1389204720.817:5760): table=nat family=2 entries=25 >type=SYSCALL msg=audit(1389204720.817:5760): arch=c000003e syscall=54 success=yes exit=0 a0=3 a1=0 a2=40 a3=1a0ae80 items=0 ppid=19703 pid=19836 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0-s0:c0.c1023 key=(null) >type=NETFILTER_CFG msg=audit(1389204720.818:5761): table=nat family=2 entries=26 >type=SYSCALL msg=audit(1389204720.818:5761): arch=c000003e syscall=54 success=yes exit=0 a0=3 a1=0 a2=40 a3=dd5710 items=0 ppid=19703 pid=19837 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0-s0:c0.c1023 key=(null) >type=NETFILTER_CFG msg=audit(1389204720.819:5762): table=nat family=2 entries=27 >type=SYSCALL msg=audit(1389204720.819:5762): arch=c000003e syscall=54 success=yes exit=0 a0=3 a1=0 a2=40 a3=12a3880 items=0 ppid=19703 pid=19838 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0-s0:c0.c1023 key=(null) >type=USER_AUTH msg=audit(1389204721.672:5763): pid=19806 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=34006 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204721.672:5764): pid=19806 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=4096 fp=8b:56:b0:3f:c8:ad:38:a6:94:f4:a7:26:83:75:cc:85 rport=34006 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_ACCT msg=audit(1389204721.679:5765): pid=19806 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204721.680:5766): pid=19806 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=19807 suid=74 rport=34006 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204721.681:5767): pid=19806 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1389204721.684:5768): pid=19806 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=LOGIN msg=audit(1389204721.684:5769): login pid=19806 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=222 >type=USER_ROLE_CHANGE msg=audit(1389204721.782:5770): pid=19806 uid=0 auid=0 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204721.811:5771): pid=19806 uid=0 auid=0 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1389204721.817:5772): pid=19806 uid=0 auid=0 ses=222 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204721.819:5773): pid=19806 uid=0 auid=0 ses=222 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204721.821:5774): pid=19850 uid=0 auid=0 ses=222 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=19850 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204721.821:5775): pid=19850 uid=0 auid=0 ses=222 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=19850 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRED_REFR msg=audit(1389204721.823:5776): pid=19850 uid=0 auid=0 ses=222 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204721.854:5777): pid=19806 uid=0 auid=0 ses=222 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRED_DISP msg=audit(1389204721.856:5778): pid=19806 uid=0 auid=0 ses=222 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204721.858:5779): pid=19806 uid=0 auid=0 ses=222 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1389204721.860:5780): pid=19806 uid=0 auid=0 ses=222 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204721.860:5781): pid=19806 uid=0 auid=0 ses=222 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=19806 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204721.860:5782): pid=19806 uid=0 auid=0 ses=222 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=19806 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204721.860:5783): pid=19806 uid=0 auid=0 ses=222 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=19806 suid=0 rport=34006 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_CMD msg=audit(1389204723.254:5784): pid=19855 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D43204C414E473D4320766773202D2D6E6F68656164696E6773202D2D756E69743D67202D6F206E616D652C73697A652C667265652C6C765F636F756E742C75756964202D2D736570617261746F72203A202D2D6E6F7375666669782063696E6465722D766F6C756D6573 terminal=? res=success' >type=USER_START msg=audit(1389204723.255:5785): pid=19855 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1389204723.346:5786): pid=19855 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204724.865:5787): pid=19865 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=19865 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204724.866:5788): pid=19865 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=19865 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204724.867:5789): pid=19864 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=19865 suid=74 rport=34007 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204724.868:5790): pid=19864 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=19865 suid=74 rport=34007 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204725.739:5791): pid=19864 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=34007 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204725.739:5792): pid=19864 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=4096 fp=8b:56:b0:3f:c8:ad:38:a6:94:f4:a7:26:83:75:cc:85 rport=34007 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_ACCT msg=audit(1389204725.744:5793): pid=19864 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204725.745:5794): pid=19864 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=19865 suid=74 rport=34007 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204725.745:5795): pid=19864 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1389204725.748:5796): pid=19864 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=LOGIN msg=audit(1389204725.748:5797): login pid=19864 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=223 >type=USER_ROLE_CHANGE msg=audit(1389204725.792:5798): pid=19864 uid=0 auid=0 ses=223 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204725.808:5799): pid=19864 uid=0 auid=0 ses=223 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1389204725.813:5800): pid=19864 uid=0 auid=0 ses=223 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204725.814:5801): pid=19864 uid=0 auid=0 ses=223 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204725.816:5802): pid=19867 uid=0 auid=0 ses=223 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=19867 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204725.816:5803): pid=19867 uid=0 auid=0 ses=223 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=19867 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRED_REFR msg=audit(1389204725.818:5804): pid=19867 uid=0 auid=0 ses=223 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204725.840:5805): pid=19864 uid=0 auid=0 ses=223 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRED_DISP msg=audit(1389204725.842:5806): pid=19864 uid=0 auid=0 ses=223 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204725.844:5807): pid=19864 uid=0 auid=0 ses=223 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1389204725.846:5808): pid=19864 uid=0 auid=0 ses=223 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204725.846:5809): pid=19864 uid=0 auid=0 ses=223 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=19864 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204725.846:5810): pid=19864 uid=0 auid=0 ses=223 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=19864 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204725.846:5811): pid=19864 uid=0 auid=0 ses=223 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=19864 suid=0 rport=34007 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204728.863:5812): pid=19895 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=19895 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204728.863:5813): pid=19895 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=19895 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204728.866:5814): pid=19894 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=19895 suid=74 rport=34009 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204728.866:5815): pid=19894 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=19895 suid=74 rport=34009 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204729.401:5816): pid=19894 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=34009 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204729.401:5817): pid=19894 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=4096 fp=8b:56:b0:3f:c8:ad:38:a6:94:f4:a7:26:83:75:cc:85 rport=34009 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_ACCT msg=audit(1389204729.407:5818): pid=19894 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204729.408:5819): pid=19894 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=19895 suid=74 rport=34009 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204729.409:5820): pid=19894 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1389204729.411:5821): pid=19894 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=LOGIN msg=audit(1389204729.411:5822): login pid=19894 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=224 >type=USER_ROLE_CHANGE msg=audit(1389204729.501:5823): pid=19894 uid=0 auid=0 ses=224 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204729.563:5824): pid=19894 uid=0 auid=0 ses=224 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1389204729.569:5825): pid=19894 uid=0 auid=0 ses=224 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204729.572:5826): pid=19894 uid=0 auid=0 ses=224 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204729.574:5827): pid=19899 uid=0 auid=0 ses=224 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=19899 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204729.574:5828): pid=19899 uid=0 auid=0 ses=224 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=19899 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRED_REFR msg=audit(1389204729.577:5829): pid=19899 uid=0 auid=0 ses=224 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204729.609:5830): pid=19894 uid=0 auid=0 ses=224 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRED_DISP msg=audit(1389204729.611:5831): pid=19894 uid=0 auid=0 ses=224 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204729.613:5832): pid=19894 uid=0 auid=0 ses=224 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1389204729.615:5833): pid=19894 uid=0 auid=0 ses=224 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204729.615:5834): pid=19894 uid=0 auid=0 ses=224 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=19894 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204729.615:5835): pid=19894 uid=0 auid=0 ses=224 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=19894 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204729.615:5836): pid=19894 uid=0 auid=0 ses=224 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=19894 suid=0 rport=34009 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204732.625:5837): pid=19916 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=19916 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204732.625:5838): pid=19916 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=19916 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204732.627:5839): pid=19915 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=19916 suid=74 rport=34015 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204732.627:5840): pid=19915 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=19916 suid=74 rport=34015 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204733.232:5841): pid=19915 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=34015 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204733.232:5842): pid=19915 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=4096 fp=8b:56:b0:3f:c8:ad:38:a6:94:f4:a7:26:83:75:cc:85 rport=34015 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_ACCT msg=audit(1389204733.238:5843): pid=19915 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204733.239:5844): pid=19915 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=19916 suid=74 rport=34015 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204733.240:5845): pid=19915 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1389204733.242:5846): pid=19915 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=LOGIN msg=audit(1389204733.242:5847): login pid=19915 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=225 >type=USER_ROLE_CHANGE msg=audit(1389204733.295:5848): pid=19915 uid=0 auid=0 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204733.315:5849): pid=19915 uid=0 auid=0 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1389204733.320:5850): pid=19915 uid=0 auid=0 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204733.324:5851): pid=19915 uid=0 auid=0 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204733.325:5852): pid=19918 uid=0 auid=0 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=19918 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204733.325:5853): pid=19918 uid=0 auid=0 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=19918 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRED_REFR msg=audit(1389204733.328:5854): pid=19918 uid=0 auid=0 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204733.354:5855): pid=19915 uid=0 auid=0 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRED_DISP msg=audit(1389204733.357:5856): pid=19915 uid=0 auid=0 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204733.359:5857): pid=19915 uid=0 auid=0 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1389204733.361:5858): pid=19915 uid=0 auid=0 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204733.361:5859): pid=19915 uid=0 auid=0 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=19915 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204733.362:5860): pid=19915 uid=0 auid=0 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=19915 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204733.362:5861): pid=19915 uid=0 auid=0 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=19915 suid=0 rport=34015 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204736.363:5862): pid=19932 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=19932 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204736.363:5863): pid=19932 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=19932 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204736.365:5864): pid=19931 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=19932 suid=74 rport=34016 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204736.365:5865): pid=19931 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=19932 suid=74 rport=34016 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204736.884:5866): pid=19931 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=34016 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204736.884:5867): pid=19931 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=4096 fp=8b:56:b0:3f:c8:ad:38:a6:94:f4:a7:26:83:75:cc:85 rport=34016 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_ACCT msg=audit(1389204736.889:5868): pid=19931 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204736.890:5869): pid=19931 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=19932 suid=74 rport=34016 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204736.891:5870): pid=19931 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1389204736.893:5871): pid=19931 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=LOGIN msg=audit(1389204736.893:5872): login pid=19931 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=226 >type=USER_ROLE_CHANGE msg=audit(1389204736.938:5873): pid=19931 uid=0 auid=0 ses=226 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204736.956:5874): pid=19931 uid=0 auid=0 ses=226 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1389204736.960:5875): pid=19931 uid=0 auid=0 ses=226 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204736.962:5876): pid=19931 uid=0 auid=0 ses=226 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204736.963:5877): pid=19934 uid=0 auid=0 ses=226 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=19934 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204736.963:5878): pid=19934 uid=0 auid=0 ses=226 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=19934 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRED_REFR msg=audit(1389204736.966:5879): pid=19934 uid=0 auid=0 ses=226 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204736.987:5880): pid=19931 uid=0 auid=0 ses=226 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRED_DISP msg=audit(1389204736.989:5881): pid=19931 uid=0 auid=0 ses=226 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204736.991:5882): pid=19931 uid=0 auid=0 ses=226 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1389204736.993:5883): pid=19931 uid=0 auid=0 ses=226 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204736.993:5884): pid=19931 uid=0 auid=0 ses=226 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=19931 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204736.993:5885): pid=19931 uid=0 auid=0 ses=226 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=19931 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204736.993:5886): pid=19931 uid=0 auid=0 ses=226 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=19931 suid=0 rport=34016 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204740.011:5887): pid=19952 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=19952 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204740.011:5888): pid=19952 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=19952 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204740.014:5889): pid=19951 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=19952 suid=74 rport=34017 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204740.014:5890): pid=19951 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=19952 suid=74 rport=34017 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204740.541:5891): pid=19951 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=34017 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204740.541:5892): pid=19951 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=4096 fp=8b:56:b0:3f:c8:ad:38:a6:94:f4:a7:26:83:75:cc:85 rport=34017 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_ACCT msg=audit(1389204740.547:5893): pid=19951 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204740.548:5894): pid=19951 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=19952 suid=74 rport=34017 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204740.549:5895): pid=19951 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1389204740.551:5896): pid=19951 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=LOGIN msg=audit(1389204740.551:5897): login pid=19951 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=227 >type=USER_ROLE_CHANGE msg=audit(1389204740.637:5898): pid=19951 uid=0 auid=0 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204740.659:5899): pid=19951 uid=0 auid=0 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1389204740.663:5900): pid=19951 uid=0 auid=0 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204740.665:5901): pid=19951 uid=0 auid=0 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204740.667:5902): pid=19954 uid=0 auid=0 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=19954 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204740.667:5903): pid=19954 uid=0 auid=0 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=19954 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRED_REFR msg=audit(1389204740.669:5904): pid=19954 uid=0 auid=0 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204740.701:5905): pid=19951 uid=0 auid=0 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRED_DISP msg=audit(1389204740.703:5906): pid=19951 uid=0 auid=0 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204740.705:5907): pid=19951 uid=0 auid=0 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1389204740.707:5908): pid=19951 uid=0 auid=0 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204740.707:5909): pid=19951 uid=0 auid=0 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=19951 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204740.707:5910): pid=19951 uid=0 auid=0 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=19951 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204740.707:5911): pid=19951 uid=0 auid=0 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=19951 suid=0 rport=34017 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204743.720:5912): pid=19976 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=19976 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204743.720:5913): pid=19976 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=19976 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204743.723:5914): pid=19975 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=19976 suid=74 rport=34020 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204743.723:5915): pid=19975 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=19976 suid=74 rport=34020 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204744.252:5916): pid=19975 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=34020 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204744.253:5917): pid=19975 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=4096 fp=8b:56:b0:3f:c8:ad:38:a6:94:f4:a7:26:83:75:cc:85 rport=34020 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_ACCT msg=audit(1389204744.258:5918): pid=19975 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204744.259:5919): pid=19975 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=19976 suid=74 rport=34020 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204744.260:5920): pid=19975 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1389204744.263:5921): pid=19975 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=LOGIN msg=audit(1389204744.263:5922): login pid=19975 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=228 >type=USER_ROLE_CHANGE msg=audit(1389204744.349:5923): pid=19975 uid=0 auid=0 ses=228 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204744.370:5924): pid=19975 uid=0 auid=0 ses=228 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1389204744.375:5925): pid=19975 uid=0 auid=0 ses=228 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204744.377:5926): pid=19975 uid=0 auid=0 ses=228 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204744.378:5927): pid=19978 uid=0 auid=0 ses=228 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=19978 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204744.378:5928): pid=19978 uid=0 auid=0 ses=228 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=19978 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRED_REFR msg=audit(1389204744.380:5929): pid=19978 uid=0 auid=0 ses=228 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204744.407:5930): pid=19975 uid=0 auid=0 ses=228 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRED_DISP msg=audit(1389204744.409:5931): pid=19975 uid=0 auid=0 ses=228 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204744.411:5932): pid=19975 uid=0 auid=0 ses=228 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1389204744.413:5933): pid=19975 uid=0 auid=0 ses=228 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204744.413:5934): pid=19975 uid=0 auid=0 ses=228 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=19975 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204744.413:5935): pid=19975 uid=0 auid=0 ses=228 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=19975 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204744.413:5936): pid=19975 uid=0 auid=0 ses=228 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=19975 suid=0 rport=34020 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=SERVICE_START msg=audit(1389204746.920:5937): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="tuned" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204747.419:5938): pid=20058 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=20058 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204747.419:5939): pid=20058 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=20058 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204747.420:5940): pid=20057 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=20058 suid=74 rport=34022 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204747.420:5941): pid=20057 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=20058 suid=74 rport=34022 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204747.948:5942): pid=20057 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=34022 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204747.948:5943): pid=20057 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=4096 fp=8b:56:b0:3f:c8:ad:38:a6:94:f4:a7:26:83:75:cc:85 rport=34022 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_ACCT msg=audit(1389204747.954:5944): pid=20057 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204747.954:5945): pid=20057 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=20058 suid=74 rport=34022 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204747.955:5946): pid=20057 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1389204747.958:5947): pid=20057 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=LOGIN msg=audit(1389204747.958:5948): login pid=20057 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=229 >type=USER_ROLE_CHANGE msg=audit(1389204748.009:5949): pid=20057 uid=0 auid=0 ses=229 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204748.048:5950): pid=20057 uid=0 auid=0 ses=229 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1389204748.056:5951): pid=20057 uid=0 auid=0 ses=229 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204748.058:5952): pid=20057 uid=0 auid=0 ses=229 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204748.059:5953): pid=20066 uid=0 auid=0 ses=229 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=20066 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204748.059:5954): pid=20066 uid=0 auid=0 ses=229 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=20066 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRED_REFR msg=audit(1389204748.063:5955): pid=20066 uid=0 auid=0 ses=229 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204748.108:5956): pid=20057 uid=0 auid=0 ses=229 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRED_DISP msg=audit(1389204748.110:5957): pid=20057 uid=0 auid=0 ses=229 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204748.112:5958): pid=20057 uid=0 auid=0 ses=229 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1389204748.114:5959): pid=20057 uid=0 auid=0 ses=229 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204748.114:5960): pid=20057 uid=0 auid=0 ses=229 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=20057 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204748.114:5961): pid=20057 uid=0 auid=0 ses=229 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=20057 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204748.114:5962): pid=20057 uid=0 auid=0 ses=229 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=20057 suid=0 rport=34022 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=SERVICE_START msg=audit(1389204748.222:5963): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="openstack-nova-novncproxy" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1389204748.444:5964): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="openstack-nova-consoleauth" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1389204748.729:5965): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="openstack-nova-scheduler" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1389204749.078:5966): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="openstack-nova-conductor" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1389204749.497:5967): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="openstack-nova-compute" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1389204750.099:5968): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="openstack-ceilometer-compute" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204751.171:5969): pid=20394 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=20394 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204751.171:5970): pid=20394 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=20394 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204751.172:5971): pid=20393 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=20394 suid=74 rport=34023 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204751.172:5972): pid=20393 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=20394 suid=74 rport=34023 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204751.772:5973): pid=20393 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=34023 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204751.772:5974): pid=20393 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=4096 fp=8b:56:b0:3f:c8:ad:38:a6:94:f4:a7:26:83:75:cc:85 rport=34023 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_ACCT msg=audit(1389204751.780:5975): pid=20393 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204751.780:5976): pid=20393 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=20394 suid=74 rport=34023 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204751.782:5977): pid=20393 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1389204751.808:5978): pid=20393 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=LOGIN msg=audit(1389204751.808:5979): login pid=20393 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=230 >type=USER_ROLE_CHANGE msg=audit(1389204752.217:5980): pid=20393 uid=0 auid=0 ses=230 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204752.340:5981): pid=20393 uid=0 auid=0 ses=230 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1389204752.356:5982): pid=20393 uid=0 auid=0 ses=230 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204752.370:5983): pid=20393 uid=0 auid=0 ses=230 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204752.371:5984): pid=20399 uid=0 auid=0 ses=230 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=20399 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204752.371:5985): pid=20399 uid=0 auid=0 ses=230 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=20399 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRED_REFR msg=audit(1389204752.377:5986): pid=20399 uid=0 auid=0 ses=230 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204752.480:5987): pid=20393 uid=0 auid=0 ses=230 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRED_DISP msg=audit(1389204752.506:5988): pid=20393 uid=0 auid=0 ses=230 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204752.522:5989): pid=20393 uid=0 auid=0 ses=230 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1389204752.546:5990): pid=20393 uid=0 auid=0 ses=230 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204752.546:5991): pid=20393 uid=0 auid=0 ses=230 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=20393 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204752.546:5992): pid=20393 uid=0 auid=0 ses=230 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=20393 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204752.546:5993): pid=20393 uid=0 auid=0 ses=230 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=20393 suid=0 rport=34023 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204755.483:5994): pid=20438 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=20438 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204755.483:5995): pid=20438 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=20438 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204755.484:5996): pid=20437 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=20438 suid=74 rport=34041 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204755.485:5997): pid=20437 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=20438 suid=74 rport=34041 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204756.071:5998): pid=20437 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=34041 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204756.071:5999): pid=20437 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=4096 fp=8b:56:b0:3f:c8:ad:38:a6:94:f4:a7:26:83:75:cc:85 rport=34041 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_ACCT msg=audit(1389204756.108:6000): pid=20437 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204756.108:6001): pid=20437 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=20438 suid=74 rport=34041 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204756.110:6002): pid=20437 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1389204756.143:6003): pid=20437 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=LOGIN msg=audit(1389204756.143:6004): login pid=20437 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=231 >type=USER_ROLE_CHANGE msg=audit(1389204756.262:6005): pid=20437 uid=0 auid=0 ses=231 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204756.299:6006): pid=20437 uid=0 auid=0 ses=231 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1389204756.335:6007): pid=20437 uid=0 auid=0 ses=231 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204756.368:6008): pid=20437 uid=0 auid=0 ses=231 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204756.369:6009): pid=20440 uid=0 auid=0 ses=231 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=20440 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204756.369:6010): pid=20440 uid=0 auid=0 ses=231 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=20440 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRED_REFR msg=audit(1389204756.384:6011): pid=20440 uid=0 auid=0 ses=231 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204756.437:6012): pid=20437 uid=0 auid=0 ses=231 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRED_DISP msg=audit(1389204756.470:6013): pid=20437 uid=0 auid=0 ses=231 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204756.503:6014): pid=20437 uid=0 auid=0 ses=231 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1389204756.532:6015): pid=20437 uid=0 auid=0 ses=231 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204756.532:6016): pid=20437 uid=0 auid=0 ses=231 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=20437 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204756.532:6017): pid=20437 uid=0 auid=0 ses=231 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=20437 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204756.532:6018): pid=20437 uid=0 auid=0 ses=231 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=20437 suid=0 rport=34041 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=SERVICE_START msg=audit(1389204757.736:6019): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="openstack-nova-cert" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204759.423:6020): pid=20525 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=20525 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204759.423:6021): pid=20525 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=20525 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204759.424:6022): pid=20524 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=20525 suid=74 rport=34045 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204759.424:6023): pid=20524 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=20525 suid=74 rport=34045 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204759.957:6024): pid=20524 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=34045 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204759.957:6025): pid=20524 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=4096 fp=8b:56:b0:3f:c8:ad:38:a6:94:f4:a7:26:83:75:cc:85 rport=34045 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_ACCT msg=audit(1389204759.962:6026): pid=20524 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204759.962:6027): pid=20524 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=20525 suid=74 rport=34045 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204759.964:6028): pid=20524 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1389204759.966:6029): pid=20524 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=LOGIN msg=audit(1389204759.966:6030): login pid=20524 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=232 >type=USER_ROLE_CHANGE msg=audit(1389204760.020:6031): pid=20524 uid=0 auid=0 ses=232 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204760.080:6032): pid=20524 uid=0 auid=0 ses=232 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1389204760.086:6033): pid=20524 uid=0 auid=0 ses=232 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204760.088:6034): pid=20524 uid=0 auid=0 ses=232 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204760.089:6035): pid=20527 uid=0 auid=0 ses=232 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=20527 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204760.089:6036): pid=20527 uid=0 auid=0 ses=232 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=20527 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRED_REFR msg=audit(1389204760.092:6037): pid=20527 uid=0 auid=0 ses=232 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204760.125:6038): pid=20524 uid=0 auid=0 ses=232 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204760.127:6039): pid=20533 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=20533 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204760.127:6040): pid=20533 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=20533 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204760.128:6041): pid=20532 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=20533 suid=74 rport=34046 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204760.128:6042): pid=20532 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=20533 suid=74 rport=34046 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRED_DISP msg=audit(1389204760.133:6043): pid=20524 uid=0 auid=0 ses=232 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204760.137:6044): pid=20524 uid=0 auid=0 ses=232 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1389204760.139:6045): pid=20524 uid=0 auid=0 ses=232 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204760.139:6046): pid=20524 uid=0 auid=0 ses=232 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=20524 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204760.139:6047): pid=20524 uid=0 auid=0 ses=232 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=20524 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204760.139:6048): pid=20524 uid=0 auid=0 ses=232 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=20524 suid=0 rport=34045 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204760.665:6049): pid=20532 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=34046 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204760.665:6050): pid=20532 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=4096 fp=8b:56:b0:3f:c8:ad:38:a6:94:f4:a7:26:83:75:cc:85 rport=34046 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_ACCT msg=audit(1389204760.670:6051): pid=20532 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204760.671:6052): pid=20532 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=20533 suid=74 rport=34046 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204760.672:6053): pid=20532 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1389204760.675:6054): pid=20532 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=LOGIN msg=audit(1389204760.675:6055): login pid=20532 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=233 >type=USER_ROLE_CHANGE msg=audit(1389204760.718:6056): pid=20532 uid=0 auid=0 ses=233 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204760.733:6057): pid=20532 uid=0 auid=0 ses=233 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1389204760.737:6058): pid=20532 uid=0 auid=0 ses=233 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204760.739:6059): pid=20532 uid=0 auid=0 ses=233 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204760.741:6060): pid=20536 uid=0 auid=0 ses=233 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=20536 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204760.741:6061): pid=20536 uid=0 auid=0 ses=233 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=20536 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRED_REFR msg=audit(1389204760.743:6062): pid=20536 uid=0 auid=0 ses=233 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204760.778:6063): pid=20550 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=20550 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204760.779:6064): pid=20550 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=20550 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204760.779:6065): pid=20549 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=20550 suid=74 rport=34047 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204760.779:6066): pid=20549 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=20550 suid=74 rport=34047 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_END msg=audit(1389204760.784:6067): pid=20532 uid=0 auid=0 ses=233 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRED_DISP msg=audit(1389204760.789:6068): pid=20532 uid=0 auid=0 ses=233 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204760.814:6069): pid=20532 uid=0 auid=0 ses=233 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1389204760.847:6070): pid=20532 uid=0 auid=0 ses=233 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204760.847:6071): pid=20532 uid=0 auid=0 ses=233 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=20532 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204760.847:6072): pid=20532 uid=0 auid=0 ses=233 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=20532 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204760.847:6073): pid=20532 uid=0 auid=0 ses=233 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=20532 suid=0 rport=34046 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204761.408:6074): pid=20549 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=34047 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204761.408:6075): pid=20549 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=4096 fp=8b:56:b0:3f:c8:ad:38:a6:94:f4:a7:26:83:75:cc:85 rport=34047 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_ACCT msg=audit(1389204761.414:6076): pid=20549 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204761.414:6077): pid=20549 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=20550 suid=74 rport=34047 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204761.416:6078): pid=20549 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1389204761.418:6079): pid=20549 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=LOGIN msg=audit(1389204761.418:6080): login pid=20549 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=234 >type=USER_ROLE_CHANGE msg=audit(1389204761.473:6081): pid=20549 uid=0 auid=0 ses=234 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204761.491:6082): pid=20549 uid=0 auid=0 ses=234 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1389204761.497:6083): pid=20549 uid=0 auid=0 ses=234 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204761.499:6084): pid=20549 uid=0 auid=0 ses=234 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204761.500:6085): pid=20560 uid=0 auid=0 ses=234 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=20560 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204761.500:6086): pid=20560 uid=0 auid=0 ses=234 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=20560 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRED_REFR msg=audit(1389204761.503:6087): pid=20560 uid=0 auid=0 ses=234 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204761.528:6088): pid=20549 uid=0 auid=0 ses=234 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRED_DISP msg=audit(1389204761.530:6089): pid=20549 uid=0 auid=0 ses=234 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204761.531:6090): pid=20549 uid=0 auid=0 ses=234 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1389204761.533:6091): pid=20549 uid=0 auid=0 ses=234 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204761.533:6092): pid=20549 uid=0 auid=0 ses=234 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=20549 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204761.534:6093): pid=20549 uid=0 auid=0 ses=234 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=20549 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204761.534:6094): pid=20549 uid=0 auid=0 ses=234 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=20549 suid=0 rport=34047 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=SERVICE_START msg=audit(1389204763.085:6095): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="polkit" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204764.543:6096): pid=20601 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=20601 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204764.543:6097): pid=20601 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=20601 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204764.544:6098): pid=20600 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=20601 suid=74 rport=34057 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204764.544:6099): pid=20600 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=20601 suid=74 rport=34057 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204765.063:6100): pid=20600 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=34057 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204765.063:6101): pid=20600 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=4096 fp=8b:56:b0:3f:c8:ad:38:a6:94:f4:a7:26:83:75:cc:85 rport=34057 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_ACCT msg=audit(1389204765.068:6102): pid=20600 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204765.068:6103): pid=20600 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=20601 suid=74 rport=34057 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204765.070:6104): pid=20600 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1389204765.072:6105): pid=20600 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=LOGIN msg=audit(1389204765.072:6106): login pid=20600 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=235 >type=USER_ROLE_CHANGE msg=audit(1389204765.126:6107): pid=20600 uid=0 auid=0 ses=235 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204765.148:6108): pid=20600 uid=0 auid=0 ses=235 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1389204765.152:6109): pid=20600 uid=0 auid=0 ses=235 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204765.154:6110): pid=20600 uid=0 auid=0 ses=235 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204765.156:6111): pid=20603 uid=0 auid=0 ses=235 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=20603 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204765.156:6112): pid=20603 uid=0 auid=0 ses=235 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=20603 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRED_REFR msg=audit(1389204765.158:6113): pid=20603 uid=0 auid=0 ses=235 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204765.181:6114): pid=20600 uid=0 auid=0 ses=235 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRED_DISP msg=audit(1389204765.183:6115): pid=20600 uid=0 auid=0 ses=235 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204765.185:6116): pid=20600 uid=0 auid=0 ses=235 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1389204765.187:6117): pid=20600 uid=0 auid=0 ses=235 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204765.187:6118): pid=20600 uid=0 auid=0 ses=235 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=20600 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204765.187:6119): pid=20600 uid=0 auid=0 ses=235 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=20600 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204765.187:6120): pid=20600 uid=0 auid=0 ses=235 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=20600 suid=0 rport=34057 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204768.195:6121): pid=20612 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=20612 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204768.195:6122): pid=20612 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=20612 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204768.196:6123): pid=20611 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=20612 suid=74 rport=34068 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204768.196:6124): pid=20611 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=20612 suid=74 rport=34068 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204768.731:6125): pid=20611 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=34068 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204768.731:6126): pid=20611 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=4096 fp=8b:56:b0:3f:c8:ad:38:a6:94:f4:a7:26:83:75:cc:85 rport=34068 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_ACCT msg=audit(1389204768.736:6127): pid=20611 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204768.736:6128): pid=20611 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=20612 suid=74 rport=34068 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204768.738:6129): pid=20611 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1389204768.740:6130): pid=20611 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=LOGIN msg=audit(1389204768.740:6131): login pid=20611 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=236 >type=USER_ROLE_CHANGE msg=audit(1389204768.785:6132): pid=20611 uid=0 auid=0 ses=236 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204768.802:6133): pid=20611 uid=0 auid=0 ses=236 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1389204768.806:6134): pid=20611 uid=0 auid=0 ses=236 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204768.808:6135): pid=20611 uid=0 auid=0 ses=236 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204768.809:6136): pid=20614 uid=0 auid=0 ses=236 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=20614 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204768.809:6137): pid=20614 uid=0 auid=0 ses=236 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=20614 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRED_REFR msg=audit(1389204768.811:6138): pid=20614 uid=0 auid=0 ses=236 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204768.834:6139): pid=20611 uid=0 auid=0 ses=236 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRED_DISP msg=audit(1389204768.836:6140): pid=20611 uid=0 auid=0 ses=236 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204768.838:6141): pid=20611 uid=0 auid=0 ses=236 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1389204768.840:6142): pid=20611 uid=0 auid=0 ses=236 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204768.840:6143): pid=20611 uid=0 auid=0 ses=236 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=20611 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204768.840:6144): pid=20611 uid=0 auid=0 ses=236 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=20611 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204768.841:6145): pid=20611 uid=0 auid=0 ses=236 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=20611 suid=0 rport=34068 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204771.856:6146): pid=20623 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=20623 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204771.856:6147): pid=20623 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=20623 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204771.857:6148): pid=20622 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=20623 suid=74 rport=34071 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204771.857:6149): pid=20622 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=20623 suid=74 rport=34071 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204772.397:6150): pid=20622 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=34071 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204772.397:6151): pid=20622 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=4096 fp=8b:56:b0:3f:c8:ad:38:a6:94:f4:a7:26:83:75:cc:85 rport=34071 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_ACCT msg=audit(1389204772.403:6152): pid=20622 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204772.403:6153): pid=20622 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=20623 suid=74 rport=34071 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204772.405:6154): pid=20622 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1389204772.407:6155): pid=20622 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=LOGIN msg=audit(1389204772.407:6156): login pid=20622 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=237 >type=USER_ROLE_CHANGE msg=audit(1389204772.450:6157): pid=20622 uid=0 auid=0 ses=237 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204772.467:6158): pid=20622 uid=0 auid=0 ses=237 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1389204772.471:6159): pid=20622 uid=0 auid=0 ses=237 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204772.473:6160): pid=20622 uid=0 auid=0 ses=237 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204772.475:6161): pid=20625 uid=0 auid=0 ses=237 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=20625 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204772.475:6162): pid=20625 uid=0 auid=0 ses=237 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=20625 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRED_REFR msg=audit(1389204772.477:6163): pid=20625 uid=0 auid=0 ses=237 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204772.501:6164): pid=20622 uid=0 auid=0 ses=237 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRED_DISP msg=audit(1389204772.503:6165): pid=20622 uid=0 auid=0 ses=237 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204772.506:6166): pid=20622 uid=0 auid=0 ses=237 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1389204772.508:6167): pid=20622 uid=0 auid=0 ses=237 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204772.508:6168): pid=20622 uid=0 auid=0 ses=237 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=20622 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204772.508:6169): pid=20622 uid=0 auid=0 ses=237 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=20622 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204772.508:6170): pid=20622 uid=0 auid=0 ses=237 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=20622 suid=0 rport=34071 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204775.517:6171): pid=20706 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=20706 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204775.517:6172): pid=20706 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=20706 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204775.518:6173): pid=20703 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=20706 suid=74 rport=34079 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204775.518:6174): pid=20703 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=20706 suid=74 rport=34079 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=NETFILTER_CFG msg=audit(1389204775.641:6175): table=filter family=2 entries=0 >type=NETFILTER_CFG msg=audit(1389204775.641:6175): table=nat family=2 entries=0 >type=NETFILTER_CFG msg=audit(1389204775.641:6175): table=mangle family=2 entries=0 >type=NETFILTER_CFG msg=audit(1389204775.641:6175): table=filter family=10 entries=0 >type=SYSCALL msg=audit(1389204775.641:6175): arch=c000003e syscall=272 success=yes exit=0 a0=40000000 a1=c0 a2=0 a3=7fff5aa685a0 items=0 ppid=20769 pid=20776 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=233 tty=(none) comm="ip" exe="/usr/sbin/ip" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null) >type=NETFILTER_CFG msg=audit(1389204775.660:6176): table=filter family=2 entries=0 >type=NETFILTER_CFG msg=audit(1389204775.660:6176): table=nat family=2 entries=0 >type=NETFILTER_CFG msg=audit(1389204775.660:6176): table=mangle family=2 entries=0 >type=NETFILTER_CFG msg=audit(1389204775.660:6176): table=filter family=10 entries=0 >type=SYSCALL msg=audit(1389204775.660:6176): arch=c000003e syscall=272 success=yes exit=0 a0=40000000 a1=c0 a2=0 a3=7fff5c6efe90 items=0 ppid=20769 pid=20783 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=233 tty=(none) comm="ip" exe="/usr/sbin/ip" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null) >type=NETFILTER_CFG msg=audit(1389204775.926:6177): table=filter family=2 entries=0 >type=NETFILTER_CFG msg=audit(1389204775.926:6177): table=nat family=2 entries=0 >type=NETFILTER_CFG msg=audit(1389204775.926:6177): table=mangle family=2 entries=0 >type=NETFILTER_CFG msg=audit(1389204775.926:6177): table=filter family=10 entries=0 >type=SYSCALL msg=audit(1389204775.926:6177): arch=c000003e syscall=272 success=yes exit=0 a0=40000000 a1=c0 a2=0 a3=7fff4894cde0 items=0 ppid=20769 pid=20785 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=233 tty=(none) comm="ip" exe="/usr/sbin/ip" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null) >type=USER_AUTH msg=audit(1389204776.049:6178): pid=20703 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=34079 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204776.049:6179): pid=20703 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=4096 fp=8b:56:b0:3f:c8:ad:38:a6:94:f4:a7:26:83:75:cc:85 rport=34079 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_ACCT msg=audit(1389204776.054:6180): pid=20703 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204776.055:6181): pid=20703 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=20706 suid=74 rport=34079 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204776.056:6182): pid=20703 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1389204776.059:6183): pid=20703 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=LOGIN msg=audit(1389204776.059:6184): login pid=20703 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=238 >type=USER_ROLE_CHANGE msg=audit(1389204776.109:6185): pid=20703 uid=0 auid=0 ses=238 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204776.125:6186): pid=20703 uid=0 auid=0 ses=238 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1389204776.130:6187): pid=20703 uid=0 auid=0 ses=238 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204776.131:6188): pid=20703 uid=0 auid=0 ses=238 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204776.133:6189): pid=20802 uid=0 auid=0 ses=238 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=20802 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204776.133:6190): pid=20802 uid=0 auid=0 ses=238 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=20802 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRED_REFR msg=audit(1389204776.135:6191): pid=20802 uid=0 auid=0 ses=238 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204776.156:6192): pid=20703 uid=0 auid=0 ses=238 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRED_DISP msg=audit(1389204776.158:6193): pid=20703 uid=0 auid=0 ses=238 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204776.160:6194): pid=20703 uid=0 auid=0 ses=238 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1389204776.162:6195): pid=20703 uid=0 auid=0 ses=238 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204776.162:6196): pid=20703 uid=0 auid=0 ses=238 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=20703 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204776.162:6197): pid=20703 uid=0 auid=0 ses=238 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=20703 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204776.162:6198): pid=20703 uid=0 auid=0 ses=238 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=20703 suid=0 rport=34079 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204779.171:6199): pid=20839 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=20839 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204779.171:6200): pid=20839 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=20839 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204779.172:6201): pid=20838 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=20839 suid=74 rport=34082 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204779.172:6202): pid=20838 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=20839 suid=74 rport=34082 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204779.708:6203): pid=20838 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=34082 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204779.708:6204): pid=20838 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=4096 fp=8b:56:b0:3f:c8:ad:38:a6:94:f4:a7:26:83:75:cc:85 rport=34082 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_ACCT msg=audit(1389204779.714:6205): pid=20838 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204779.714:6206): pid=20838 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=20839 suid=74 rport=34082 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204779.715:6207): pid=20838 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1389204779.718:6208): pid=20838 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=LOGIN msg=audit(1389204779.718:6209): login pid=20838 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=239 >type=USER_ROLE_CHANGE msg=audit(1389204779.768:6210): pid=20838 uid=0 auid=0 ses=239 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204779.796:6211): pid=20838 uid=0 auid=0 ses=239 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1389204779.803:6212): pid=20838 uid=0 auid=0 ses=239 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204779.805:6213): pid=20838 uid=0 auid=0 ses=239 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204779.807:6214): pid=20841 uid=0 auid=0 ses=239 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=20841 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204779.807:6215): pid=20841 uid=0 auid=0 ses=239 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=20841 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRED_REFR msg=audit(1389204779.810:6216): pid=20841 uid=0 auid=0 ses=239 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204779.833:6217): pid=20838 uid=0 auid=0 ses=239 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRED_DISP msg=audit(1389204779.835:6218): pid=20838 uid=0 auid=0 ses=239 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204779.837:6219): pid=20838 uid=0 auid=0 ses=239 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1389204779.839:6220): pid=20838 uid=0 auid=0 ses=239 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204779.839:6221): pid=20838 uid=0 auid=0 ses=239 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=20838 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204779.839:6222): pid=20838 uid=0 auid=0 ses=239 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=20838 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204779.839:6223): pid=20838 uid=0 auid=0 ses=239 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=20838 suid=0 rport=34082 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204782.846:6224): pid=20850 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=20850 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204782.846:6225): pid=20850 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=20850 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204782.847:6226): pid=20849 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=20850 suid=74 rport=34088 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204782.847:6227): pid=20849 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=20850 suid=74 rport=34088 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_CMD msg=audit(1389204783.365:6228): pid=20851 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D43204C414E473D4320766773202D2D6E6F68656164696E6773202D2D756E69743D67202D6F206E616D652C73697A652C667265652C6C765F636F756E742C75756964202D2D736570617261746F72203A202D2D6E6F7375666669782063696E6465722D766F6C756D6573 terminal=? res=success' >type=USER_START msg=audit(1389204783.368:6229): pid=20851 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_AUTH msg=audit(1389204783.390:6230): pid=20849 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=34088 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204783.390:6231): pid=20849 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=4096 fp=8b:56:b0:3f:c8:ad:38:a6:94:f4:a7:26:83:75:cc:85 rport=34088 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_ACCT msg=audit(1389204783.405:6232): pid=20849 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204783.405:6233): pid=20849 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=20850 suid=74 rport=34088 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204783.407:6234): pid=20849 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1389204783.412:6235): pid=20849 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=LOGIN msg=audit(1389204783.413:6236): login pid=20849 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=240 >type=USER_END msg=audit(1389204783.428:6237): pid=20851 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_ROLE_CHANGE msg=audit(1389204783.469:6238): pid=20849 uid=0 auid=0 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204783.493:6239): pid=20849 uid=0 auid=0 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1389204783.497:6240): pid=20849 uid=0 auid=0 ses=240 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204783.500:6241): pid=20849 uid=0 auid=0 ses=240 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204783.501:6242): pid=20856 uid=0 auid=0 ses=240 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=20856 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204783.501:6243): pid=20856 uid=0 auid=0 ses=240 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=20856 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRED_REFR msg=audit(1389204783.504:6244): pid=20856 uid=0 auid=0 ses=240 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204783.527:6245): pid=20849 uid=0 auid=0 ses=240 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRED_DISP msg=audit(1389204783.529:6246): pid=20849 uid=0 auid=0 ses=240 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204783.531:6247): pid=20849 uid=0 auid=0 ses=240 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1389204783.533:6248): pid=20849 uid=0 auid=0 ses=240 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204783.534:6249): pid=20849 uid=0 auid=0 ses=240 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=20849 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204783.534:6250): pid=20849 uid=0 auid=0 ses=240 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=20849 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204783.534:6251): pid=20849 uid=0 auid=0 ses=240 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=20849 suid=0 rport=34088 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204786.549:6252): pid=20865 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=20865 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204786.549:6253): pid=20865 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=20865 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204786.550:6254): pid=20864 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=20865 suid=74 rport=34101 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204786.550:6255): pid=20864 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=20865 suid=74 rport=34101 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204787.087:6256): pid=20864 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=34101 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204787.087:6257): pid=20864 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=4096 fp=8b:56:b0:3f:c8:ad:38:a6:94:f4:a7:26:83:75:cc:85 rport=34101 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_ACCT msg=audit(1389204787.092:6258): pid=20864 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204787.092:6259): pid=20864 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=20865 suid=74 rport=34101 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204787.094:6260): pid=20864 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1389204787.096:6261): pid=20864 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=LOGIN msg=audit(1389204787.096:6262): login pid=20864 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=241 >type=USER_ROLE_CHANGE msg=audit(1389204787.145:6263): pid=20864 uid=0 auid=0 ses=241 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204787.162:6264): pid=20864 uid=0 auid=0 ses=241 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1389204787.166:6265): pid=20864 uid=0 auid=0 ses=241 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204787.168:6266): pid=20864 uid=0 auid=0 ses=241 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204787.169:6267): pid=20867 uid=0 auid=0 ses=241 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=20867 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204787.169:6268): pid=20867 uid=0 auid=0 ses=241 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=20867 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRED_REFR msg=audit(1389204787.172:6269): pid=20867 uid=0 auid=0 ses=241 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204787.193:6270): pid=20864 uid=0 auid=0 ses=241 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRED_DISP msg=audit(1389204787.195:6271): pid=20864 uid=0 auid=0 ses=241 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204787.197:6272): pid=20864 uid=0 auid=0 ses=241 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1389204787.199:6273): pid=20864 uid=0 auid=0 ses=241 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204787.199:6274): pid=20864 uid=0 auid=0 ses=241 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=20864 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204787.199:6275): pid=20864 uid=0 auid=0 ses=241 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=20864 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204787.200:6276): pid=20864 uid=0 auid=0 ses=241 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=20864 suid=0 rport=34101 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=NETFILTER_CFG msg=audit(1389204788.837:6277): table=filter family=2 entries=0 >type=NETFILTER_CFG msg=audit(1389204788.837:6277): table=nat family=2 entries=0 >type=NETFILTER_CFG msg=audit(1389204788.837:6277): table=mangle family=2 entries=0 >type=NETFILTER_CFG msg=audit(1389204788.837:6277): table=filter family=10 entries=0 >type=SYSCALL msg=audit(1389204788.837:6277): arch=c000003e syscall=272 success=yes exit=0 a0=40000000 a1=c0 a2=0 a3=7fffed02a640 items=0 ppid=21008 pid=21015 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=233 tty=(none) comm="ip" exe="/usr/sbin/ip" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null) >type=NETFILTER_CFG msg=audit(1389204788.857:6278): table=filter family=2 entries=0 >type=NETFILTER_CFG msg=audit(1389204788.857:6278): table=nat family=2 entries=0 >type=NETFILTER_CFG msg=audit(1389204788.857:6278): table=mangle family=2 entries=0 >type=NETFILTER_CFG msg=audit(1389204788.857:6278): table=filter family=10 entries=0 >type=SYSCALL msg=audit(1389204788.857:6278): arch=c000003e syscall=272 success=yes exit=0 a0=40000000 a1=c0 a2=0 a3=7fffcba3b660 items=0 ppid=21008 pid=21022 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=233 tty=(none) comm="ip" exe="/usr/sbin/ip" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null) >type=NETFILTER_CFG msg=audit(1389204789.123:6279): table=filter family=2 entries=0 >type=NETFILTER_CFG msg=audit(1389204789.123:6279): table=nat family=2 entries=0 >type=NETFILTER_CFG msg=audit(1389204789.123:6279): table=mangle family=2 entries=0 >type=NETFILTER_CFG msg=audit(1389204789.123:6279): table=filter family=10 entries=0 >type=SYSCALL msg=audit(1389204789.123:6279): arch=c000003e syscall=272 success=yes exit=0 a0=40000000 a1=c0 a2=0 a3=7fff06bf6e20 items=0 ppid=21008 pid=21024 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=233 tty=(none) comm="ip" exe="/usr/sbin/ip" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null) >type=CRYPTO_KEY_USER msg=audit(1389204790.211:6280): pid=21057 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=21057 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204790.211:6281): pid=21057 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=21057 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204790.212:6282): pid=21056 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=21057 suid=74 rport=34108 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204790.212:6283): pid=21056 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=21057 suid=74 rport=34108 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=NETFILTER_CFG msg=audit(1389204790.579:6284): table=filter family=2 entries=38 >type=SYSCALL msg=audit(1389204790.579:6284): arch=c000003e syscall=54 success=yes exit=0 a0=3 a1=0 a2=40 a3=1423e00 items=0 ppid=20544 pid=21067 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=233 tty=(none) comm="iptables" exe="/usr/sbin/xtables-multi" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null) >type=USER_AUTH msg=audit(1389204790.773:6285): pid=21056 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=34108 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204790.773:6286): pid=21056 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=4096 fp=8b:56:b0:3f:c8:ad:38:a6:94:f4:a7:26:83:75:cc:85 rport=34108 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_ACCT msg=audit(1389204790.790:6287): pid=21056 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204790.790:6288): pid=21056 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=21057 suid=74 rport=34108 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204790.792:6289): pid=21056 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1389204790.826:6290): pid=21056 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=LOGIN msg=audit(1389204790.826:6291): login pid=21056 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=242 >type=USER_ROLE_CHANGE msg=audit(1389204790.924:6292): pid=21056 uid=0 auid=0 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204790.961:6293): pid=21056 uid=0 auid=0 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1389204790.997:6294): pid=21056 uid=0 auid=0 ses=242 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204791.030:6295): pid=21056 uid=0 auid=0 ses=242 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204791.031:6296): pid=21082 uid=0 auid=0 ses=242 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=21082 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204791.031:6297): pid=21082 uid=0 auid=0 ses=242 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=21082 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRED_REFR msg=audit(1389204791.065:6298): pid=21082 uid=0 auid=0 ses=242 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204791.108:6299): pid=21056 uid=0 auid=0 ses=242 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRED_DISP msg=audit(1389204791.141:6300): pid=21056 uid=0 auid=0 ses=242 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204791.173:6301): pid=21056 uid=0 auid=0 ses=242 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1389204791.206:6302): pid=21056 uid=0 auid=0 ses=242 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204791.206:6303): pid=21056 uid=0 auid=0 ses=242 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=21056 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204791.206:6304): pid=21056 uid=0 auid=0 ses=242 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=21056 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204791.206:6305): pid=21056 uid=0 auid=0 ses=242 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=21056 suid=0 rport=34108 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204794.108:6306): pid=21101 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=21101 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204794.109:6307): pid=21101 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=21101 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204794.110:6308): pid=21100 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=21101 suid=74 rport=34111 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204794.110:6309): pid=21100 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=21101 suid=74 rport=34111 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204794.710:6310): pid=21100 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=34111 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204794.710:6311): pid=21100 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=4096 fp=8b:56:b0:3f:c8:ad:38:a6:94:f4:a7:26:83:75:cc:85 rport=34111 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_ACCT msg=audit(1389204794.715:6312): pid=21100 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204794.715:6313): pid=21100 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=21101 suid=74 rport=34111 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204794.717:6314): pid=21100 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1389204794.719:6315): pid=21100 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=LOGIN msg=audit(1389204794.719:6316): login pid=21100 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=243 >type=USER_ROLE_CHANGE msg=audit(1389204794.767:6317): pid=21100 uid=0 auid=0 ses=243 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204794.785:6318): pid=21100 uid=0 auid=0 ses=243 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1389204794.789:6319): pid=21100 uid=0 auid=0 ses=243 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204794.792:6320): pid=21100 uid=0 auid=0 ses=243 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204794.793:6321): pid=21103 uid=0 auid=0 ses=243 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=21103 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204794.793:6322): pid=21103 uid=0 auid=0 ses=243 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=21103 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRED_REFR msg=audit(1389204794.796:6323): pid=21103 uid=0 auid=0 ses=243 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204794.820:6324): pid=21100 uid=0 auid=0 ses=243 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRED_DISP msg=audit(1389204794.822:6325): pid=21100 uid=0 auid=0 ses=243 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204794.826:6326): pid=21100 uid=0 auid=0 ses=243 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1389204794.829:6327): pid=21100 uid=0 auid=0 ses=243 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204794.829:6328): pid=21100 uid=0 auid=0 ses=243 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=21100 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204794.829:6329): pid=21100 uid=0 auid=0 ses=243 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=21100 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204794.829:6330): pid=21100 uid=0 auid=0 ses=243 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=21100 suid=0 rport=34111 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=ADD_GROUP msg=audit(1389204797.812:6331): pid=21112 uid=0 auid=0 ses=233 subj=unconfined_u:system_r:groupadd_t:s0-s0:c0.c1023 msg='op=adding group to /etc/group id=992 exe="/usr/sbin/groupadd" hostname=? addr=? terminal=? res=success' >type=ADD_GROUP msg=audit(1389204797.834:6332): pid=21112 uid=0 auid=0 ses=233 subj=unconfined_u:system_r:groupadd_t:s0-s0:c0.c1023 msg='op=adding group to /etc/gshadow id=992 exe="/usr/sbin/groupadd" hostname=? addr=? terminal=? res=success' >type=ADD_GROUP msg=audit(1389204797.834:6333): pid=21112 uid=0 auid=0 ses=233 subj=unconfined_u:system_r:groupadd_t:s0-s0:c0.c1023 msg='op= id=992 exe="/usr/sbin/groupadd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204797.851:6334): pid=21122 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=21122 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204797.851:6335): pid=21122 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=21122 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204797.852:6336): pid=21116 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=21122 suid=74 rport=34115 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204797.852:6337): pid=21116 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=21122 suid=74 rport=34115 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=ADD_USER msg=audit(1389204797.860:6338): pid=21121 uid=0 auid=0 ses=233 subj=unconfined_u:system_r:useradd_t:s0-s0:c0.c1023 msg='op=adding user id=995 exe="/usr/sbin/useradd" hostname=? addr=? terminal=? res=success' >type=USER_AUTH msg=audit(1389204798.152:6339): pid=21116 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=34115 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204798.152:6340): pid=21116 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=4096 fp=8b:56:b0:3f:c8:ad:38:a6:94:f4:a7:26:83:75:cc:85 rport=34115 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_ACCT msg=audit(1389204798.174:6341): pid=21116 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204798.175:6342): pid=21116 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=21122 suid=74 rport=34115 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204798.176:6343): pid=21116 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1389204798.182:6344): pid=21116 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=LOGIN msg=audit(1389204798.182:6345): login pid=21116 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=244 >type=USER_ROLE_CHANGE msg=audit(1389204798.290:6346): pid=21116 uid=0 auid=0 ses=244 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204798.339:6347): pid=21116 uid=0 auid=0 ses=244 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1389204798.348:6348): pid=21116 uid=0 auid=0 ses=244 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204798.351:6349): pid=21116 uid=0 auid=0 ses=244 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204798.352:6350): pid=21139 uid=0 auid=0 ses=244 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=21139 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204798.353:6351): pid=21139 uid=0 auid=0 ses=244 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=21139 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRED_REFR msg=audit(1389204798.356:6352): pid=21139 uid=0 auid=0 ses=244 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204798.387:6353): pid=21116 uid=0 auid=0 ses=244 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRED_DISP msg=audit(1389204798.392:6354): pid=21116 uid=0 auid=0 ses=244 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204798.397:6355): pid=21116 uid=0 auid=0 ses=244 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1389204798.400:6356): pid=21116 uid=0 auid=0 ses=244 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204798.400:6357): pid=21116 uid=0 auid=0 ses=244 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=21116 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204798.400:6358): pid=21116 uid=0 auid=0 ses=244 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=21116 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204798.401:6359): pid=21116 uid=0 auid=0 ses=244 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=21116 suid=0 rport=34115 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204801.405:6360): pid=21157 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=21157 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204801.405:6361): pid=21157 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=21157 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204801.406:6362): pid=21156 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=21157 suid=74 rport=34116 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204801.406:6363): pid=21156 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=21157 suid=74 rport=34116 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204801.987:6364): pid=21156 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=34116 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204801.987:6365): pid=21156 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=4096 fp=8b:56:b0:3f:c8:ad:38:a6:94:f4:a7:26:83:75:cc:85 rport=34116 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_ACCT msg=audit(1389204802.004:6366): pid=21156 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204802.004:6367): pid=21156 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=21157 suid=74 rport=34116 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204802.006:6368): pid=21156 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1389204802.039:6369): pid=21156 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=LOGIN msg=audit(1389204802.039:6370): login pid=21156 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=245 >type=USER_ROLE_CHANGE msg=audit(1389204802.153:6371): pid=21156 uid=0 auid=0 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204802.190:6372): pid=21156 uid=0 auid=0 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1389204802.226:6373): pid=21156 uid=0 auid=0 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204802.259:6374): pid=21156 uid=0 auid=0 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204802.260:6375): pid=21159 uid=0 auid=0 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=21159 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204802.260:6376): pid=21159 uid=0 auid=0 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=21159 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRED_REFR msg=audit(1389204802.284:6377): pid=21159 uid=0 auid=0 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204802.308:6378): pid=21156 uid=0 auid=0 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRED_DISP msg=audit(1389204802.317:6379): pid=21156 uid=0 auid=0 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204802.329:6380): pid=21156 uid=0 auid=0 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1389204802.340:6381): pid=21156 uid=0 auid=0 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204802.340:6382): pid=21156 uid=0 auid=0 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=21156 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204802.340:6383): pid=21156 uid=0 auid=0 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=21156 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204802.340:6384): pid=21156 uid=0 auid=0 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=21156 suid=0 rport=34116 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204805.322:6385): pid=21245 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=21245 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204805.322:6386): pid=21245 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=21245 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204805.322:6387): pid=21244 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=21245 suid=74 rport=34119 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204805.322:6388): pid=21244 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=21245 suid=74 rport=34119 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=SERVICE_START msg=audit(1389204805.749:6389): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="openvswitch-nonetwork" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1389204805.753:6390): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="openvswitch" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=USER_AUTH msg=audit(1389204805.855:6391): pid=21244 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=34119 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204805.855:6392): pid=21244 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=4096 fp=8b:56:b0:3f:c8:ad:38:a6:94:f4:a7:26:83:75:cc:85 rport=34119 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_ACCT msg=audit(1389204805.869:6393): pid=21244 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204805.869:6394): pid=21244 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=21245 suid=74 rport=34119 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204805.870:6395): pid=21244 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1389204805.875:6396): pid=21244 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=LOGIN msg=audit(1389204805.875:6397): login pid=21244 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=246 >type=USER_ROLE_CHANGE msg=audit(1389204806.023:6398): pid=21244 uid=0 auid=0 ses=246 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204806.102:6399): pid=21244 uid=0 auid=0 ses=246 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1389204806.127:6400): pid=21244 uid=0 auid=0 ses=246 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204806.132:6401): pid=21244 uid=0 auid=0 ses=246 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204806.133:6402): pid=21273 uid=0 auid=0 ses=246 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=21273 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204806.133:6403): pid=21273 uid=0 auid=0 ses=246 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=21273 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRED_REFR msg=audit(1389204806.135:6404): pid=21273 uid=0 auid=0 ses=246 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204806.153:6405): pid=21244 uid=0 auid=0 ses=246 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRED_DISP msg=audit(1389204806.156:6406): pid=21244 uid=0 auid=0 ses=246 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204806.158:6407): pid=21244 uid=0 auid=0 ses=246 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1389204806.159:6408): pid=21244 uid=0 auid=0 ses=246 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204806.159:6409): pid=21244 uid=0 auid=0 ses=246 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=21244 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204806.160:6410): pid=21244 uid=0 auid=0 ses=246 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=21244 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204806.160:6411): pid=21244 uid=0 auid=0 ses=246 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=21244 suid=0 rport=34119 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=ANOM_PROMISCUOUS msg=audit(1389204806.186:6412): dev=ovs-system prom=256 old_prom=0 auid=4294967295 uid=0 gid=0 ses=4294967295 >type=SYSCALL msg=audit(1389204806.186:6412): arch=c000003e syscall=46 success=yes exit=48 a0=10 a1=7fff3a4aaa30 a2=0 a3=0 items=0 ppid=21249 pid=21250 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="ovs-vswitchd" exe="/usr/sbin/ovs-vswitchd" subj=system_u:system_r:openvswitch_t:s0 key=(null) >type=ANOM_PROMISCUOUS msg=audit(1389204806.203:6413): dev=br-int prom=256 old_prom=0 auid=4294967295 uid=0 gid=0 ses=4294967295 >type=SYSCALL msg=audit(1389204806.203:6413): arch=c000003e syscall=46 success=yes exit=52 a0=10 a1=7fff3a4aa920 a2=0 a3=0 items=0 ppid=21249 pid=21250 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="ovs-vswitchd" exe="/usr/sbin/ovs-vswitchd" subj=system_u:system_r:openvswitch_t:s0 key=(null) >type=USER_CMD msg=audit(1389204806.559:6414): pid=21329 uid=995 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D767363746C202D2D74696D656F75743D32206C6973742D6272 terminal=? res=success' >type=USER_START msg=audit(1389204806.559:6415): pid=21329 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1389204806.591:6416): pid=21329 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1389204806.598:6417): pid=21332 uid=995 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D767363746C202D2D74696D656F75743D32206C6973742D706F7274732062722D696E74 terminal=? res=success' >type=USER_START msg=audit(1389204806.599:6418): pid=21332 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1389204806.630:6419): pid=21332 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1389204806.636:6420): pid=21335 uid=995 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D767363746C202D2D74696D656F75743D32206C6973742D706F7274732062722D696E74 terminal=? res=success' >type=USER_START msg=audit(1389204806.636:6421): pid=21335 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1389204806.667:6422): pid=21335 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1389204806.694:6423): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="neutron-ovs-cleanup" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1389204806.694:6424): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="neutron-ovs-cleanup" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1389204808.295:6425): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="neutron-openvswitch-agent" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1389204808.541:6426): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="neutron-dhcp-agent" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1389204808.852:6427): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="neutron-l3-agent" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204809.184:6428): pid=21538 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=21538 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204809.184:6429): pid=21538 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=21538 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204809.185:6430): pid=21537 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=21538 suid=74 rport=34121 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204809.185:6431): pid=21537 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=21538 suid=74 rport=34121 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=ANOM_PROMISCUOUS msg=audit(1389204809.263:6432): dev=br-ex prom=256 old_prom=0 auid=4294967295 uid=0 gid=0 ses=4294967295 >type=SYSCALL msg=audit(1389204809.263:6432): arch=c000003e syscall=46 success=yes exit=52 a0=10 a1=7fff3a4aa920 a2=0 a3=2 items=0 ppid=21249 pid=21250 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="ovs-vswitchd" exe="/usr/sbin/ovs-vswitchd" subj=system_u:system_r:openvswitch_t:s0 key=(null) >type=AVC msg=audit(1389204809.315:6433): avc: denied { nlmsg_write } for pid=21548 comm="ip" scontext=system_u:system_r:neutron_t:s0 tcontext=system_u:system_r:neutron_t:s0 tclass=netlink_route_socket >type=SYSCALL msg=audit(1389204809.315:6433): arch=c000003e syscall=44 success=yes exit=32 a0=3 a1=7fff240aa530 a2=20 a3=0 items=0 ppid=21415 pid=21548 auid=4294967295 uid=995 gid=992 euid=995 suid=995 fsuid=995 egid=992 sgid=992 fsgid=992 ses=4294967295 tty=(none) comm="ip" exe="/usr/sbin/ip" subj=system_u:system_r:neutron_t:s0 key=(null) >type=USER_CMD msg=audit(1389204809.569:6434): pid=21583 uid=995 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D767363746C202D2D74696D656F75743D32202D2D202D2D69662D6578697374732064656C2D706F72742062722D696E742070617463682D74756E terminal=? res=success' >type=USER_START msg=audit(1389204809.570:6435): pid=21583 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1389204809.582:6436): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="neutron-server" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=USER_AUTH msg=audit(1389204809.786:6437): pid=21537 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=34121 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204809.786:6438): pid=21537 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=4096 fp=8b:56:b0:3f:c8:ad:38:a6:94:f4:a7:26:83:75:cc:85 rport=34121 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_ACCT msg=audit(1389204809.797:6439): pid=21537 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204809.798:6440): pid=21537 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=21538 suid=74 rport=34121 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204809.799:6441): pid=21537 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1389204809.815:6442): pid=21537 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=LOGIN msg=audit(1389204809.816:6443): login pid=21537 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=247 >type=USER_END msg=audit(1389204809.828:6444): pid=21583 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1389204809.841:6445): pid=21602 uid=995 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D6F6663746C2064656C2D666C6F77732062722D696E74 terminal=? res=success' >type=USER_START msg=audit(1389204809.841:6446): pid=21602 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1389204810.053:6447): pid=21602 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1389204810.073:6448): pid=21610 uid=995 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D6F6663746C206164642D666C6F772062722D696E7420686172645F74696D656F75743D302C69646C655F74696D656F75743D302C7072696F726974793D312C616374696F6E733D6E6F726D616C terminal=? res=success' >type=USER_START msg=audit(1389204810.073:6449): pid=21610 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_ROLE_CHANGE msg=audit(1389204810.108:6450): pid=21537 uid=0 auid=0 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_CMD msg=audit(1389204810.183:6451): pid=21621 uid=995 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206970206E65746E73206C697374 terminal=? res=success' >type=USER_START msg=audit(1389204810.184:6452): pid=21621 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1389204810.244:6453): pid=21537 uid=0 auid=0 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1389204810.273:6454): pid=21537 uid=0 auid=0 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204810.273:6455): pid=21610 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1389204810.280:6456): pid=21628 uid=995 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D767363746C202D2D74696D656F75743D32206C6973742D6272 terminal=? res=success' >type=USER_START msg=audit(1389204810.280:6457): pid=21628 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1389204810.291:6458): pid=21537 uid=0 auid=0 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204810.291:6459): pid=21630 uid=0 auid=0 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=21630 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204810.291:6460): pid=21630 uid=0 auid=0 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=21630 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRED_REFR msg=audit(1389204810.301:6461): pid=21630 uid=0 auid=0 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204810.319:6462): pid=21621 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1389204810.358:6463): pid=21537 uid=0 auid=0 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRED_DISP msg=audit(1389204810.367:6464): pid=21537 uid=0 auid=0 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204810.383:6465): pid=21537 uid=0 auid=0 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1389204810.398:6466): pid=21537 uid=0 auid=0 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204810.398:6467): pid=21537 uid=0 auid=0 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=21537 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204810.398:6468): pid=21537 uid=0 auid=0 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=21537 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204810.398:6469): pid=21537 uid=0 auid=0 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=21537 suid=0 rport=34121 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=SERVICE_START msg=audit(1389204810.417:6470): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="neutron-metadata-agent" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1389204810.471:6471): pid=21628 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1389204810.486:6472): pid=21654 uid=995 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D767363746C202D2D74696D656F75743D322062722D6765742D65787465726E616C2D69642062722D6578206272696467652D6964 terminal=? res=success' >type=USER_START msg=audit(1389204810.487:6473): pid=21654 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1389204810.681:6474): pid=21654 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1389204810.849:6475): pid=21671 uid=995 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F767364622D636C69656E74206D6F6E69746F7220496E74657266616365206E616D65202D2D666F726D61743D6A736F6E terminal=? res=success' >type=USER_START msg=audit(1389204810.849:6476): pid=21671 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1389204810.850:6477): pid=21672 uid=995 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D767363746C202D2D74696D656F75743D32206C6973742D706F7274732062722D696E74 terminal=? res=success' >type=USER_START msg=audit(1389204810.851:6478): pid=21672 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1389204811.110:6479): pid=21672 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1389204811.134:6480): pid=21682 uid=995 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D767363746C202D2D74696D656F75743D32202D2D666F726D61743D6A736F6E202D2D202D2D636F6C756D6E733D6E616D652C65787465726E616C5F696473206C69737420496E74657266616365 terminal=? res=success' >type=USER_START msg=audit(1389204811.134:6481): pid=21682 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1389204811.214:6482): pid=21682 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1389204812.837:6483): pid=21687 uid=995 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D767363746C202D2D74696D656F75743D32206C6973742D706F7274732062722D696E74 terminal=? res=success' >type=USER_START msg=audit(1389204812.837:6484): pid=21687 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1389204812.869:6485): pid=21687 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1389204812.875:6486): pid=21690 uid=995 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D767363746C202D2D74696D656F75743D32202D2D666F726D61743D6A736F6E202D2D202D2D636F6C756D6E733D6E616D652C65787465726E616C5F696473206C69737420496E74657266616365 terminal=? res=success' >type=USER_START msg=audit(1389204812.875:6487): pid=21690 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1389204812.908:6488): pid=21690 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204813.360:6489): pid=21697 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=21697 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204813.360:6490): pid=21697 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=21697 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204813.361:6491): pid=21696 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=21697 suid=74 rport=34135 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204813.361:6492): pid=21696 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=21697 suid=74 rport=34135 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204813.890:6493): pid=21696 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=34135 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204813.890:6494): pid=21696 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=4096 fp=8b:56:b0:3f:c8:ad:38:a6:94:f4:a7:26:83:75:cc:85 rport=34135 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_ACCT msg=audit(1389204813.895:6495): pid=21696 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204813.896:6496): pid=21696 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=21697 suid=74 rport=34135 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204813.897:6497): pid=21696 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1389204813.900:6498): pid=21696 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=LOGIN msg=audit(1389204813.900:6499): login pid=21696 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=248 >type=USER_ROLE_CHANGE msg=audit(1389204813.949:6500): pid=21696 uid=0 auid=0 ses=248 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204814.015:6501): pid=21696 uid=0 auid=0 ses=248 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1389204814.022:6502): pid=21696 uid=0 auid=0 ses=248 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204814.024:6503): pid=21696 uid=0 auid=0 ses=248 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204814.026:6504): pid=21699 uid=0 auid=0 ses=248 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=21699 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204814.026:6505): pid=21699 uid=0 auid=0 ses=248 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=21699 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRED_REFR msg=audit(1389204814.028:6506): pid=21699 uid=0 auid=0 ses=248 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204814.064:6507): pid=21696 uid=0 auid=0 ses=248 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204814.066:6508): pid=21705 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=21705 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204814.066:6509): pid=21705 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=21705 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204814.067:6510): pid=21704 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=21705 suid=74 rport=34136 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204814.067:6511): pid=21704 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=21705 suid=74 rport=34136 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRED_DISP msg=audit(1389204814.070:6512): pid=21696 uid=0 auid=0 ses=248 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204814.075:6513): pid=21696 uid=0 auid=0 ses=248 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1389204814.078:6514): pid=21696 uid=0 auid=0 ses=248 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204814.078:6515): pid=21696 uid=0 auid=0 ses=248 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=21696 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204814.078:6516): pid=21696 uid=0 auid=0 ses=248 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=21696 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204814.078:6517): pid=21696 uid=0 auid=0 ses=248 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=21696 suid=0 rport=34135 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204814.591:6518): pid=21704 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=34136 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204814.591:6519): pid=21704 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=4096 fp=8b:56:b0:3f:c8:ad:38:a6:94:f4:a7:26:83:75:cc:85 rport=34136 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_ACCT msg=audit(1389204814.597:6520): pid=21704 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204814.597:6521): pid=21704 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=21705 suid=74 rport=34136 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204814.599:6522): pid=21704 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1389204814.601:6523): pid=21704 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=LOGIN msg=audit(1389204814.601:6524): login pid=21704 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=249 >type=USER_ROLE_CHANGE msg=audit(1389204814.732:6525): pid=21704 uid=0 auid=0 ses=249 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204814.755:6526): pid=21704 uid=0 auid=0 ses=249 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1389204814.765:6527): pid=21704 uid=0 auid=0 ses=249 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204814.771:6528): pid=21704 uid=0 auid=0 ses=249 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204814.772:6529): pid=21708 uid=0 auid=0 ses=249 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=21708 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204814.772:6530): pid=21708 uid=0 auid=0 ses=249 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=21708 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRED_REFR msg=audit(1389204814.778:6531): pid=21708 uid=0 auid=0 ses=249 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204814.838:6532): pid=21704 uid=0 auid=0 ses=249 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204814.845:6533): pid=21720 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=21720 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204814.845:6534): pid=21720 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=21720 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204814.846:6535): pid=21719 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=21720 suid=74 rport=34137 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204814.846:6536): pid=21719 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=21720 suid=74 rport=34137 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRED_DISP msg=audit(1389204814.852:6537): pid=21704 uid=0 auid=0 ses=249 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204814.860:6538): pid=21704 uid=0 auid=0 ses=249 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1389204814.875:6539): pid=21704 uid=0 auid=0 ses=249 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204814.875:6540): pid=21704 uid=0 auid=0 ses=249 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=21704 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204814.875:6541): pid=21704 uid=0 auid=0 ses=249 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=21704 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204814.875:6542): pid=21704 uid=0 auid=0 ses=249 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=21704 suid=0 rport=34136 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204815.402:6543): pid=21719 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=34137 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204815.402:6544): pid=21719 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=4096 fp=8b:56:b0:3f:c8:ad:38:a6:94:f4:a7:26:83:75:cc:85 rport=34137 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_ACCT msg=audit(1389204815.438:6545): pid=21719 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204815.438:6546): pid=21719 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=21720 suid=74 rport=34137 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204815.440:6547): pid=21719 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1389204815.473:6548): pid=21719 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=LOGIN msg=audit(1389204815.473:6549): login pid=21719 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=250 >type=USER_ROLE_CHANGE msg=audit(1389204815.562:6550): pid=21719 uid=0 auid=0 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204815.600:6551): pid=21719 uid=0 auid=0 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1389204815.636:6552): pid=21719 uid=0 auid=0 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204815.669:6553): pid=21719 uid=0 auid=0 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204815.670:6554): pid=21726 uid=0 auid=0 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=21726 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204815.670:6555): pid=21726 uid=0 auid=0 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=21726 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRED_REFR msg=audit(1389204815.704:6556): pid=21726 uid=0 auid=0 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204815.746:6557): pid=21738 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=21738 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204815.746:6558): pid=21738 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=21738 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204815.747:6559): pid=21737 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=21738 suid=74 rport=34138 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204815.747:6560): pid=21737 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=21738 suid=74 rport=34138 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_END msg=audit(1389204815.749:6561): pid=21719 uid=0 auid=0 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRED_DISP msg=audit(1389204815.754:6562): pid=21719 uid=0 auid=0 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204815.788:6563): pid=21719 uid=0 auid=0 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1389204815.803:6564): pid=21719 uid=0 auid=0 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204815.803:6565): pid=21719 uid=0 auid=0 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=21719 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204815.804:6566): pid=21719 uid=0 auid=0 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=21719 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204815.804:6567): pid=21719 uid=0 auid=0 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=21719 suid=0 rport=34137 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204816.297:6568): pid=21737 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=34138 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204816.297:6569): pid=21737 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=4096 fp=8b:56:b0:3f:c8:ad:38:a6:94:f4:a7:26:83:75:cc:85 rport=34138 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_ACCT msg=audit(1389204816.303:6570): pid=21737 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204816.304:6571): pid=21737 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=21738 suid=74 rport=34138 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204816.306:6572): pid=21737 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1389204816.309:6573): pid=21737 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=LOGIN msg=audit(1389204816.309:6574): login pid=21737 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=251 >type=USER_ROLE_CHANGE msg=audit(1389204816.415:6575): pid=21737 uid=0 auid=0 ses=251 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204816.436:6576): pid=21737 uid=0 auid=0 ses=251 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=NETFILTER_CFG msg=audit(1389204816.442:6577): table=filter family=2 entries=0 >type=NETFILTER_CFG msg=audit(1389204816.442:6577): table=nat family=2 entries=0 >type=NETFILTER_CFG msg=audit(1389204816.442:6577): table=mangle family=2 entries=0 >type=NETFILTER_CFG msg=audit(1389204816.442:6577): table=filter family=10 entries=0 >type=SYSCALL msg=audit(1389204816.442:6577): arch=c000003e syscall=272 success=yes exit=0 a0=40000000 a1=c0 a2=0 a3=7fffeb879b30 items=0 ppid=21942 pid=21949 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=249 tty=(none) comm="ip" exe="/usr/sbin/ip" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null) >type=USER_LOGIN msg=audit(1389204816.450:6578): pid=21737 uid=0 auid=0 ses=251 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204816.458:6579): pid=21737 uid=0 auid=0 ses=251 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204816.458:6580): pid=21955 uid=0 auid=0 ses=251 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=21955 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204816.458:6581): pid=21955 uid=0 auid=0 ses=251 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=21955 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRED_REFR msg=audit(1389204816.465:6582): pid=21955 uid=0 auid=0 ses=251 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204816.486:6583): pid=21737 uid=0 auid=0 ses=251 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRED_DISP msg=audit(1389204816.488:6584): pid=21737 uid=0 auid=0 ses=251 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204816.490:6585): pid=21737 uid=0 auid=0 ses=251 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1389204816.492:6586): pid=21737 uid=0 auid=0 ses=251 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204816.492:6587): pid=21737 uid=0 auid=0 ses=251 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=21737 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204816.492:6588): pid=21737 uid=0 auid=0 ses=251 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=21737 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204816.492:6589): pid=21737 uid=0 auid=0 ses=251 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=21737 suid=0 rport=34138 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=NETFILTER_CFG msg=audit(1389204816.470:6590): table=filter family=2 entries=0 >type=NETFILTER_CFG msg=audit(1389204816.470:6590): table=nat family=2 entries=0 >type=NETFILTER_CFG msg=audit(1389204816.470:6590): table=mangle family=2 entries=0 >type=NETFILTER_CFG msg=audit(1389204816.470:6590): table=filter family=10 entries=0 >type=SYSCALL msg=audit(1389204816.470:6590): arch=c000003e syscall=272 success=yes exit=0 a0=40000000 a1=c0 a2=0 a3=7fffdd0a7c60 items=0 ppid=21942 pid=21960 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=249 tty=(none) comm="ip" exe="/usr/sbin/ip" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null) >type=NETFILTER_CFG msg=audit(1389204816.734:6591): table=filter family=2 entries=0 >type=NETFILTER_CFG msg=audit(1389204816.734:6591): table=nat family=2 entries=0 >type=NETFILTER_CFG msg=audit(1389204816.734:6591): table=mangle family=2 entries=0 >type=NETFILTER_CFG msg=audit(1389204816.734:6591): table=filter family=10 entries=0 >type=SYSCALL msg=audit(1389204816.734:6591): arch=c000003e syscall=272 success=yes exit=0 a0=40000000 a1=c0 a2=0 a3=7fff9a1bf1f0 items=0 ppid=21942 pid=21963 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=249 tty=(none) comm="ip" exe="/usr/sbin/ip" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null) >type=NETFILTER_CFG msg=audit(1389204818.982:6592): table=filter family=2 entries=0 >type=NETFILTER_CFG msg=audit(1389204818.982:6592): table=nat family=2 entries=0 >type=NETFILTER_CFG msg=audit(1389204818.982:6592): table=mangle family=2 entries=0 >type=NETFILTER_CFG msg=audit(1389204818.982:6592): table=filter family=10 entries=0 >type=SYSCALL msg=audit(1389204818.982:6592): arch=c000003e syscall=272 success=yes exit=0 a0=40000000 a1=c0 a2=0 a3=7fff034db190 items=0 ppid=22204 pid=22211 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=249 tty=(none) comm="ip" exe="/usr/sbin/ip" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null) >type=NETFILTER_CFG msg=audit(1389204818.996:6593): table=filter family=2 entries=0 >type=NETFILTER_CFG msg=audit(1389204818.996:6593): table=nat family=2 entries=0 >type=NETFILTER_CFG msg=audit(1389204818.996:6593): table=mangle family=2 entries=0 >type=NETFILTER_CFG msg=audit(1389204818.996:6593): table=filter family=10 entries=0 >type=SYSCALL msg=audit(1389204818.996:6593): arch=c000003e syscall=272 success=yes exit=0 a0=40000000 a1=c0 a2=0 a3=7fff829c8120 items=0 ppid=22204 pid=22215 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=249 tty=(none) comm="ip" exe="/usr/sbin/ip" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null) >type=NETFILTER_CFG msg=audit(1389204819.262:6594): table=filter family=2 entries=0 >type=NETFILTER_CFG msg=audit(1389204819.262:6594): table=nat family=2 entries=0 >type=NETFILTER_CFG msg=audit(1389204819.262:6594): table=mangle family=2 entries=0 >type=NETFILTER_CFG msg=audit(1389204819.262:6594): table=filter family=10 entries=0 >type=SYSCALL msg=audit(1389204819.262:6594): arch=c000003e syscall=272 success=yes exit=0 a0=40000000 a1=c0 a2=0 a3=7ffff0e28a60 items=0 ppid=22204 pid=22217 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=249 tty=(none) comm="ip" exe="/usr/sbin/ip" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null) >type=CRYPTO_KEY_USER msg=audit(1389204819.500:6595): pid=22236 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=22236 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204819.500:6596): pid=22236 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=22236 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204819.501:6597): pid=22235 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=22236 suid=74 rport=34139 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204819.501:6598): pid=22235 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=22236 suid=74 rport=34139 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204820.023:6599): pid=22235 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=34139 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204820.023:6600): pid=22235 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=4096 fp=8b:56:b0:3f:c8:ad:38:a6:94:f4:a7:26:83:75:cc:85 rport=34139 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_ACCT msg=audit(1389204820.028:6601): pid=22235 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204820.028:6602): pid=22235 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=22236 suid=74 rport=34139 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204820.029:6603): pid=22235 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1389204820.032:6604): pid=22235 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=LOGIN msg=audit(1389204820.032:6605): login pid=22235 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=252 >type=USER_ROLE_CHANGE msg=audit(1389204820.080:6606): pid=22235 uid=0 auid=0 ses=252 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204820.099:6607): pid=22235 uid=0 auid=0 ses=252 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1389204820.104:6608): pid=22235 uid=0 auid=0 ses=252 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204820.106:6609): pid=22235 uid=0 auid=0 ses=252 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204820.108:6610): pid=22238 uid=0 auid=0 ses=252 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=22238 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204820.108:6611): pid=22238 uid=0 auid=0 ses=252 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=22238 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRED_REFR msg=audit(1389204820.110:6612): pid=22238 uid=0 auid=0 ses=252 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204820.135:6613): pid=22235 uid=0 auid=0 ses=252 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRED_DISP msg=audit(1389204820.138:6614): pid=22235 uid=0 auid=0 ses=252 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204820.140:6615): pid=22235 uid=0 auid=0 ses=252 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1389204820.143:6616): pid=22235 uid=0 auid=0 ses=252 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204820.143:6617): pid=22235 uid=0 auid=0 ses=252 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=22235 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204820.143:6618): pid=22235 uid=0 auid=0 ses=252 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=22235 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204820.143:6619): pid=22235 uid=0 auid=0 ses=252 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=22235 suid=0 rport=34139 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=NETFILTER_CFG msg=audit(1389204822.650:6620): table=filter family=2 entries=0 >type=NETFILTER_CFG msg=audit(1389204822.650:6620): table=nat family=2 entries=0 >type=NETFILTER_CFG msg=audit(1389204822.650:6620): table=mangle family=2 entries=0 >type=NETFILTER_CFG msg=audit(1389204822.650:6620): table=filter family=10 entries=0 >type=SYSCALL msg=audit(1389204822.650:6620): arch=c000003e syscall=272 success=yes exit=0 a0=40000000 a1=c0 a2=0 a3=7ffffc7b7260 items=0 ppid=22471 pid=22478 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=250 tty=(none) comm="ip" exe="/usr/sbin/ip" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null) >type=NETFILTER_CFG msg=audit(1389204822.666:6621): table=filter family=2 entries=0 >type=NETFILTER_CFG msg=audit(1389204822.666:6621): table=nat family=2 entries=0 >type=NETFILTER_CFG msg=audit(1389204822.666:6621): table=mangle family=2 entries=0 >type=NETFILTER_CFG msg=audit(1389204822.666:6621): table=filter family=10 entries=0 >type=SYSCALL msg=audit(1389204822.666:6621): arch=c000003e syscall=272 success=yes exit=0 a0=40000000 a1=c0 a2=0 a3=7fff884efe30 items=0 ppid=22471 pid=22482 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=250 tty=(none) comm="ip" exe="/usr/sbin/ip" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null) >type=NETFILTER_CFG msg=audit(1389204822.935:6622): table=filter family=2 entries=0 >type=NETFILTER_CFG msg=audit(1389204822.935:6622): table=nat family=2 entries=0 >type=NETFILTER_CFG msg=audit(1389204822.935:6622): table=mangle family=2 entries=0 >type=NETFILTER_CFG msg=audit(1389204822.935:6622): table=filter family=10 entries=0 >type=SYSCALL msg=audit(1389204822.935:6622): arch=c000003e syscall=272 success=yes exit=0 a0=40000000 a1=c0 a2=0 a3=7fff92b916d0 items=0 ppid=22471 pid=22484 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=250 tty=(none) comm="ip" exe="/usr/sbin/ip" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null) >type=CRYPTO_KEY_USER msg=audit(1389204823.153:6623): pid=22503 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=22503 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204823.153:6624): pid=22503 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=22503 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204823.154:6625): pid=22502 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=22503 suid=74 rport=34140 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204823.154:6626): pid=22502 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=22503 suid=74 rport=34140 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204823.674:6627): pid=22502 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=34140 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204823.674:6628): pid=22502 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=4096 fp=8b:56:b0:3f:c8:ad:38:a6:94:f4:a7:26:83:75:cc:85 rport=34140 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_ACCT msg=audit(1389204823.680:6629): pid=22502 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204823.680:6630): pid=22502 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=22503 suid=74 rport=34140 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204823.681:6631): pid=22502 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1389204823.683:6632): pid=22502 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=LOGIN msg=audit(1389204823.683:6633): login pid=22502 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=253 >type=USER_ROLE_CHANGE msg=audit(1389204823.731:6634): pid=22502 uid=0 auid=0 ses=253 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204823.748:6635): pid=22502 uid=0 auid=0 ses=253 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1389204823.753:6636): pid=22502 uid=0 auid=0 ses=253 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204823.754:6637): pid=22502 uid=0 auid=0 ses=253 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204823.756:6638): pid=22505 uid=0 auid=0 ses=253 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=22505 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204823.756:6639): pid=22505 uid=0 auid=0 ses=253 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=22505 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRED_REFR msg=audit(1389204823.758:6640): pid=22505 uid=0 auid=0 ses=253 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204823.788:6641): pid=22513 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=22513 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204823.789:6642): pid=22513 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=22513 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204823.789:6643): pid=22512 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=22513 suid=74 rport=34141 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204823.789:6644): pid=22512 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=22513 suid=74 rport=34141 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_END msg=audit(1389204823.793:6645): pid=22502 uid=0 auid=0 ses=253 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRED_DISP msg=audit(1389204823.796:6646): pid=22502 uid=0 auid=0 ses=253 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204823.799:6647): pid=22502 uid=0 auid=0 ses=253 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1389204823.801:6648): pid=22502 uid=0 auid=0 ses=253 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204823.801:6649): pid=22502 uid=0 auid=0 ses=253 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=22502 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204823.801:6650): pid=22502 uid=0 auid=0 ses=253 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=22502 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204823.801:6651): pid=22502 uid=0 auid=0 ses=253 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=22502 suid=0 rport=34140 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204824.361:6652): pid=22512 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=34141 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204824.361:6653): pid=22512 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=4096 fp=8b:56:b0:3f:c8:ad:38:a6:94:f4:a7:26:83:75:cc:85 rport=34141 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_ACCT msg=audit(1389204824.397:6654): pid=22512 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204824.397:6655): pid=22512 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=22513 suid=74 rport=34141 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204824.399:6656): pid=22512 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1389204824.433:6657): pid=22512 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=LOGIN msg=audit(1389204824.433:6658): login pid=22512 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=254 >type=USER_ROLE_CHANGE msg=audit(1389204824.545:6659): pid=22512 uid=0 auid=0 ses=254 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204824.583:6660): pid=22512 uid=0 auid=0 ses=254 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1389204824.612:6661): pid=22512 uid=0 auid=0 ses=254 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204824.646:6662): pid=22512 uid=0 auid=0 ses=254 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204824.647:6663): pid=22535 uid=0 auid=0 ses=254 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=22535 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204824.647:6664): pid=22535 uid=0 auid=0 ses=254 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=22535 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRED_REFR msg=audit(1389204824.673:6665): pid=22535 uid=0 auid=0 ses=254 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204824.717:6666): pid=22512 uid=0 auid=0 ses=254 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRED_DISP msg=audit(1389204824.751:6667): pid=22512 uid=0 auid=0 ses=254 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204824.785:6668): pid=22512 uid=0 auid=0 ses=254 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1389204824.818:6669): pid=22512 uid=0 auid=0 ses=254 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204824.818:6670): pid=22512 uid=0 auid=0 ses=254 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=22512 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204824.818:6671): pid=22512 uid=0 auid=0 ses=254 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=22512 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204824.818:6672): pid=22512 uid=0 auid=0 ses=254 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=22512 suid=0 rport=34141 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=NETFILTER_CFG msg=audit(1389204826.413:6673): table=filter family=2 entries=0 >type=NETFILTER_CFG msg=audit(1389204826.413:6673): table=nat family=2 entries=0 >type=NETFILTER_CFG msg=audit(1389204826.413:6673): table=mangle family=2 entries=0 >type=NETFILTER_CFG msg=audit(1389204826.413:6673): table=filter family=10 entries=0 >type=SYSCALL msg=audit(1389204826.413:6673): arch=c000003e syscall=272 success=yes exit=0 a0=40000000 a1=c0 a2=0 a3=7fffe28f8ab0 items=0 ppid=22743 pid=22750 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=250 tty=(none) comm="ip" exe="/usr/sbin/ip" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null) >type=NETFILTER_CFG msg=audit(1389204826.428:6674): table=filter family=2 entries=0 >type=NETFILTER_CFG msg=audit(1389204826.428:6674): table=nat family=2 entries=0 >type=NETFILTER_CFG msg=audit(1389204826.428:6674): table=mangle family=2 entries=0 >type=NETFILTER_CFG msg=audit(1389204826.428:6674): table=filter family=10 entries=0 >type=SYSCALL msg=audit(1389204826.428:6674): arch=c000003e syscall=272 success=yes exit=0 a0=40000000 a1=c0 a2=0 a3=7fffc2491fd0 items=0 ppid=22743 pid=22754 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=250 tty=(none) comm="ip" exe="/usr/sbin/ip" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null) >type=NETFILTER_CFG msg=audit(1389204826.693:6675): table=filter family=2 entries=0 >type=NETFILTER_CFG msg=audit(1389204826.693:6675): table=nat family=2 entries=0 >type=NETFILTER_CFG msg=audit(1389204826.693:6675): table=mangle family=2 entries=0 >type=NETFILTER_CFG msg=audit(1389204826.693:6675): table=filter family=10 entries=0 >type=SYSCALL msg=audit(1389204826.693:6675): arch=c000003e syscall=272 success=yes exit=0 a0=40000000 a1=c0 a2=0 a3=7fff5fea3b60 items=0 ppid=22743 pid=22756 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=250 tty=(none) comm="ip" exe="/usr/sbin/ip" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null) >type=CRYPTO_KEY_USER msg=audit(1389204827.712:6676): pid=22775 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=22775 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204827.712:6677): pid=22775 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=22775 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204827.713:6678): pid=22774 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=22775 suid=74 rport=34142 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204827.713:6679): pid=22774 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=22775 suid=74 rport=34142 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204828.333:6680): pid=22774 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=34142 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204828.333:6681): pid=22774 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=4096 fp=8b:56:b0:3f:c8:ad:38:a6:94:f4:a7:26:83:75:cc:85 rport=34142 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_ACCT msg=audit(1389204828.352:6682): pid=22774 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204828.353:6683): pid=22774 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=22775 suid=74 rport=34142 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204828.365:6684): pid=22774 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1389204828.399:6685): pid=22774 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=LOGIN msg=audit(1389204828.399:6686): login pid=22774 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=255 >type=USER_ROLE_CHANGE msg=audit(1389204828.498:6687): pid=22774 uid=0 auid=0 ses=255 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204828.537:6688): pid=22774 uid=0 auid=0 ses=255 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1389204828.574:6689): pid=22774 uid=0 auid=0 ses=255 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204828.607:6690): pid=22774 uid=0 auid=0 ses=255 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204828.608:6691): pid=22796 uid=0 auid=0 ses=255 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=22796 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204828.608:6692): pid=22796 uid=0 auid=0 ses=255 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=22796 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRED_REFR msg=audit(1389204828.635:6693): pid=22796 uid=0 auid=0 ses=255 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204828.689:6694): pid=22774 uid=0 auid=0 ses=255 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRED_DISP msg=audit(1389204828.722:6695): pid=22774 uid=0 auid=0 ses=255 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204828.756:6696): pid=22774 uid=0 auid=0 ses=255 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1389204828.789:6697): pid=22774 uid=0 auid=0 ses=255 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204828.789:6698): pid=22774 uid=0 auid=0 ses=255 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=22774 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204828.789:6699): pid=22774 uid=0 auid=0 ses=255 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=22774 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204828.789:6700): pid=22774 uid=0 auid=0 ses=255 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=22774 suid=0 rport=34142 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204831.686:6701): pid=22811 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=22811 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204831.686:6702): pid=22811 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=22811 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204831.686:6703): pid=22810 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=22811 suid=74 rport=34144 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204831.687:6704): pid=22810 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=22811 suid=74 rport=34144 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=ADD_GROUP msg=audit(1389204831.699:6705): pid=22806 uid=0 auid=0 ses=250 subj=unconfined_u:system_r:groupadd_t:s0-s0:c0.c1023 msg='op=adding group to /etc/group id=991 exe="/usr/sbin/groupadd" hostname=? addr=? terminal=? res=success' >type=ADD_GROUP msg=audit(1389204831.705:6706): pid=22806 uid=0 auid=0 ses=250 subj=unconfined_u:system_r:groupadd_t:s0-s0:c0.c1023 msg='op=adding group to /etc/gshadow id=991 exe="/usr/sbin/groupadd" hostname=? addr=? terminal=? res=success' >type=ADD_GROUP msg=audit(1389204831.705:6707): pid=22806 uid=0 auid=0 ses=250 subj=unconfined_u:system_r:groupadd_t:s0-s0:c0.c1023 msg='op= id=991 exe="/usr/sbin/groupadd" hostname=? addr=? terminal=? res=success' >type=ADD_USER msg=audit(1389204831.722:6708): pid=22816 uid=0 auid=0 ses=250 subj=unconfined_u:system_r:useradd_t:s0-s0:c0.c1023 msg='op=adding user id=994 exe="/usr/sbin/useradd" hostname=? addr=? terminal=? res=success' >type=USER_AUTH msg=audit(1389204832.208:6709): pid=22810 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=34144 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204832.208:6710): pid=22810 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=4096 fp=8b:56:b0:3f:c8:ad:38:a6:94:f4:a7:26:83:75:cc:85 rport=34144 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_ACCT msg=audit(1389204832.214:6711): pid=22810 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204832.214:6712): pid=22810 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=22811 suid=74 rport=34144 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204832.217:6713): pid=22810 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1389204832.219:6714): pid=22810 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=LOGIN msg=audit(1389204832.219:6715): login pid=22810 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=256 >type=USER_ROLE_CHANGE msg=audit(1389204832.266:6716): pid=22810 uid=0 auid=0 ses=256 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204832.327:6717): pid=22810 uid=0 auid=0 ses=256 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1389204832.343:6718): pid=22810 uid=0 auid=0 ses=256 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204832.347:6719): pid=22810 uid=0 auid=0 ses=256 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204832.348:6720): pid=22832 uid=0 auid=0 ses=256 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=22832 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204832.349:6721): pid=22832 uid=0 auid=0 ses=256 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=22832 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRED_REFR msg=audit(1389204832.351:6722): pid=22832 uid=0 auid=0 ses=256 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204832.417:6723): pid=22810 uid=0 auid=0 ses=256 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRED_DISP msg=audit(1389204832.432:6724): pid=22810 uid=0 auid=0 ses=256 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204832.434:6725): pid=22810 uid=0 auid=0 ses=256 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1389204832.436:6726): pid=22810 uid=0 auid=0 ses=256 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204832.436:6727): pid=22810 uid=0 auid=0 ses=256 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=22810 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204832.437:6728): pid=22810 uid=0 auid=0 ses=256 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=22810 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204832.437:6729): pid=22810 uid=0 auid=0 ses=256 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=22810 suid=0 rport=34144 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=SERVICE_START msg=audit(1389204832.979:6730): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="memcached" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=NETFILTER_CFG msg=audit(1389204833.198:6731): table=filter family=2 entries=39 >type=SYSCALL msg=audit(1389204833.198:6731): arch=c000003e syscall=54 success=yes exit=0 a0=3 a1=0 a2=40 a3=13e7250 items=0 ppid=22262 pid=22883 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=250 tty=(none) comm="iptables" exe="/usr/sbin/xtables-multi" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null) >type=CRYPTO_KEY_USER msg=audit(1389204835.402:6732): pid=22895 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=22895 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204835.402:6733): pid=22895 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=22895 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204835.403:6734): pid=22894 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=22895 suid=74 rport=34145 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204835.403:6735): pid=22894 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=22895 suid=74 rport=34145 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204835.933:6736): pid=22894 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=34145 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204835.933:6737): pid=22894 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=4096 fp=8b:56:b0:3f:c8:ad:38:a6:94:f4:a7:26:83:75:cc:85 rport=34145 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_ACCT msg=audit(1389204835.938:6738): pid=22894 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204835.938:6739): pid=22894 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=22895 suid=74 rport=34145 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204835.939:6740): pid=22894 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1389204835.942:6741): pid=22894 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=LOGIN msg=audit(1389204835.942:6742): login pid=22894 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=257 >type=USER_ROLE_CHANGE msg=audit(1389204835.996:6743): pid=22894 uid=0 auid=0 ses=257 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204836.054:6744): pid=22894 uid=0 auid=0 ses=257 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1389204836.061:6745): pid=22894 uid=0 auid=0 ses=257 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204836.065:6746): pid=22894 uid=0 auid=0 ses=257 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204836.067:6747): pid=22897 uid=0 auid=0 ses=257 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=22897 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204836.067:6748): pid=22897 uid=0 auid=0 ses=257 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=22897 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRED_REFR msg=audit(1389204836.071:6749): pid=22897 uid=0 auid=0 ses=257 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204836.104:6750): pid=22894 uid=0 auid=0 ses=257 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRED_DISP msg=audit(1389204836.107:6751): pid=22894 uid=0 auid=0 ses=257 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204836.110:6752): pid=22894 uid=0 auid=0 ses=257 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1389204836.112:6753): pid=22894 uid=0 auid=0 ses=257 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204836.112:6754): pid=22894 uid=0 auid=0 ses=257 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=22894 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204836.112:6755): pid=22894 uid=0 auid=0 ses=257 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=22894 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204836.113:6756): pid=22894 uid=0 auid=0 ses=257 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=22894 suid=0 rport=34145 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204839.121:6757): pid=22906 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=22906 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204839.121:6758): pid=22906 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=22906 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204839.122:6759): pid=22905 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=22906 suid=74 rport=34146 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204839.122:6760): pid=22905 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=22906 suid=74 rport=34146 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204839.716:6761): pid=22905 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=34146 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204839.716:6762): pid=22905 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=4096 fp=8b:56:b0:3f:c8:ad:38:a6:94:f4:a7:26:83:75:cc:85 rport=34146 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_ACCT msg=audit(1389204839.752:6763): pid=22905 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204839.752:6764): pid=22905 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=22906 suid=74 rport=34146 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204839.754:6765): pid=22905 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1389204839.781:6766): pid=22905 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=LOGIN msg=audit(1389204839.781:6767): login pid=22905 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=258 >type=USER_ROLE_CHANGE msg=audit(1389204839.878:6768): pid=22905 uid=0 auid=0 ses=258 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204839.906:6769): pid=22905 uid=0 auid=0 ses=258 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1389204839.943:6770): pid=22905 uid=0 auid=0 ses=258 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204839.976:6771): pid=22905 uid=0 auid=0 ses=258 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204839.977:6772): pid=22908 uid=0 auid=0 ses=258 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=22908 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204839.977:6773): pid=22908 uid=0 auid=0 ses=258 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=22908 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRED_REFR msg=audit(1389204839.991:6774): pid=22908 uid=0 auid=0 ses=258 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204840.036:6775): pid=22905 uid=0 auid=0 ses=258 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRED_DISP msg=audit(1389204840.069:6776): pid=22905 uid=0 auid=0 ses=258 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204840.103:6777): pid=22905 uid=0 auid=0 ses=258 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1389204840.136:6778): pid=22905 uid=0 auid=0 ses=258 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204840.136:6779): pid=22905 uid=0 auid=0 ses=258 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=22905 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204840.136:6780): pid=22905 uid=0 auid=0 ses=258 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=22905 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204840.136:6781): pid=22905 uid=0 auid=0 ses=258 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=22905 suid=0 rport=34146 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204843.037:6782): pid=22917 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=22917 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204843.037:6783): pid=22917 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=22917 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204843.037:6784): pid=22916 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=22917 suid=74 rport=34147 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204843.037:6785): pid=22916 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=22917 suid=74 rport=34147 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_CMD msg=audit(1389204843.465:6786): pid=22918 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D43204C414E473D4320766773202D2D6E6F68656164696E6773202D2D756E69743D67202D6F206E616D652C73697A652C667265652C6C765F636F756E742C75756964202D2D736570617261746F72203A202D2D6E6F7375666669782063696E6465722D766F6C756D6573 terminal=? res=success' >type=USER_START msg=audit(1389204843.478:6787): pid=22918 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1389204843.567:6788): pid=22918 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_AUTH msg=audit(1389204843.603:6789): pid=22916 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=34147 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204843.603:6790): pid=22916 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=4096 fp=8b:56:b0:3f:c8:ad:38:a6:94:f4:a7:26:83:75:cc:85 rport=34147 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_ACCT msg=audit(1389204843.632:6791): pid=22916 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204843.632:6792): pid=22916 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=22917 suid=74 rport=34147 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204843.641:6793): pid=22916 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1389204843.653:6794): pid=22916 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=LOGIN msg=audit(1389204843.653:6795): login pid=22916 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=259 >type=USER_ROLE_CHANGE msg=audit(1389204843.804:6796): pid=22916 uid=0 auid=0 ses=259 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204843.837:6797): pid=22916 uid=0 auid=0 ses=259 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1389204843.873:6798): pid=22916 uid=0 auid=0 ses=259 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204843.906:6799): pid=22916 uid=0 auid=0 ses=259 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204843.907:6800): pid=22923 uid=0 auid=0 ses=259 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=22923 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204843.907:6801): pid=22923 uid=0 auid=0 ses=259 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=22923 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRED_REFR msg=audit(1389204843.941:6802): pid=22923 uid=0 auid=0 ses=259 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204843.997:6803): pid=22916 uid=0 auid=0 ses=259 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRED_DISP msg=audit(1389204844.030:6804): pid=22916 uid=0 auid=0 ses=259 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204844.064:6805): pid=22916 uid=0 auid=0 ses=259 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1389204844.097:6806): pid=22916 uid=0 auid=0 ses=259 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204844.097:6807): pid=22916 uid=0 auid=0 ses=259 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=22916 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204844.097:6808): pid=22916 uid=0 auid=0 ses=259 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=22916 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204844.097:6809): pid=22916 uid=0 auid=0 ses=259 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=22916 suid=0 rport=34147 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=MAC_CONFIG_CHANGE msg=audit(1389204845.942:6810): bool=httpd_can_network_connect val=1 old_val=0 auid=0 ses=250 >type=SYSCALL msg=audit(1389204845.942:6810): arch=c000003e syscall=1 success=yes exit=2 a0=4 a1=7fff446de550 a2=2 a3=7fff446de310 items=0 ppid=22889 pid=22890 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=250 tty=(none) comm="setsebool" exe="/usr/sbin/setsebool" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null) >type=MAC_POLICY_LOAD msg=audit(1389204846.231:6811): policy loaded auid=0 ses=250 >type=SYSCALL msg=audit(1389204846.231:6811): arch=c000003e syscall=1 success=yes exit=3256851 a0=4 a1=7fa2b3713010 a2=31b213 a3=7fff4c836d00 items=0 ppid=22890 pid=22928 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=250 tty=(none) comm="load_policy" exe="/usr/sbin/load_policy" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null) >type=CRYPTO_KEY_USER msg=audit(1389204846.995:6812): pid=22934 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=22934 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204846.995:6813): pid=22934 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=22934 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204846.996:6814): pid=22933 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=22934 suid=74 rport=34148 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204846.996:6815): pid=22933 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=22934 suid=74 rport=34148 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204847.567:6816): pid=22933 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=34148 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204847.567:6817): pid=22933 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=4096 fp=8b:56:b0:3f:c8:ad:38:a6:94:f4:a7:26:83:75:cc:85 rport=34148 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_ACCT msg=audit(1389204847.603:6818): pid=22933 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204847.603:6819): pid=22933 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=22934 suid=74 rport=34148 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204847.604:6820): pid=22933 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1389204847.638:6821): pid=22933 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=LOGIN msg=audit(1389204847.638:6822): login pid=22933 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=260 >type=USER_ROLE_CHANGE msg=audit(1389204847.734:6823): pid=22933 uid=0 auid=0 ses=260 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_AVC msg=audit(1389204847.745:6824): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='avc: received policyload notice (seqno=2) exe="/usr/lib/systemd/systemd" sauid=0 hostname=? addr=? terminal=?' >type=USER_AVC msg=audit(1389204847.745:6825): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='avc: received policyload notice (seqno=3) exe="/usr/lib/systemd/systemd" sauid=0 hostname=? addr=? terminal=?' >type=USER_START msg=audit(1389204847.773:6826): pid=22933 uid=0 auid=0 ses=260 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1389204847.809:6827): pid=22933 uid=0 auid=0 ses=260 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204847.843:6828): pid=22933 uid=0 auid=0 ses=260 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204847.844:6829): pid=22945 uid=0 auid=0 ses=260 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=22945 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204847.844:6830): pid=22945 uid=0 auid=0 ses=260 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=22945 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRED_REFR msg=audit(1389204847.853:6831): pid=22945 uid=0 auid=0 ses=260 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204847.903:6832): pid=22933 uid=0 auid=0 ses=260 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRED_DISP msg=audit(1389204847.936:6833): pid=22933 uid=0 auid=0 ses=260 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204847.970:6834): pid=22933 uid=0 auid=0 ses=260 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1389204848.003:6835): pid=22933 uid=0 auid=0 ses=260 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204848.003:6836): pid=22933 uid=0 auid=0 ses=260 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=22933 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204848.003:6837): pid=22933 uid=0 auid=0 ses=260 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=22933 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204848.003:6838): pid=22933 uid=0 auid=0 ses=260 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=22933 suid=0 rport=34148 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204850.902:6839): pid=22964 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=22964 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204850.902:6840): pid=22964 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=22964 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204850.903:6841): pid=22963 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=22964 suid=74 rport=34154 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204850.903:6842): pid=22963 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=22964 suid=74 rport=34154 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204851.477:6843): pid=22963 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=34154 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204851.477:6844): pid=22963 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=4096 fp=8b:56:b0:3f:c8:ad:38:a6:94:f4:a7:26:83:75:cc:85 rport=34154 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_ACCT msg=audit(1389204851.483:6845): pid=22963 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204851.483:6846): pid=22963 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=22964 suid=74 rport=34154 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204851.484:6847): pid=22963 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1389204851.487:6848): pid=22963 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=LOGIN msg=audit(1389204851.487:6849): login pid=22963 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=261 >type=USER_ROLE_CHANGE msg=audit(1389204851.532:6850): pid=22963 uid=0 auid=0 ses=261 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204851.551:6851): pid=22963 uid=0 auid=0 ses=261 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1389204851.557:6852): pid=22963 uid=0 auid=0 ses=261 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204851.559:6853): pid=22963 uid=0 auid=0 ses=261 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204851.561:6854): pid=22966 uid=0 auid=0 ses=261 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=22966 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204851.561:6855): pid=22966 uid=0 auid=0 ses=261 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=22966 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRED_REFR msg=audit(1389204851.564:6856): pid=22966 uid=0 auid=0 ses=261 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204851.588:6857): pid=22963 uid=0 auid=0 ses=261 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRED_DISP msg=audit(1389204851.590:6858): pid=22963 uid=0 auid=0 ses=261 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204851.592:6859): pid=22963 uid=0 auid=0 ses=261 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1389204851.595:6860): pid=22963 uid=0 auid=0 ses=261 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204851.595:6861): pid=22963 uid=0 auid=0 ses=261 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=22963 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204851.595:6862): pid=22963 uid=0 auid=0 ses=261 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=22963 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204851.595:6863): pid=22963 uid=0 auid=0 ses=261 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=22963 suid=0 rport=34154 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=ADD_GROUP msg=audit(1389204852.843:6864): pid=22974 uid=0 auid=0 ses=250 subj=unconfined_u:system_r:useradd_t:s0-s0:c0.c1023 msg='op=adding group acct="apache" exe="/usr/sbin/useradd" hostname=? addr=? terminal=? res=success' >type=ADD_USER msg=audit(1389204852.847:6865): pid=22974 uid=0 auid=0 ses=250 subj=unconfined_u:system_r:useradd_t:s0-s0:c0.c1023 msg='op=adding user id=48 exe="/usr/sbin/useradd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204854.606:6866): pid=23004 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=23004 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204854.606:6867): pid=23004 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=23004 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204854.607:6868): pid=23003 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=23004 suid=74 rport=34155 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204854.607:6869): pid=23003 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=23004 suid=74 rport=34155 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204855.181:6870): pid=23003 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=34155 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204855.181:6871): pid=23003 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=4096 fp=8b:56:b0:3f:c8:ad:38:a6:94:f4:a7:26:83:75:cc:85 rport=34155 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_ACCT msg=audit(1389204855.212:6872): pid=23003 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204855.213:6873): pid=23003 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=23004 suid=74 rport=34155 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204855.214:6874): pid=23003 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1389204855.247:6875): pid=23003 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=LOGIN msg=audit(1389204855.247:6876): login pid=23003 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=262 >type=USER_ROLE_CHANGE msg=audit(1389204855.348:6877): pid=23003 uid=0 auid=0 ses=262 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204855.439:6878): pid=23003 uid=0 auid=0 ses=262 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1389204855.472:6879): pid=23003 uid=0 auid=0 ses=262 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204855.505:6880): pid=23003 uid=0 auid=0 ses=262 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204855.506:6881): pid=23006 uid=0 auid=0 ses=262 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=23006 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204855.506:6882): pid=23006 uid=0 auid=0 ses=262 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=23006 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRED_REFR msg=audit(1389204855.540:6883): pid=23006 uid=0 auid=0 ses=262 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204855.583:6884): pid=23003 uid=0 auid=0 ses=262 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRED_DISP msg=audit(1389204855.616:6885): pid=23003 uid=0 auid=0 ses=262 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204855.650:6886): pid=23003 uid=0 auid=0 ses=262 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1389204855.683:6887): pid=23003 uid=0 auid=0 ses=262 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204855.683:6888): pid=23003 uid=0 auid=0 ses=262 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=23003 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204855.683:6889): pid=23003 uid=0 auid=0 ses=262 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=23003 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204855.683:6890): pid=23003 uid=0 auid=0 ses=262 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=23003 suid=0 rport=34155 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204858.576:6891): pid=23027 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=23027 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204858.576:6892): pid=23027 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=23027 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204858.577:6893): pid=23026 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=23027 suid=74 rport=34162 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204858.577:6894): pid=23026 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=23027 suid=74 rport=34162 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204859.472:6895): pid=23026 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=34162 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204859.472:6896): pid=23026 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=4096 fp=8b:56:b0:3f:c8:ad:38:a6:94:f4:a7:26:83:75:cc:85 rport=34162 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_ACCT msg=audit(1389204859.478:6897): pid=23026 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204859.478:6898): pid=23026 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=23027 suid=74 rport=34162 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204859.480:6899): pid=23026 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1389204859.483:6900): pid=23026 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=LOGIN msg=audit(1389204859.483:6901): login pid=23026 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=263 >type=USER_ROLE_CHANGE msg=audit(1389204859.531:6902): pid=23026 uid=0 auid=0 ses=263 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204859.555:6903): pid=23026 uid=0 auid=0 ses=263 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1389204859.563:6904): pid=23026 uid=0 auid=0 ses=263 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204859.566:6905): pid=23026 uid=0 auid=0 ses=263 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204859.566:6906): pid=23031 uid=0 auid=0 ses=263 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=23031 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204859.566:6907): pid=23031 uid=0 auid=0 ses=263 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=23031 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRED_REFR msg=audit(1389204859.569:6908): pid=23031 uid=0 auid=0 ses=263 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204859.597:6909): pid=23026 uid=0 auid=0 ses=263 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRED_DISP msg=audit(1389204859.600:6910): pid=23026 uid=0 auid=0 ses=263 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204859.603:6911): pid=23026 uid=0 auid=0 ses=263 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1389204859.607:6912): pid=23026 uid=0 auid=0 ses=263 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204859.607:6913): pid=23026 uid=0 auid=0 ses=263 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=23026 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204859.607:6914): pid=23026 uid=0 auid=0 ses=263 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=23026 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204859.607:6915): pid=23026 uid=0 auid=0 ses=263 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=23026 suid=0 rport=34162 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204862.610:6916): pid=23057 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=23057 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204862.611:6917): pid=23057 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=23057 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204862.611:6918): pid=23056 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=23057 suid=74 rport=34164 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204862.611:6919): pid=23056 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=23057 suid=74 rport=34164 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204863.185:6920): pid=23056 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=34164 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204863.185:6921): pid=23056 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=4096 fp=8b:56:b0:3f:c8:ad:38:a6:94:f4:a7:26:83:75:cc:85 rport=34164 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_ACCT msg=audit(1389204863.191:6922): pid=23056 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204863.191:6923): pid=23056 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=23057 suid=74 rport=34164 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204863.192:6924): pid=23056 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1389204863.196:6925): pid=23056 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=LOGIN msg=audit(1389204863.196:6926): login pid=23056 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=264 >type=USER_ROLE_CHANGE msg=audit(1389204863.239:6927): pid=23056 uid=0 auid=0 ses=264 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204863.256:6928): pid=23056 uid=0 auid=0 ses=264 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1389204863.261:6929): pid=23056 uid=0 auid=0 ses=264 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204863.263:6930): pid=23056 uid=0 auid=0 ses=264 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204863.265:6931): pid=23060 uid=0 auid=0 ses=264 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=23060 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204863.265:6932): pid=23060 uid=0 auid=0 ses=264 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=23060 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRED_REFR msg=audit(1389204863.268:6933): pid=23060 uid=0 auid=0 ses=264 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204863.290:6934): pid=23056 uid=0 auid=0 ses=264 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRED_DISP msg=audit(1389204863.293:6935): pid=23056 uid=0 auid=0 ses=264 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204863.295:6936): pid=23056 uid=0 auid=0 ses=264 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1389204863.297:6937): pid=23056 uid=0 auid=0 ses=264 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204863.298:6938): pid=23056 uid=0 auid=0 ses=264 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=23056 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204863.298:6939): pid=23056 uid=0 auid=0 ses=264 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=23056 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204863.298:6940): pid=23056 uid=0 auid=0 ses=264 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=23056 suid=0 rport=34164 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204866.310:6941): pid=23069 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=23069 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204866.310:6942): pid=23069 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=23069 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204866.310:6943): pid=23068 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=23069 suid=74 rport=34165 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204866.310:6944): pid=23068 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=23069 suid=74 rport=34165 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204866.848:6945): pid=23068 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=34165 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204866.848:6946): pid=23068 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=4096 fp=8b:56:b0:3f:c8:ad:38:a6:94:f4:a7:26:83:75:cc:85 rport=34165 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_ACCT msg=audit(1389204866.854:6947): pid=23068 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204866.854:6948): pid=23068 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=23069 suid=74 rport=34165 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204866.855:6949): pid=23068 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1389204866.858:6950): pid=23068 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=LOGIN msg=audit(1389204866.858:6951): login pid=23068 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=265 >type=USER_ROLE_CHANGE msg=audit(1389204866.899:6952): pid=23068 uid=0 auid=0 ses=265 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204866.914:6953): pid=23068 uid=0 auid=0 ses=265 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1389204866.918:6954): pid=23068 uid=0 auid=0 ses=265 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204866.920:6955): pid=23068 uid=0 auid=0 ses=265 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204866.921:6956): pid=23071 uid=0 auid=0 ses=265 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=23071 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204866.921:6957): pid=23071 uid=0 auid=0 ses=265 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=23071 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRED_REFR msg=audit(1389204866.924:6958): pid=23071 uid=0 auid=0 ses=265 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204866.948:6959): pid=23068 uid=0 auid=0 ses=265 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRED_DISP msg=audit(1389204866.950:6960): pid=23068 uid=0 auid=0 ses=265 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204866.952:6961): pid=23068 uid=0 auid=0 ses=265 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1389204866.954:6962): pid=23068 uid=0 auid=0 ses=265 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204866.954:6963): pid=23068 uid=0 auid=0 ses=265 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=23068 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204866.954:6964): pid=23068 uid=0 auid=0 ses=265 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=23068 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204866.954:6965): pid=23068 uid=0 auid=0 ses=265 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=23068 suid=0 rport=34165 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204869.968:6966): pid=23080 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=23080 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204869.969:6967): pid=23080 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=23080 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204869.970:6968): pid=23079 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=23080 suid=74 rport=34166 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204869.970:6969): pid=23079 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=23080 suid=74 rport=34166 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204870.546:6970): pid=23079 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=34166 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204870.546:6971): pid=23079 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=4096 fp=8b:56:b0:3f:c8:ad:38:a6:94:f4:a7:26:83:75:cc:85 rport=34166 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_ACCT msg=audit(1389204870.551:6972): pid=23079 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204870.551:6973): pid=23079 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=23080 suid=74 rport=34166 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204870.552:6974): pid=23079 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1389204870.555:6975): pid=23079 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=LOGIN msg=audit(1389204870.555:6976): login pid=23079 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=266 >type=USER_ROLE_CHANGE msg=audit(1389204870.596:6977): pid=23079 uid=0 auid=0 ses=266 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204870.612:6978): pid=23079 uid=0 auid=0 ses=266 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1389204870.617:6979): pid=23079 uid=0 auid=0 ses=266 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204870.619:6980): pid=23079 uid=0 auid=0 ses=266 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204870.620:6981): pid=23082 uid=0 auid=0 ses=266 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=23082 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204870.620:6982): pid=23082 uid=0 auid=0 ses=266 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=23082 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRED_REFR msg=audit(1389204870.623:6983): pid=23082 uid=0 auid=0 ses=266 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204870.645:6984): pid=23079 uid=0 auid=0 ses=266 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRED_DISP msg=audit(1389204870.647:6985): pid=23079 uid=0 auid=0 ses=266 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204870.649:6986): pid=23079 uid=0 auid=0 ses=266 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1389204870.651:6987): pid=23079 uid=0 auid=0 ses=266 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204870.651:6988): pid=23079 uid=0 auid=0 ses=266 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=23079 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204870.651:6989): pid=23079 uid=0 auid=0 ses=266 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=23079 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204870.652:6990): pid=23079 uid=0 auid=0 ses=266 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=23079 suid=0 rport=34166 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204873.661:6991): pid=23091 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=23091 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204873.661:6992): pid=23091 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=23091 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204873.662:6993): pid=23090 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=23091 suid=74 rport=34167 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204873.662:6994): pid=23090 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=23091 suid=74 rport=34167 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204875.137:6995): pid=23090 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=34167 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204875.137:6996): pid=23090 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=4096 fp=8b:56:b0:3f:c8:ad:38:a6:94:f4:a7:26:83:75:cc:85 rport=34167 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_ACCT msg=audit(1389204875.143:6997): pid=23090 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204875.143:6998): pid=23090 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=23091 suid=74 rport=34167 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204875.145:6999): pid=23090 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1389204875.147:7000): pid=23090 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=LOGIN msg=audit(1389204875.147:7001): login pid=23090 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=267 >type=USER_ROLE_CHANGE msg=audit(1389204875.188:7002): pid=23090 uid=0 auid=0 ses=267 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204875.204:7003): pid=23090 uid=0 auid=0 ses=267 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1389204875.208:7004): pid=23090 uid=0 auid=0 ses=267 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204875.210:7005): pid=23090 uid=0 auid=0 ses=267 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204875.211:7006): pid=23093 uid=0 auid=0 ses=267 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=23093 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204875.211:7007): pid=23093 uid=0 auid=0 ses=267 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=23093 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRED_REFR msg=audit(1389204875.214:7008): pid=23093 uid=0 auid=0 ses=267 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204875.236:7009): pid=23090 uid=0 auid=0 ses=267 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRED_DISP msg=audit(1389204875.238:7010): pid=23090 uid=0 auid=0 ses=267 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204875.240:7011): pid=23090 uid=0 auid=0 ses=267 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1389204875.242:7012): pid=23090 uid=0 auid=0 ses=267 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204875.242:7013): pid=23090 uid=0 auid=0 ses=267 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=23090 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204875.243:7014): pid=23090 uid=0 auid=0 ses=267 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=23090 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204875.243:7015): pid=23090 uid=0 auid=0 ses=267 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=23090 suid=0 rport=34167 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204878.253:7016): pid=23114 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=23114 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204878.253:7017): pid=23114 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=23114 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204878.254:7018): pid=23113 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=23114 suid=74 rport=34168 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204878.254:7019): pid=23113 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=23114 suid=74 rport=34168 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204878.836:7020): pid=23113 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=34168 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204878.836:7021): pid=23113 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=4096 fp=8b:56:b0:3f:c8:ad:38:a6:94:f4:a7:26:83:75:cc:85 rport=34168 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_ACCT msg=audit(1389204878.873:7022): pid=23113 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204878.873:7023): pid=23113 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=23114 suid=74 rport=34168 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204878.875:7024): pid=23113 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1389204878.908:7025): pid=23113 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=LOGIN msg=audit(1389204878.908:7026): login pid=23113 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=268 >type=USER_ROLE_CHANGE msg=audit(1389204879.004:7027): pid=23113 uid=0 auid=0 ses=268 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204879.046:7028): pid=23113 uid=0 auid=0 ses=268 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1389204879.082:7029): pid=23113 uid=0 auid=0 ses=268 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204879.116:7030): pid=23113 uid=0 auid=0 ses=268 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204879.117:7031): pid=23116 uid=0 auid=0 ses=268 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=23116 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204879.117:7032): pid=23116 uid=0 auid=0 ses=268 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=23116 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRED_REFR msg=audit(1389204879.148:7033): pid=23116 uid=0 auid=0 ses=268 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204879.202:7034): pid=23113 uid=0 auid=0 ses=268 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRED_DISP msg=audit(1389204879.235:7035): pid=23113 uid=0 auid=0 ses=268 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204879.269:7036): pid=23113 uid=0 auid=0 ses=268 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1389204879.293:7037): pid=23113 uid=0 auid=0 ses=268 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204879.293:7038): pid=23113 uid=0 auid=0 ses=268 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=23113 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204879.293:7039): pid=23113 uid=0 auid=0 ses=268 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=23113 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204879.293:7040): pid=23113 uid=0 auid=0 ses=268 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=23113 suid=0 rport=34168 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204882.188:7041): pid=23137 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=23137 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204882.188:7042): pid=23137 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=23137 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204882.189:7043): pid=23136 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=23137 suid=74 rport=34175 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204882.189:7044): pid=23136 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=23137 suid=74 rport=34175 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204883.014:7045): pid=23136 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=34175 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204883.014:7046): pid=23136 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=4096 fp=8b:56:b0:3f:c8:ad:38:a6:94:f4:a7:26:83:75:cc:85 rport=34175 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_ACCT msg=audit(1389204883.019:7047): pid=23136 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204883.019:7048): pid=23136 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=23137 suid=74 rport=34175 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204883.020:7049): pid=23136 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1389204883.023:7050): pid=23136 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=LOGIN msg=audit(1389204883.023:7051): login pid=23136 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=269 >type=USER_ROLE_CHANGE msg=audit(1389204883.066:7052): pid=23136 uid=0 auid=0 ses=269 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204883.083:7053): pid=23136 uid=0 auid=0 ses=269 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1389204883.088:7054): pid=23136 uid=0 auid=0 ses=269 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204883.090:7055): pid=23136 uid=0 auid=0 ses=269 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204883.091:7056): pid=23139 uid=0 auid=0 ses=269 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=23139 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204883.091:7057): pid=23139 uid=0 auid=0 ses=269 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=23139 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRED_REFR msg=audit(1389204883.093:7058): pid=23139 uid=0 auid=0 ses=269 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204883.116:7059): pid=23136 uid=0 auid=0 ses=269 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRED_DISP msg=audit(1389204883.118:7060): pid=23136 uid=0 auid=0 ses=269 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204883.121:7061): pid=23136 uid=0 auid=0 ses=269 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1389204883.124:7062): pid=23136 uid=0 auid=0 ses=269 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204883.124:7063): pid=23136 uid=0 auid=0 ses=269 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=23136 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204883.124:7064): pid=23136 uid=0 auid=0 ses=269 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=23136 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204883.124:7065): pid=23136 uid=0 auid=0 ses=269 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=23136 suid=0 rport=34175 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204886.134:7066): pid=23149 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=23149 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204886.134:7067): pid=23149 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=23149 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204886.135:7068): pid=23148 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=23149 suid=74 rport=34176 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204886.135:7069): pid=23148 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=23149 suid=74 rport=34176 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204886.683:7070): pid=23148 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=34176 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204886.683:7071): pid=23148 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=4096 fp=8b:56:b0:3f:c8:ad:38:a6:94:f4:a7:26:83:75:cc:85 rport=34176 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_ACCT msg=audit(1389204886.696:7072): pid=23148 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204886.696:7073): pid=23148 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=23149 suid=74 rport=34176 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204886.698:7074): pid=23148 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1389204886.716:7075): pid=23148 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=LOGIN msg=audit(1389204886.716:7076): login pid=23148 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=270 >type=USER_ROLE_CHANGE msg=audit(1389204886.793:7077): pid=23148 uid=0 auid=0 ses=270 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204886.841:7078): pid=23148 uid=0 auid=0 ses=270 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1389204886.877:7079): pid=23148 uid=0 auid=0 ses=270 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204886.910:7080): pid=23148 uid=0 auid=0 ses=270 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204886.911:7081): pid=23159 uid=0 auid=0 ses=270 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=23159 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204886.911:7082): pid=23159 uid=0 auid=0 ses=270 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=23159 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRED_REFR msg=audit(1389204886.935:7083): pid=23159 uid=0 auid=0 ses=270 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204886.978:7084): pid=23148 uid=0 auid=0 ses=270 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRED_DISP msg=audit(1389204887.011:7085): pid=23148 uid=0 auid=0 ses=270 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204887.019:7086): pid=23148 uid=0 auid=0 ses=270 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1389204887.021:7087): pid=23148 uid=0 auid=0 ses=270 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204887.021:7088): pid=23148 uid=0 auid=0 ses=270 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=23148 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204887.022:7089): pid=23148 uid=0 auid=0 ses=270 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=23148 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204887.022:7090): pid=23148 uid=0 auid=0 ses=270 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=23148 suid=0 rport=34176 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=SERVICE_START msg=audit(1389204889.251:7091): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="httpd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204889.974:7092): pid=23242 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=23242 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204889.975:7093): pid=23242 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=23242 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204889.975:7094): pid=23241 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=23242 suid=74 rport=34177 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204889.975:7095): pid=23241 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=23242 suid=74 rport=34177 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204890.510:7096): pid=23241 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=34177 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204890.510:7097): pid=23241 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=4096 fp=8b:56:b0:3f:c8:ad:38:a6:94:f4:a7:26:83:75:cc:85 rport=34177 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_ACCT msg=audit(1389204890.516:7098): pid=23241 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204890.516:7099): pid=23241 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=23242 suid=74 rport=34177 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204890.517:7100): pid=23241 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1389204890.519:7101): pid=23241 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=LOGIN msg=audit(1389204890.519:7102): login pid=23241 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=271 >type=USER_ROLE_CHANGE msg=audit(1389204890.561:7103): pid=23241 uid=0 auid=0 ses=271 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204890.618:7104): pid=23241 uid=0 auid=0 ses=271 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1389204890.625:7105): pid=23241 uid=0 auid=0 ses=271 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204890.627:7106): pid=23241 uid=0 auid=0 ses=271 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204890.628:7107): pid=23244 uid=0 auid=0 ses=271 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=23244 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204890.628:7108): pid=23244 uid=0 auid=0 ses=271 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=23244 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRED_REFR msg=audit(1389204890.631:7109): pid=23244 uid=0 auid=0 ses=271 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204890.663:7110): pid=23241 uid=0 auid=0 ses=271 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204890.665:7111): pid=23250 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=23250 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204890.665:7112): pid=23250 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=23250 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204890.666:7113): pid=23249 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=23250 suid=74 rport=34178 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204890.666:7114): pid=23249 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=23250 suid=74 rport=34178 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRED_DISP msg=audit(1389204890.671:7115): pid=23241 uid=0 auid=0 ses=271 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204890.675:7116): pid=23241 uid=0 auid=0 ses=271 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1389204890.677:7117): pid=23241 uid=0 auid=0 ses=271 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204890.677:7118): pid=23241 uid=0 auid=0 ses=271 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=23241 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204890.677:7119): pid=23241 uid=0 auid=0 ses=271 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=23241 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204890.677:7120): pid=23241 uid=0 auid=0 ses=271 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=23241 suid=0 rport=34177 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204891.184:7121): pid=23249 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=34178 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204891.184:7122): pid=23249 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=4096 fp=8b:56:b0:3f:c8:ad:38:a6:94:f4:a7:26:83:75:cc:85 rport=34178 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_ACCT msg=audit(1389204891.188:7123): pid=23249 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204891.189:7124): pid=23249 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=23250 suid=74 rport=34178 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204891.190:7125): pid=23249 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1389204891.192:7126): pid=23249 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=LOGIN msg=audit(1389204891.192:7127): login pid=23249 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=272 >type=USER_ROLE_CHANGE msg=audit(1389204891.231:7128): pid=23249 uid=0 auid=0 ses=272 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204891.247:7129): pid=23249 uid=0 auid=0 ses=272 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1389204891.251:7130): pid=23249 uid=0 auid=0 ses=272 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204891.253:7131): pid=23249 uid=0 auid=0 ses=272 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204891.254:7132): pid=23253 uid=0 auid=0 ses=272 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=23253 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204891.254:7133): pid=23253 uid=0 auid=0 ses=272 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=23253 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRED_REFR msg=audit(1389204891.257:7134): pid=23253 uid=0 auid=0 ses=272 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204891.294:7135): pid=23249 uid=0 auid=0 ses=272 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204891.295:7136): pid=23267 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=23267 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204891.295:7137): pid=23267 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=23267 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204891.295:7138): pid=23266 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=23267 suid=74 rport=34179 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204891.295:7139): pid=23266 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=23267 suid=74 rport=34179 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRED_DISP msg=audit(1389204891.300:7140): pid=23249 uid=0 auid=0 ses=272 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204891.316:7141): pid=23249 uid=0 auid=0 ses=272 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1389204891.349:7142): pid=23249 uid=0 auid=0 ses=272 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204891.349:7143): pid=23249 uid=0 auid=0 ses=272 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=23249 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204891.349:7144): pid=23249 uid=0 auid=0 ses=272 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=23249 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204891.349:7145): pid=23249 uid=0 auid=0 ses=272 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=23249 suid=0 rport=34178 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=AVC msg=audit(1389204891.734:7146): avc: denied { nlmsg_write } for pid=23272 comm="ip" scontext=system_u:system_r:neutron_t:s0 tcontext=system_u:system_r:neutron_t:s0 tclass=netlink_route_socket >type=SYSCALL msg=audit(1389204891.734:7146): arch=c000003e syscall=44 success=yes exit=32 a0=3 a1=7fff1711e0c0 a2=20 a3=0 items=0 ppid=21505 pid=23272 auid=4294967295 uid=995 gid=992 euid=995 suid=995 fsuid=995 egid=992 sgid=992 fsgid=992 ses=4294967295 tty=(none) comm="ip" exe="/usr/sbin/ip" subj=system_u:system_r:neutron_t:s0 key=(null) >type=USER_AUTH msg=audit(1389204891.866:7147): pid=23266 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=34179 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204891.866:7148): pid=23266 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=4096 fp=8b:56:b0:3f:c8:ad:38:a6:94:f4:a7:26:83:75:cc:85 rport=34179 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_ACCT msg=audit(1389204891.895:7149): pid=23266 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204891.896:7150): pid=23266 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=23267 suid=74 rport=34179 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204891.897:7151): pid=23266 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1389204891.923:7152): pid=23266 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=LOGIN msg=audit(1389204891.923:7153): login pid=23266 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=273 >type=USER_ROLE_CHANGE msg=audit(1389204891.993:7154): pid=23266 uid=0 auid=0 ses=273 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204892.022:7155): pid=23266 uid=0 auid=0 ses=273 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1389204892.034:7156): pid=23266 uid=0 auid=0 ses=273 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204892.042:7157): pid=23266 uid=0 auid=0 ses=273 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204892.043:7158): pid=23310 uid=0 auid=0 ses=273 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=23310 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204892.043:7159): pid=23310 uid=0 auid=0 ses=273 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=23310 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRED_REFR msg=audit(1389204892.051:7160): pid=23310 uid=0 auid=0 ses=273 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204892.075:7161): pid=23266 uid=0 auid=0 ses=273 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRED_DISP msg=audit(1389204892.081:7162): pid=23266 uid=0 auid=0 ses=273 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204892.088:7163): pid=23266 uid=0 auid=0 ses=273 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1389204892.095:7164): pid=23266 uid=0 auid=0 ses=273 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204892.096:7165): pid=23266 uid=0 auid=0 ses=273 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=23266 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204892.096:7166): pid=23266 uid=0 auid=0 ses=273 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=23266 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204892.096:7167): pid=23266 uid=0 auid=0 ses=273 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=23266 suid=0 rport=34179 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=NETFILTER_CFG msg=audit(1389204892.326:7168): table=filter family=2 entries=0 >type=NETFILTER_CFG msg=audit(1389204892.326:7168): table=nat family=2 entries=0 >type=NETFILTER_CFG msg=audit(1389204892.326:7168): table=mangle family=2 entries=0 >type=NETFILTER_CFG msg=audit(1389204892.326:7168): table=filter family=10 entries=0 >type=SYSCALL msg=audit(1389204892.326:7168): arch=c000003e syscall=272 success=yes exit=0 a0=40000000 a1=c0 a2=0 a3=7fff74e10e80 items=0 ppid=23480 pid=23487 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=272 tty=(none) comm="ip" exe="/usr/sbin/ip" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null) >type=NETFILTER_CFG msg=audit(1389204892.345:7169): table=filter family=2 entries=0 >type=NETFILTER_CFG msg=audit(1389204892.345:7169): table=nat family=2 entries=0 >type=NETFILTER_CFG msg=audit(1389204892.345:7169): table=mangle family=2 entries=0 >type=NETFILTER_CFG msg=audit(1389204892.345:7169): table=filter family=10 entries=0 >type=SYSCALL msg=audit(1389204892.345:7169): arch=c000003e syscall=272 success=yes exit=0 a0=40000000 a1=c0 a2=0 a3=7fff154b0020 items=0 ppid=23480 pid=23494 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=272 tty=(none) comm="ip" exe="/usr/sbin/ip" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null) >type=NETFILTER_CFG msg=audit(1389204892.610:7170): table=filter family=2 entries=0 >type=NETFILTER_CFG msg=audit(1389204892.610:7170): table=nat family=2 entries=0 >type=NETFILTER_CFG msg=audit(1389204892.610:7170): table=mangle family=2 entries=0 >type=NETFILTER_CFG msg=audit(1389204892.610:7170): table=filter family=10 entries=0 >type=SYSCALL msg=audit(1389204892.610:7170): arch=c000003e syscall=272 success=yes exit=0 a0=40000000 a1=c0 a2=0 a3=7fffdd7a77f0 items=0 ppid=23480 pid=23496 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=272 tty=(none) comm="ip" exe="/usr/sbin/ip" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null) >type=CRYPTO_KEY_USER msg=audit(1389204895.090:7171): pid=23541 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=23541 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204895.090:7172): pid=23541 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=23541 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204895.090:7173): pid=23540 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=23541 suid=74 rport=34180 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204895.090:7174): pid=23540 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=23541 suid=74 rport=34180 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=NETFILTER_CFG msg=audit(1389204895.487:7175): table=filter family=2 entries=0 >type=NETFILTER_CFG msg=audit(1389204895.487:7175): table=nat family=2 entries=0 >type=NETFILTER_CFG msg=audit(1389204895.487:7175): table=mangle family=2 entries=0 >type=NETFILTER_CFG msg=audit(1389204895.487:7175): table=filter family=10 entries=0 >type=SYSCALL msg=audit(1389204895.487:7175): arch=c000003e syscall=272 success=yes exit=0 a0=40000000 a1=c0 a2=0 a3=7fffac9e9b60 items=0 ppid=23742 pid=23749 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=272 tty=(none) comm="ip" exe="/usr/sbin/ip" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null) >type=USER_AUTH msg=audit(1389204895.641:7176): pid=23540 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=34180 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204895.641:7177): pid=23540 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=4096 fp=8b:56:b0:3f:c8:ad:38:a6:94:f4:a7:26:83:75:cc:85 rport=34180 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_ACCT msg=audit(1389204895.646:7178): pid=23540 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204895.646:7179): pid=23540 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=23541 suid=74 rport=34180 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204895.648:7180): pid=23540 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1389204895.650:7181): pid=23540 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=LOGIN msg=audit(1389204895.650:7182): login pid=23540 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=274 >type=USER_ROLE_CHANGE msg=audit(1389204895.690:7183): pid=23540 uid=0 auid=0 ses=274 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204895.706:7184): pid=23540 uid=0 auid=0 ses=274 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1389204895.710:7185): pid=23540 uid=0 auid=0 ses=274 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204895.712:7186): pid=23540 uid=0 auid=0 ses=274 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204895.713:7187): pid=23755 uid=0 auid=0 ses=274 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=23755 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204895.713:7188): pid=23755 uid=0 auid=0 ses=274 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=23755 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRED_REFR msg=audit(1389204895.715:7189): pid=23755 uid=0 auid=0 ses=274 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204895.737:7190): pid=23540 uid=0 auid=0 ses=274 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRED_DISP msg=audit(1389204895.739:7191): pid=23540 uid=0 auid=0 ses=274 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204895.741:7192): pid=23540 uid=0 auid=0 ses=274 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1389204895.743:7193): pid=23540 uid=0 auid=0 ses=274 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204895.743:7194): pid=23540 uid=0 auid=0 ses=274 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=23540 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204895.743:7195): pid=23540 uid=0 auid=0 ses=274 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=23540 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204895.743:7196): pid=23540 uid=0 auid=0 ses=274 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=23540 suid=0 rport=34180 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=NETFILTER_CFG msg=audit(1389204895.505:7197): table=filter family=2 entries=0 >type=NETFILTER_CFG msg=audit(1389204895.505:7197): table=nat family=2 entries=0 >type=NETFILTER_CFG msg=audit(1389204895.505:7197): table=mangle family=2 entries=0 >type=NETFILTER_CFG msg=audit(1389204895.505:7197): table=filter family=10 entries=0 >type=SYSCALL msg=audit(1389204895.505:7197): arch=c000003e syscall=272 success=yes exit=0 a0=40000000 a1=c0 a2=0 a3=7fffd0a255c0 items=0 ppid=23742 pid=23753 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=272 tty=(none) comm="ip" exe="/usr/sbin/ip" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null) >type=NETFILTER_CFG msg=audit(1389204895.773:7198): table=filter family=2 entries=0 >type=NETFILTER_CFG msg=audit(1389204895.773:7198): table=nat family=2 entries=0 >type=NETFILTER_CFG msg=audit(1389204895.773:7198): table=mangle family=2 entries=0 >type=NETFILTER_CFG msg=audit(1389204895.773:7198): table=filter family=10 entries=0 >type=SYSCALL msg=audit(1389204895.773:7198): arch=c000003e syscall=272 success=yes exit=0 a0=40000000 a1=c0 a2=0 a3=7fff9e1b4f50 items=0 ppid=23742 pid=23761 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=272 tty=(none) comm="ip" exe="/usr/sbin/ip" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null) >type=CRYPTO_KEY_USER msg=audit(1389204898.757:7199): pid=23801 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=23801 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204898.757:7200): pid=23801 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=23801 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204898.757:7201): pid=23800 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=23801 suid=74 rport=34181 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204898.757:7202): pid=23800 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=23801 suid=74 rport=34181 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204899.380:7203): pid=23800 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=34181 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204899.380:7204): pid=23800 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=4096 fp=8b:56:b0:3f:c8:ad:38:a6:94:f4:a7:26:83:75:cc:85 rport=34181 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_ACCT msg=audit(1389204899.414:7205): pid=23800 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204899.414:7206): pid=23800 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=23801 suid=74 rport=34181 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204899.420:7207): pid=23800 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1389204899.426:7208): pid=23800 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=LOGIN msg=audit(1389204899.426:7209): login pid=23800 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=275 >type=USER_ROLE_CHANGE msg=audit(1389204899.558:7210): pid=23800 uid=0 auid=0 ses=275 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204899.595:7211): pid=23800 uid=0 auid=0 ses=275 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1389204899.632:7212): pid=23800 uid=0 auid=0 ses=275 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204899.665:7213): pid=23800 uid=0 auid=0 ses=275 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204899.666:7214): pid=23809 uid=0 auid=0 ses=275 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=23809 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204899.666:7215): pid=23809 uid=0 auid=0 ses=275 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=23809 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRED_REFR msg=audit(1389204899.700:7216): pid=23809 uid=0 auid=0 ses=275 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204899.744:7217): pid=23800 uid=0 auid=0 ses=275 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRED_DISP msg=audit(1389204899.777:7218): pid=23800 uid=0 auid=0 ses=275 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204899.811:7219): pid=23800 uid=0 auid=0 ses=275 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1389204899.844:7220): pid=23800 uid=0 auid=0 ses=275 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204899.844:7221): pid=23800 uid=0 auid=0 ses=275 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=23800 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204899.844:7222): pid=23800 uid=0 auid=0 ses=275 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=23800 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204899.844:7223): pid=23800 uid=0 auid=0 ses=275 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=23800 suid=0 rport=34181 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204902.737:7224): pid=23820 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=23820 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204902.737:7225): pid=23820 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=23820 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204902.738:7226): pid=23819 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=23820 suid=74 rport=34183 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204902.738:7227): pid=23819 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=23820 suid=74 rport=34183 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204903.255:7228): pid=23819 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=34183 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204903.255:7229): pid=23819 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=4096 fp=8b:56:b0:3f:c8:ad:38:a6:94:f4:a7:26:83:75:cc:85 rport=34183 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_ACCT msg=audit(1389204903.261:7230): pid=23819 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204903.261:7231): pid=23819 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=23820 suid=74 rport=34183 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204903.262:7232): pid=23819 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1389204903.265:7233): pid=23819 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=LOGIN msg=audit(1389204903.265:7234): login pid=23819 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=276 >type=USER_ROLE_CHANGE msg=audit(1389204903.306:7235): pid=23819 uid=0 auid=0 ses=276 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204903.372:7236): pid=23819 uid=0 auid=0 ses=276 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1389204903.377:7237): pid=23819 uid=0 auid=0 ses=276 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204903.379:7238): pid=23819 uid=0 auid=0 ses=276 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204903.380:7239): pid=23832 uid=0 auid=0 ses=276 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=23832 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204903.380:7240): pid=23832 uid=0 auid=0 ses=276 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=23832 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRED_REFR msg=audit(1389204903.383:7241): pid=23832 uid=0 auid=0 ses=276 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204903.403:7242): pid=23819 uid=0 auid=0 ses=276 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRED_DISP msg=audit(1389204903.405:7243): pid=23819 uid=0 auid=0 ses=276 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204903.407:7244): pid=23819 uid=0 auid=0 ses=276 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1389204903.409:7245): pid=23819 uid=0 auid=0 ses=276 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204903.409:7246): pid=23819 uid=0 auid=0 ses=276 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=23819 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204903.409:7247): pid=23819 uid=0 auid=0 ses=276 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=23819 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204903.409:7248): pid=23819 uid=0 auid=0 ses=276 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=23819 suid=0 rport=34183 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_CMD msg=audit(1389204903.584:7249): pid=23837 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D43204C414E473D4320766773202D2D6E6F68656164696E6773202D2D756E69743D67202D6F206E616D652C73697A652C667265652C6C765F636F756E742C75756964202D2D736570617261746F72203A202D2D6E6F7375666669782063696E6465722D766F6C756D6573 terminal=? res=success' >type=USER_START msg=audit(1389204903.585:7250): pid=23837 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1389204903.627:7251): pid=23837 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204906.422:7252): pid=23871 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=23871 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204906.422:7253): pid=23871 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=23871 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204906.422:7254): pid=23870 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=23871 suid=74 rport=34184 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204906.423:7255): pid=23870 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=23871 suid=74 rport=34184 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204907.022:7256): pid=23870 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=34184 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204907.022:7257): pid=23870 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=4096 fp=8b:56:b0:3f:c8:ad:38:a6:94:f4:a7:26:83:75:cc:85 rport=34184 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_ACCT msg=audit(1389204907.058:7258): pid=23870 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204907.058:7259): pid=23870 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=23871 suid=74 rport=34184 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204907.060:7260): pid=23870 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1389204907.093:7261): pid=23870 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=LOGIN msg=audit(1389204907.093:7262): login pid=23870 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=277 >type=USER_ROLE_CHANGE msg=audit(1389204907.189:7263): pid=23870 uid=0 auid=0 ses=277 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204907.227:7264): pid=23870 uid=0 auid=0 ses=277 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1389204907.262:7265): pid=23870 uid=0 auid=0 ses=277 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204907.273:7266): pid=23870 uid=0 auid=0 ses=277 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204907.274:7267): pid=23873 uid=0 auid=0 ses=277 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=23873 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204907.274:7268): pid=23873 uid=0 auid=0 ses=277 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=23873 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRED_REFR msg=audit(1389204907.308:7269): pid=23873 uid=0 auid=0 ses=277 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204907.356:7270): pid=23870 uid=0 auid=0 ses=277 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRED_DISP msg=audit(1389204907.389:7271): pid=23870 uid=0 auid=0 ses=277 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204907.422:7272): pid=23870 uid=0 auid=0 ses=277 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1389204907.447:7273): pid=23870 uid=0 auid=0 ses=277 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204907.447:7274): pid=23870 uid=0 auid=0 ses=277 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=23870 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204907.447:7275): pid=23870 uid=0 auid=0 ses=277 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=23870 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204907.447:7276): pid=23870 uid=0 auid=0 ses=277 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=23870 suid=0 rport=34184 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204910.350:7277): pid=23882 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=23882 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204910.350:7278): pid=23882 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=23882 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204910.351:7279): pid=23881 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=23882 suid=74 rport=34185 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204910.351:7280): pid=23881 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=23882 suid=74 rport=34185 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204910.935:7281): pid=23881 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=34185 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204910.935:7282): pid=23881 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=4096 fp=8b:56:b0:3f:c8:ad:38:a6:94:f4:a7:26:83:75:cc:85 rport=34185 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_ACCT msg=audit(1389204910.971:7283): pid=23881 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204910.971:7284): pid=23881 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=23882 suid=74 rport=34185 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204910.972:7285): pid=23881 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1389204910.986:7286): pid=23881 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=LOGIN msg=audit(1389204910.986:7287): login pid=23881 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=278 >type=USER_ROLE_CHANGE msg=audit(1389204911.079:7288): pid=23881 uid=0 auid=0 ses=278 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204911.116:7289): pid=23881 uid=0 auid=0 ses=278 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1389204911.152:7290): pid=23881 uid=0 auid=0 ses=278 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204911.185:7291): pid=23881 uid=0 auid=0 ses=278 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204911.186:7292): pid=23884 uid=0 auid=0 ses=278 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=23884 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204911.186:7293): pid=23884 uid=0 auid=0 ses=278 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=23884 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRED_REFR msg=audit(1389204911.220:7294): pid=23884 uid=0 auid=0 ses=278 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204911.262:7295): pid=23881 uid=0 auid=0 ses=278 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRED_DISP msg=audit(1389204911.295:7296): pid=23881 uid=0 auid=0 ses=278 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204911.328:7297): pid=23881 uid=0 auid=0 ses=278 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1389204911.361:7298): pid=23881 uid=0 auid=0 ses=278 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204911.361:7299): pid=23881 uid=0 auid=0 ses=278 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=23881 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204911.361:7300): pid=23881 uid=0 auid=0 ses=278 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=23881 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204911.361:7301): pid=23881 uid=0 auid=0 ses=278 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=23881 suid=0 rport=34185 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=MAC_CONFIG_CHANGE msg=audit(1389204913.468:7302): bool=rsync_export_all_ro val=1 old_val=0 auid=0 ses=272 >type=SYSCALL msg=audit(1389204913.468:7302): arch=c000003e syscall=1 success=yes exit=2 a0=4 a1=7fffcbf09b00 a2=2 a3=7fffcbf098c0 items=0 ppid=23864 pid=23865 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=272 tty=(none) comm="setsebool" exe="/usr/sbin/setsebool" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null) >type=MAC_POLICY_LOAD msg=audit(1389204913.570:7303): policy loaded auid=0 ses=272 >type=SYSCALL msg=audit(1389204913.570:7303): arch=c000003e syscall=1 success=yes exit=3256851 a0=4 a1=7fe59b78b010 a2=31b213 a3=7fff7b09caf0 items=0 ppid=23865 pid=23889 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=272 tty=(none) comm="load_policy" exe="/usr/sbin/load_policy" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null) >type=CRYPTO_KEY_USER msg=audit(1389204914.264:7304): pid=23895 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=23895 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204914.264:7305): pid=23895 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=23895 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204914.265:7306): pid=23894 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=23895 suid=74 rport=34186 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204914.265:7307): pid=23894 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=23895 suid=74 rport=34186 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=ADD_GROUP msg=audit(1389204914.550:7308): pid=23899 uid=0 auid=0 ses=272 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=adding group acct="swift" exe="/usr/sbin/useradd" hostname=? addr=? terminal=? res=success' >type=ADD_USER msg=audit(1389204914.553:7309): pid=23899 uid=0 auid=0 ses=272 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=adding user id=1001 exe="/usr/sbin/useradd" hostname=? addr=? terminal=? res=success' >type=USER_AUTH msg=audit(1389204914.867:7310): pid=23894 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=34186 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204914.867:7311): pid=23894 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=4096 fp=8b:56:b0:3f:c8:ad:38:a6:94:f4:a7:26:83:75:cc:85 rport=34186 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_ACCT msg=audit(1389204914.903:7312): pid=23894 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204914.903:7313): pid=23894 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=23895 suid=74 rport=34186 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204914.905:7314): pid=23894 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1389204914.938:7315): pid=23894 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=LOGIN msg=audit(1389204914.938:7316): login pid=23894 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=279 >type=USER_ROLE_CHANGE msg=audit(1389204915.035:7317): pid=23894 uid=0 auid=0 ses=279 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_AVC msg=audit(1389204915.047:7318): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='avc: received policyload notice (seqno=4) exe="/usr/lib/systemd/systemd" sauid=0 hostname=? addr=? terminal=?' >type=USER_AVC msg=audit(1389204915.047:7319): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='avc: received policyload notice (seqno=5) exe="/usr/lib/systemd/systemd" sauid=0 hostname=? addr=? terminal=?' >type=USER_START msg=audit(1389204915.076:7320): pid=23894 uid=0 auid=0 ses=279 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1389204915.112:7321): pid=23894 uid=0 auid=0 ses=279 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204915.145:7322): pid=23894 uid=0 auid=0 ses=279 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204915.146:7323): pid=23913 uid=0 auid=0 ses=279 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=23913 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204915.146:7324): pid=23913 uid=0 auid=0 ses=279 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=23913 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRED_REFR msg=audit(1389204915.161:7325): pid=23913 uid=0 auid=0 ses=279 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204915.205:7326): pid=23894 uid=0 auid=0 ses=279 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRED_DISP msg=audit(1389204915.238:7327): pid=23894 uid=0 auid=0 ses=279 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204915.272:7328): pid=23894 uid=0 auid=0 ses=279 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1389204915.305:7329): pid=23894 uid=0 auid=0 ses=279 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204915.305:7330): pid=23894 uid=0 auid=0 ses=279 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=23894 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204915.305:7331): pid=23894 uid=0 auid=0 ses=279 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=23894 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204915.305:7332): pid=23894 uid=0 auid=0 ses=279 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=23894 suid=0 rport=34186 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204918.206:7333): pid=23926 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=23926 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204918.206:7334): pid=23926 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=23926 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204918.207:7335): pid=23925 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=23926 suid=74 rport=34189 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204918.207:7336): pid=23925 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=23926 suid=74 rport=34189 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204918.784:7337): pid=23925 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=34189 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204918.784:7338): pid=23925 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=4096 fp=8b:56:b0:3f:c8:ad:38:a6:94:f4:a7:26:83:75:cc:85 rport=34189 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_ACCT msg=audit(1389204918.789:7339): pid=23925 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204918.789:7340): pid=23925 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=23926 suid=74 rport=34189 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204918.791:7341): pid=23925 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1389204918.793:7342): pid=23925 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=LOGIN msg=audit(1389204918.793:7343): login pid=23925 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=280 >type=USER_ROLE_CHANGE msg=audit(1389204918.898:7344): pid=23925 uid=0 auid=0 ses=280 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204918.935:7345): pid=23925 uid=0 auid=0 ses=280 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1389204918.971:7346): pid=23925 uid=0 auid=0 ses=280 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204918.992:7347): pid=23925 uid=0 auid=0 ses=280 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204918.993:7348): pid=23931 uid=0 auid=0 ses=280 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=23931 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204918.994:7349): pid=23931 uid=0 auid=0 ses=280 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=23931 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRED_REFR msg=audit(1389204918.996:7350): pid=23931 uid=0 auid=0 ses=280 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204919.025:7351): pid=23925 uid=0 auid=0 ses=280 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRED_DISP msg=audit(1389204919.027:7352): pid=23925 uid=0 auid=0 ses=280 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204919.029:7353): pid=23925 uid=0 auid=0 ses=280 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1389204919.031:7354): pid=23925 uid=0 auid=0 ses=280 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204919.031:7355): pid=23925 uid=0 auid=0 ses=280 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=23925 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204919.031:7356): pid=23925 uid=0 auid=0 ses=280 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=23925 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204919.031:7357): pid=23925 uid=0 auid=0 ses=280 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=23925 suid=0 rport=34189 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204922.050:7358): pid=23981 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=23981 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204922.050:7359): pid=23981 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=23981 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204922.050:7360): pid=23980 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=23981 suid=74 rport=34190 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204922.050:7361): pid=23980 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=23981 suid=74 rport=34190 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204922.643:7362): pid=23980 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=34190 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204922.643:7363): pid=23980 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=4096 fp=8b:56:b0:3f:c8:ad:38:a6:94:f4:a7:26:83:75:cc:85 rport=34190 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_ACCT msg=audit(1389204922.660:7364): pid=23980 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204922.660:7365): pid=23980 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=23981 suid=74 rport=34190 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204922.662:7366): pid=23980 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1389204922.695:7367): pid=23980 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=LOGIN msg=audit(1389204922.695:7368): login pid=23980 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=281 >type=USER_ROLE_CHANGE msg=audit(1389204922.801:7369): pid=23980 uid=0 auid=0 ses=281 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204922.839:7370): pid=23980 uid=0 auid=0 ses=281 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1389204922.875:7371): pid=23980 uid=0 auid=0 ses=281 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204922.908:7372): pid=23980 uid=0 auid=0 ses=281 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204922.909:7373): pid=23983 uid=0 auid=0 ses=281 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=23983 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204922.909:7374): pid=23983 uid=0 auid=0 ses=281 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=23983 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRED_REFR msg=audit(1389204922.943:7375): pid=23983 uid=0 auid=0 ses=281 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204922.996:7376): pid=23980 uid=0 auid=0 ses=281 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRED_DISP msg=audit(1389204923.019:7377): pid=23980 uid=0 auid=0 ses=281 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204923.023:7378): pid=23980 uid=0 auid=0 ses=281 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1389204923.046:7379): pid=23980 uid=0 auid=0 ses=281 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204923.046:7380): pid=23980 uid=0 auid=0 ses=281 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=23980 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204923.046:7381): pid=23980 uid=0 auid=0 ses=281 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=23980 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204923.046:7382): pid=23980 uid=0 auid=0 ses=281 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=23980 suid=0 rport=34190 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204925.990:7383): pid=23992 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=23992 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204925.990:7384): pid=23992 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=23992 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204925.991:7385): pid=23991 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=23992 suid=74 rport=34191 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204925.991:7386): pid=23991 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=23992 suid=74 rport=34191 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204926.576:7387): pid=23991 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=34191 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204926.576:7388): pid=23991 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=4096 fp=8b:56:b0:3f:c8:ad:38:a6:94:f4:a7:26:83:75:cc:85 rport=34191 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_ACCT msg=audit(1389204926.611:7389): pid=23991 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204926.611:7390): pid=23991 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=23992 suid=74 rport=34191 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204926.613:7391): pid=23991 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1389204926.627:7392): pid=23991 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=LOGIN msg=audit(1389204926.627:7393): login pid=23991 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=282 >type=USER_ROLE_CHANGE msg=audit(1389204926.726:7394): pid=23991 uid=0 auid=0 ses=282 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204926.774:7395): pid=23991 uid=0 auid=0 ses=282 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1389204926.810:7396): pid=23991 uid=0 auid=0 ses=282 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204926.843:7397): pid=23991 uid=0 auid=0 ses=282 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204926.844:7398): pid=23994 uid=0 auid=0 ses=282 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=23994 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204926.844:7399): pid=23994 uid=0 auid=0 ses=282 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=23994 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRED_REFR msg=audit(1389204926.878:7400): pid=23994 uid=0 auid=0 ses=282 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204926.931:7401): pid=23991 uid=0 auid=0 ses=282 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRED_DISP msg=audit(1389204926.964:7402): pid=23991 uid=0 auid=0 ses=282 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204926.997:7403): pid=23991 uid=0 auid=0 ses=282 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1389204927.017:7404): pid=23991 uid=0 auid=0 ses=282 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204927.017:7405): pid=23991 uid=0 auid=0 ses=282 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=23991 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204927.017:7406): pid=23991 uid=0 auid=0 ses=282 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=23991 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204927.017:7407): pid=23991 uid=0 auid=0 ses=282 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=23991 suid=0 rport=34191 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204929.925:7408): pid=24003 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=24003 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204929.925:7409): pid=24003 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=24003 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204929.926:7410): pid=24002 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=24003 suid=74 rport=34192 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204929.926:7411): pid=24002 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=24003 suid=74 rport=34192 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204930.510:7412): pid=24002 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=34192 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204930.510:7413): pid=24002 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=4096 fp=8b:56:b0:3f:c8:ad:38:a6:94:f4:a7:26:83:75:cc:85 rport=34192 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_ACCT msg=audit(1389204930.537:7414): pid=24002 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204930.537:7415): pid=24002 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=24003 suid=74 rport=34192 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204930.539:7416): pid=24002 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1389204930.562:7417): pid=24002 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=LOGIN msg=audit(1389204930.562:7418): login pid=24002 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=283 >type=USER_ROLE_CHANGE msg=audit(1389204930.657:7419): pid=24002 uid=0 auid=0 ses=283 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204930.695:7420): pid=24002 uid=0 auid=0 ses=283 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1389204930.731:7421): pid=24002 uid=0 auid=0 ses=283 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204930.739:7422): pid=24002 uid=0 auid=0 ses=283 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204930.740:7423): pid=24005 uid=0 auid=0 ses=283 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=24005 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204930.740:7424): pid=24005 uid=0 auid=0 ses=283 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=24005 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRED_REFR msg=audit(1389204930.745:7425): pid=24005 uid=0 auid=0 ses=283 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204930.801:7426): pid=24002 uid=0 auid=0 ses=283 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRED_DISP msg=audit(1389204930.834:7427): pid=24002 uid=0 auid=0 ses=283 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204930.867:7428): pid=24002 uid=0 auid=0 ses=283 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1389204930.900:7429): pid=24002 uid=0 auid=0 ses=283 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204930.900:7430): pid=24002 uid=0 auid=0 ses=283 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=24002 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204930.900:7431): pid=24002 uid=0 auid=0 ses=283 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=24002 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204930.900:7432): pid=24002 uid=0 auid=0 ses=283 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=24002 suid=0 rport=34192 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=SERVICE_START msg=audit(1389204932.942:7433): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="xinetd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204933.799:7434): pid=24070 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=24070 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204933.799:7435): pid=24070 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=24070 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204933.800:7436): pid=24069 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=24070 suid=74 rport=34193 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204933.800:7437): pid=24069 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=24070 suid=74 rport=34193 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204934.359:7438): pid=24069 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=34193 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204934.359:7439): pid=24069 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=4096 fp=8b:56:b0:3f:c8:ad:38:a6:94:f4:a7:26:83:75:cc:85 rport=34193 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_ACCT msg=audit(1389204934.395:7440): pid=24069 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204934.395:7441): pid=24069 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=24070 suid=74 rport=34193 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204934.397:7442): pid=24069 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1389204934.430:7443): pid=24069 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=LOGIN msg=audit(1389204934.430:7444): login pid=24069 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=284 >type=USER_ROLE_CHANGE msg=audit(1389204934.526:7445): pid=24069 uid=0 auid=0 ses=284 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204934.563:7446): pid=24069 uid=0 auid=0 ses=284 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1389204934.599:7447): pid=24069 uid=0 auid=0 ses=284 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204934.632:7448): pid=24069 uid=0 auid=0 ses=284 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204934.633:7449): pid=24072 uid=0 auid=0 ses=284 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=24072 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204934.633:7450): pid=24072 uid=0 auid=0 ses=284 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=24072 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRED_REFR msg=audit(1389204934.667:7451): pid=24072 uid=0 auid=0 ses=284 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204934.717:7452): pid=24069 uid=0 auid=0 ses=284 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRED_DISP msg=audit(1389204934.741:7453): pid=24069 uid=0 auid=0 ses=284 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204934.748:7454): pid=24069 uid=0 auid=0 ses=284 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1389204934.751:7455): pid=24069 uid=0 auid=0 ses=284 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204934.752:7456): pid=24069 uid=0 auid=0 ses=284 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=24069 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204934.752:7457): pid=24069 uid=0 auid=0 ses=284 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=24069 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204934.752:7458): pid=24069 uid=0 auid=0 ses=284 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=24069 suid=0 rport=34193 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204937.714:7459): pid=24081 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=24081 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204937.714:7460): pid=24081 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=24081 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204937.715:7461): pid=24080 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=24081 suid=74 rport=34194 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204937.715:7462): pid=24080 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=24081 suid=74 rport=34194 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204938.294:7463): pid=24080 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=34194 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204938.294:7464): pid=24080 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=4096 fp=8b:56:b0:3f:c8:ad:38:a6:94:f4:a7:26:83:75:cc:85 rport=34194 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_ACCT msg=audit(1389204938.312:7465): pid=24080 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204938.312:7466): pid=24080 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=24081 suid=74 rport=34194 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204938.314:7467): pid=24080 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1389204938.347:7468): pid=24080 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=LOGIN msg=audit(1389204938.347:7469): login pid=24080 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=285 >type=USER_ROLE_CHANGE msg=audit(1389204938.441:7470): pid=24080 uid=0 auid=0 ses=285 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204938.468:7471): pid=24080 uid=0 auid=0 ses=285 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1389204938.504:7472): pid=24080 uid=0 auid=0 ses=285 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204938.508:7473): pid=24080 uid=0 auid=0 ses=285 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204938.510:7474): pid=24083 uid=0 auid=0 ses=285 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=24083 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204938.510:7475): pid=24083 uid=0 auid=0 ses=285 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=24083 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRED_REFR msg=audit(1389204938.514:7476): pid=24083 uid=0 auid=0 ses=285 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204938.568:7477): pid=24080 uid=0 auid=0 ses=285 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRED_DISP msg=audit(1389204938.601:7478): pid=24080 uid=0 auid=0 ses=285 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204938.634:7479): pid=24080 uid=0 auid=0 ses=285 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1389204938.667:7480): pid=24080 uid=0 auid=0 ses=285 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204938.667:7481): pid=24080 uid=0 auid=0 ses=285 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=24080 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204938.667:7482): pid=24080 uid=0 auid=0 ses=285 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=24080 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204938.667:7483): pid=24080 uid=0 auid=0 ses=285 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=24080 suid=0 rport=34194 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204941.571:7484): pid=24092 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=24092 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204941.571:7485): pid=24092 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=24092 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204941.572:7486): pid=24091 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=24092 suid=74 rport=34195 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204941.572:7487): pid=24091 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=24092 suid=74 rport=34195 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204942.159:7488): pid=24091 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=34195 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204942.159:7489): pid=24091 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=4096 fp=8b:56:b0:3f:c8:ad:38:a6:94:f4:a7:26:83:75:cc:85 rport=34195 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_ACCT msg=audit(1389204942.196:7490): pid=24091 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204942.197:7491): pid=24091 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=24092 suid=74 rport=34195 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204942.201:7492): pid=24091 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1389204942.210:7493): pid=24091 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=LOGIN msg=audit(1389204942.210:7494): login pid=24091 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=286 >type=USER_ROLE_CHANGE msg=audit(1389204942.316:7495): pid=24091 uid=0 auid=0 ses=286 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204942.354:7496): pid=24091 uid=0 auid=0 ses=286 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1389204942.390:7497): pid=24091 uid=0 auid=0 ses=286 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204942.423:7498): pid=24091 uid=0 auid=0 ses=286 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204942.424:7499): pid=24094 uid=0 auid=0 ses=286 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=24094 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204942.424:7500): pid=24094 uid=0 auid=0 ses=286 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=24094 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRED_REFR msg=audit(1389204942.458:7501): pid=24094 uid=0 auid=0 ses=286 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204942.512:7502): pid=24091 uid=0 auid=0 ses=286 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRED_DISP msg=audit(1389204942.545:7503): pid=24091 uid=0 auid=0 ses=286 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204942.559:7504): pid=24091 uid=0 auid=0 ses=286 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1389204942.592:7505): pid=24091 uid=0 auid=0 ses=286 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204942.592:7506): pid=24091 uid=0 auid=0 ses=286 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=24091 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204942.592:7507): pid=24091 uid=0 auid=0 ses=286 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=24091 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204942.592:7508): pid=24091 uid=0 auid=0 ses=286 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=24091 suid=0 rport=34195 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204945.505:7509): pid=24103 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=24103 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204945.505:7510): pid=24103 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=24103 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204945.505:7511): pid=24102 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=24103 suid=74 rport=34196 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204945.506:7512): pid=24102 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=24103 suid=74 rport=34196 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204946.070:7513): pid=24102 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=34196 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204946.070:7514): pid=24102 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=4096 fp=8b:56:b0:3f:c8:ad:38:a6:94:f4:a7:26:83:75:cc:85 rport=34196 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_ACCT msg=audit(1389204946.107:7515): pid=24102 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204946.107:7516): pid=24102 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=24103 suid=74 rport=34196 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204946.110:7517): pid=24102 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1389204946.143:7518): pid=24102 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=LOGIN msg=audit(1389204946.143:7519): login pid=24102 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=287 >type=USER_ROLE_CHANGE msg=audit(1389204946.262:7520): pid=24102 uid=0 auid=0 ses=287 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204946.299:7521): pid=24102 uid=0 auid=0 ses=287 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1389204946.334:7522): pid=24102 uid=0 auid=0 ses=287 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204946.368:7523): pid=24102 uid=0 auid=0 ses=287 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204946.369:7524): pid=24135 uid=0 auid=0 ses=287 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=24135 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204946.369:7525): pid=24135 uid=0 auid=0 ses=287 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=24135 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRED_REFR msg=audit(1389204946.374:7526): pid=24135 uid=0 auid=0 ses=287 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204946.428:7527): pid=24102 uid=0 auid=0 ses=287 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRED_DISP msg=audit(1389204946.461:7528): pid=24102 uid=0 auid=0 ses=287 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204946.495:7529): pid=24102 uid=0 auid=0 ses=287 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1389204946.528:7530): pid=24102 uid=0 auid=0 ses=287 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204946.528:7531): pid=24102 uid=0 auid=0 ses=287 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=24102 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204946.528:7532): pid=24102 uid=0 auid=0 ses=287 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=24102 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204946.528:7533): pid=24102 uid=0 auid=0 ses=287 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=24102 suid=0 rport=34196 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204949.432:7534): pid=24144 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=24144 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204949.433:7535): pid=24144 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=24144 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204949.433:7536): pid=24143 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=24144 suid=74 rport=34197 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204949.433:7537): pid=24143 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=24144 suid=74 rport=34197 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204950.022:7538): pid=24143 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=34197 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204950.022:7539): pid=24143 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=4096 fp=8b:56:b0:3f:c8:ad:38:a6:94:f4:a7:26:83:75:cc:85 rport=34197 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_ACCT msg=audit(1389204950.059:7540): pid=24143 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204950.059:7541): pid=24143 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=24144 suid=74 rport=34197 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204950.062:7542): pid=24143 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1389204950.095:7543): pid=24143 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=LOGIN msg=audit(1389204950.095:7544): login pid=24143 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=288 >type=USER_ROLE_CHANGE msg=audit(1389204950.193:7545): pid=24143 uid=0 auid=0 ses=288 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204950.247:7546): pid=24143 uid=0 auid=0 ses=288 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1389204950.255:7547): pid=24143 uid=0 auid=0 ses=288 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204950.269:7548): pid=24143 uid=0 auid=0 ses=288 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204950.270:7549): pid=24146 uid=0 auid=0 ses=288 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=24146 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204950.270:7550): pid=24146 uid=0 auid=0 ses=288 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=24146 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRED_REFR msg=audit(1389204950.304:7551): pid=24146 uid=0 auid=0 ses=288 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204950.357:7552): pid=24143 uid=0 auid=0 ses=288 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRED_DISP msg=audit(1389204950.390:7553): pid=24143 uid=0 auid=0 ses=288 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204950.423:7554): pid=24143 uid=0 auid=0 ses=288 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1389204950.456:7555): pid=24143 uid=0 auid=0 ses=288 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204950.456:7556): pid=24143 uid=0 auid=0 ses=288 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=24143 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204950.456:7557): pid=24143 uid=0 auid=0 ses=288 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=24143 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204950.456:7558): pid=24143 uid=0 auid=0 ses=288 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=24143 suid=0 rport=34197 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204953.345:7559): pid=24172 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=24172 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204953.345:7560): pid=24172 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=24172 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204953.345:7561): pid=24171 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=24172 suid=74 rport=34198 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204953.345:7562): pid=24171 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=24172 suid=74 rport=34198 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204953.943:7563): pid=24171 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=34198 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204953.943:7564): pid=24171 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=4096 fp=8b:56:b0:3f:c8:ad:38:a6:94:f4:a7:26:83:75:cc:85 rport=34198 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_ACCT msg=audit(1389204953.971:7565): pid=24171 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204953.971:7566): pid=24171 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=24172 suid=74 rport=34198 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204953.973:7567): pid=24171 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1389204954.007:7568): pid=24171 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=LOGIN msg=audit(1389204954.007:7569): login pid=24171 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=289 >type=USER_ROLE_CHANGE msg=audit(1389204954.118:7570): pid=24171 uid=0 auid=0 ses=289 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204954.158:7571): pid=24171 uid=0 auid=0 ses=289 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1389204954.181:7572): pid=24171 uid=0 auid=0 ses=289 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204954.187:7573): pid=24171 uid=0 auid=0 ses=289 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204954.188:7574): pid=24174 uid=0 auid=0 ses=289 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=24174 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204954.188:7575): pid=24174 uid=0 auid=0 ses=289 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=24174 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRED_REFR msg=audit(1389204954.213:7576): pid=24174 uid=0 auid=0 ses=289 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204954.281:7577): pid=24171 uid=0 auid=0 ses=289 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRED_DISP msg=audit(1389204954.286:7578): pid=24171 uid=0 auid=0 ses=289 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204954.291:7579): pid=24171 uid=0 auid=0 ses=289 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1389204954.304:7580): pid=24171 uid=0 auid=0 ses=289 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204954.304:7581): pid=24171 uid=0 auid=0 ses=289 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=24171 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204954.304:7582): pid=24171 uid=0 auid=0 ses=289 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=24171 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204954.304:7583): pid=24171 uid=0 auid=0 ses=289 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=24171 suid=0 rport=34198 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204957.295:7584): pid=24184 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=24184 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204957.295:7585): pid=24184 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=24184 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204957.295:7586): pid=24183 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=24184 suid=74 rport=34199 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204957.296:7587): pid=24183 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=24184 suid=74 rport=34199 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204957.877:7588): pid=24183 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=34199 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204957.877:7589): pid=24183 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=4096 fp=8b:56:b0:3f:c8:ad:38:a6:94:f4:a7:26:83:75:cc:85 rport=34199 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_ACCT msg=audit(1389204957.913:7590): pid=24183 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204957.913:7591): pid=24183 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=24184 suid=74 rport=34199 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204957.915:7592): pid=24183 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1389204957.949:7593): pid=24183 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=LOGIN msg=audit(1389204957.949:7594): login pid=24183 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=290 >type=USER_ROLE_CHANGE msg=audit(1389204958.058:7595): pid=24183 uid=0 auid=0 ses=290 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204958.096:7596): pid=24183 uid=0 auid=0 ses=290 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1389204958.132:7597): pid=24183 uid=0 auid=0 ses=290 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204958.166:7598): pid=24183 uid=0 auid=0 ses=290 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204958.167:7599): pid=24186 uid=0 auid=0 ses=290 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=24186 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204958.167:7600): pid=24186 uid=0 auid=0 ses=290 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=24186 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRED_REFR msg=audit(1389204958.201:7601): pid=24186 uid=0 auid=0 ses=290 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204958.235:7602): pid=24183 uid=0 auid=0 ses=290 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRED_DISP msg=audit(1389204958.240:7603): pid=24183 uid=0 auid=0 ses=290 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204958.253:7604): pid=24183 uid=0 auid=0 ses=290 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1389204958.258:7605): pid=24183 uid=0 auid=0 ses=290 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204958.259:7606): pid=24183 uid=0 auid=0 ses=290 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=24183 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204958.259:7607): pid=24183 uid=0 auid=0 ses=290 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=24183 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204958.259:7608): pid=24183 uid=0 auid=0 ses=290 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=24183 suid=0 rport=34199 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204961.241:7609): pid=24204 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=24204 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204961.241:7610): pid=24204 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=24204 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204961.242:7611): pid=24203 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=24204 suid=74 rport=34200 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204961.242:7612): pid=24203 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=24204 suid=74 rport=34200 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204961.776:7613): pid=24203 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=34200 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204961.776:7614): pid=24203 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=4096 fp=8b:56:b0:3f:c8:ad:38:a6:94:f4:a7:26:83:75:cc:85 rport=34200 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_ACCT msg=audit(1389204961.781:7615): pid=24203 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204961.781:7616): pid=24203 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=24204 suid=74 rport=34200 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204961.783:7617): pid=24203 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1389204961.785:7618): pid=24203 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=LOGIN msg=audit(1389204961.785:7619): login pid=24203 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=291 >type=USER_ROLE_CHANGE msg=audit(1389204961.832:7620): pid=24203 uid=0 auid=0 ses=291 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204961.849:7621): pid=24203 uid=0 auid=0 ses=291 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1389204961.854:7622): pid=24203 uid=0 auid=0 ses=291 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204961.856:7623): pid=24203 uid=0 auid=0 ses=291 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204961.858:7624): pid=24206 uid=0 auid=0 ses=291 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=24206 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204961.858:7625): pid=24206 uid=0 auid=0 ses=291 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=24206 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRED_REFR msg=audit(1389204961.861:7626): pid=24206 uid=0 auid=0 ses=291 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204961.896:7627): pid=24203 uid=0 auid=0 ses=291 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204961.897:7628): pid=24212 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=24212 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204961.897:7629): pid=24212 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=24212 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204961.898:7630): pid=24211 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=24212 suid=74 rport=34201 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204961.898:7631): pid=24211 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=24212 suid=74 rport=34201 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRED_DISP msg=audit(1389204961.902:7632): pid=24203 uid=0 auid=0 ses=291 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204961.906:7633): pid=24203 uid=0 auid=0 ses=291 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1389204961.908:7634): pid=24203 uid=0 auid=0 ses=291 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204961.908:7635): pid=24203 uid=0 auid=0 ses=291 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=24203 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204961.908:7636): pid=24203 uid=0 auid=0 ses=291 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=24203 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204961.908:7637): pid=24203 uid=0 auid=0 ses=291 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=24203 suid=0 rport=34200 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204962.437:7638): pid=24211 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=34201 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204962.437:7639): pid=24211 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=4096 fp=8b:56:b0:3f:c8:ad:38:a6:94:f4:a7:26:83:75:cc:85 rport=34201 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_ACCT msg=audit(1389204962.442:7640): pid=24211 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204962.442:7641): pid=24211 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=24212 suid=74 rport=34201 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204962.444:7642): pid=24211 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1389204962.447:7643): pid=24211 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=LOGIN msg=audit(1389204962.447:7644): login pid=24211 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=292 >type=USER_ROLE_CHANGE msg=audit(1389204962.491:7645): pid=24211 uid=0 auid=0 ses=292 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204962.508:7646): pid=24211 uid=0 auid=0 ses=292 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1389204962.513:7647): pid=24211 uid=0 auid=0 ses=292 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204962.515:7648): pid=24211 uid=0 auid=0 ses=292 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204962.516:7649): pid=24215 uid=0 auid=0 ses=292 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=24215 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204962.516:7650): pid=24215 uid=0 auid=0 ses=292 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=24215 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRED_REFR msg=audit(1389204962.518:7651): pid=24215 uid=0 auid=0 ses=292 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204962.555:7652): pid=24227 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=24227 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204962.555:7653): pid=24227 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=24227 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204962.556:7654): pid=24226 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=24227 suid=74 rport=34202 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204962.556:7655): pid=24226 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=24227 suid=74 rport=34202 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_END msg=audit(1389204962.557:7656): pid=24211 uid=0 auid=0 ses=292 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRED_DISP msg=audit(1389204962.563:7657): pid=24211 uid=0 auid=0 ses=292 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204962.588:7658): pid=24211 uid=0 auid=0 ses=292 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1389204962.612:7659): pid=24211 uid=0 auid=0 ses=292 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204962.612:7660): pid=24211 uid=0 auid=0 ses=292 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=24211 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204962.612:7661): pid=24211 uid=0 auid=0 ses=292 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=24211 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204962.612:7662): pid=24211 uid=0 auid=0 ses=292 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=24211 suid=0 rport=34201 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204963.128:7663): pid=24226 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=34202 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204963.128:7664): pid=24226 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=4096 fp=8b:56:b0:3f:c8:ad:38:a6:94:f4:a7:26:83:75:cc:85 rport=34202 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_ACCT msg=audit(1389204963.151:7665): pid=24226 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204963.152:7666): pid=24226 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=24227 suid=74 rport=34202 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204963.153:7667): pid=24226 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1389204963.178:7668): pid=24226 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=LOGIN msg=audit(1389204963.178:7669): login pid=24226 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=293 >type=USER_ROLE_CHANGE msg=audit(1389204963.258:7670): pid=24226 uid=0 auid=0 ses=293 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204963.278:7671): pid=24226 uid=0 auid=0 ses=293 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1389204963.287:7672): pid=24226 uid=0 auid=0 ses=293 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204963.294:7673): pid=24226 uid=0 auid=0 ses=293 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204963.294:7674): pid=24283 uid=0 auid=0 ses=293 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=24283 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204963.294:7675): pid=24283 uid=0 auid=0 ses=293 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=24283 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRED_REFR msg=audit(1389204963.301:7676): pid=24283 uid=0 auid=0 ses=293 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204963.346:7677): pid=24226 uid=0 auid=0 ses=293 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204963.347:7678): pid=24303 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=24303 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204963.347:7679): pid=24303 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=24303 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204963.348:7680): pid=24301 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=24303 suid=74 rport=34203 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204963.348:7681): pid=24301 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=24303 suid=74 rport=34203 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRED_DISP msg=audit(1389204963.354:7682): pid=24226 uid=0 auid=0 ses=293 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204963.360:7683): pid=24226 uid=0 auid=0 ses=293 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1389204963.368:7684): pid=24226 uid=0 auid=0 ses=293 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204963.368:7685): pid=24226 uid=0 auid=0 ses=293 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=24226 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204963.368:7686): pid=24226 uid=0 auid=0 ses=293 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=24226 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204963.368:7687): pid=24226 uid=0 auid=0 ses=293 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=24226 suid=0 rport=34202 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=NETFILTER_CFG msg=audit(1389204963.596:7688): table=filter family=2 entries=0 >type=NETFILTER_CFG msg=audit(1389204963.596:7688): table=nat family=2 entries=0 >type=NETFILTER_CFG msg=audit(1389204963.596:7688): table=mangle family=2 entries=0 >type=NETFILTER_CFG msg=audit(1389204963.596:7688): table=filter family=10 entries=0 >type=SYSCALL msg=audit(1389204963.596:7688): arch=c000003e syscall=272 success=yes exit=0 a0=40000000 a1=c0 a2=0 a3=7ffff041d740 items=0 ppid=24445 pid=24452 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=292 tty=(none) comm="ip" exe="/usr/sbin/ip" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null) >type=USER_CMD msg=audit(1389204963.645:7689): pid=24459 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D43204C414E473D4320766773202D2D6E6F68656164696E6773202D2D756E69743D67202D6F206E616D652C73697A652C667265652C6C765F636F756E742C75756964202D2D736570617261746F72203A202D2D6E6F7375666669782063696E6465722D766F6C756D6573 terminal=? res=success' >type=USER_START msg=audit(1389204963.646:7690): pid=24459 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1389204963.689:7691): pid=24459 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=NETFILTER_CFG msg=audit(1389204963.615:7692): table=filter family=2 entries=0 >type=NETFILTER_CFG msg=audit(1389204963.615:7692): table=nat family=2 entries=0 >type=NETFILTER_CFG msg=audit(1389204963.615:7692): table=mangle family=2 entries=0 >type=NETFILTER_CFG msg=audit(1389204963.615:7692): table=filter family=10 entries=0 >type=SYSCALL msg=audit(1389204963.615:7692): arch=c000003e syscall=272 success=yes exit=0 a0=40000000 a1=c0 a2=0 a3=7fff98a5fd20 items=0 ppid=24445 pid=24458 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=292 tty=(none) comm="ip" exe="/usr/sbin/ip" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null) >type=NETFILTER_CFG msg=audit(1389204963.881:7693): table=filter family=2 entries=0 >type=NETFILTER_CFG msg=audit(1389204963.881:7693): table=nat family=2 entries=0 >type=NETFILTER_CFG msg=audit(1389204963.881:7693): table=mangle family=2 entries=0 >type=NETFILTER_CFG msg=audit(1389204963.881:7693): table=filter family=10 entries=0 >type=SYSCALL msg=audit(1389204963.881:7693): arch=c000003e syscall=272 success=yes exit=0 a0=40000000 a1=c0 a2=0 a3=7fff677b2bf0 items=0 ppid=24445 pid=24465 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=292 tty=(none) comm="ip" exe="/usr/sbin/ip" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null) >type=USER_AUTH msg=audit(1389204963.913:7694): pid=24301 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=34203 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204963.913:7695): pid=24301 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=4096 fp=8b:56:b0:3f:c8:ad:38:a6:94:f4:a7:26:83:75:cc:85 rport=34203 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_ACCT msg=audit(1389204963.924:7696): pid=24301 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204963.924:7697): pid=24301 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=24303 suid=74 rport=34203 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204963.925:7698): pid=24301 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1389204963.928:7699): pid=24301 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=LOGIN msg=audit(1389204963.928:7700): login pid=24301 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=294 >type=USER_ROLE_CHANGE msg=audit(1389204963.971:7701): pid=24301 uid=0 auid=0 ses=294 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204963.988:7702): pid=24301 uid=0 auid=0 ses=294 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1389204963.992:7703): pid=24301 uid=0 auid=0 ses=294 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204963.995:7704): pid=24301 uid=0 auid=0 ses=294 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204963.996:7705): pid=24482 uid=0 auid=0 ses=294 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=24482 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204963.996:7706): pid=24482 uid=0 auid=0 ses=294 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=24482 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRED_REFR msg=audit(1389204963.999:7707): pid=24482 uid=0 auid=0 ses=294 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204964.030:7708): pid=24492 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=24492 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204964.030:7709): pid=24492 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=24492 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204964.031:7710): pid=24491 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=24492 suid=74 rport=34204 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204964.031:7711): pid=24491 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=24492 suid=74 rport=34204 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_END msg=audit(1389204964.034:7712): pid=24301 uid=0 auid=0 ses=294 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRED_DISP msg=audit(1389204964.038:7713): pid=24301 uid=0 auid=0 ses=294 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204964.040:7714): pid=24301 uid=0 auid=0 ses=294 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1389204964.042:7715): pid=24301 uid=0 auid=0 ses=294 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204964.042:7716): pid=24301 uid=0 auid=0 ses=294 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=24301 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204964.042:7717): pid=24301 uid=0 auid=0 ses=294 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=24301 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204964.043:7718): pid=24301 uid=0 auid=0 ses=294 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=24301 suid=0 rport=34203 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204964.556:7719): pid=24491 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=34204 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204964.556:7720): pid=24491 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=4096 fp=8b:56:b0:3f:c8:ad:38:a6:94:f4:a7:26:83:75:cc:85 rport=34204 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_ACCT msg=audit(1389204964.562:7721): pid=24491 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204964.562:7722): pid=24491 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=24492 suid=74 rport=34204 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204964.563:7723): pid=24491 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1389204964.565:7724): pid=24491 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=LOGIN msg=audit(1389204964.565:7725): login pid=24491 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=295 >type=USER_ROLE_CHANGE msg=audit(1389204964.606:7726): pid=24491 uid=0 auid=0 ses=295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204964.622:7727): pid=24491 uid=0 auid=0 ses=295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1389204964.626:7728): pid=24491 uid=0 auid=0 ses=295 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204964.628:7729): pid=24491 uid=0 auid=0 ses=295 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204964.629:7730): pid=24494 uid=0 auid=0 ses=295 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=24494 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204964.629:7731): pid=24494 uid=0 auid=0 ses=295 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=24494 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRED_REFR msg=audit(1389204964.632:7732): pid=24494 uid=0 auid=0 ses=295 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204964.661:7733): pid=24504 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=24504 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204964.661:7734): pid=24504 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=24504 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204964.662:7735): pid=24503 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=24504 suid=74 rport=34205 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204964.662:7736): pid=24503 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=24504 suid=74 rport=34205 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_END msg=audit(1389204964.664:7737): pid=24491 uid=0 auid=0 ses=295 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRED_DISP msg=audit(1389204964.669:7738): pid=24491 uid=0 auid=0 ses=295 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204964.671:7739): pid=24491 uid=0 auid=0 ses=295 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1389204964.673:7740): pid=24491 uid=0 auid=0 ses=295 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204964.673:7741): pid=24491 uid=0 auid=0 ses=295 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=24491 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204964.674:7742): pid=24491 uid=0 auid=0 ses=295 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=24491 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204964.674:7743): pid=24491 uid=0 auid=0 ses=295 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=24491 suid=0 rport=34204 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204965.191:7744): pid=24503 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=34205 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204965.191:7745): pid=24503 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=4096 fp=8b:56:b0:3f:c8:ad:38:a6:94:f4:a7:26:83:75:cc:85 rport=34205 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_ACCT msg=audit(1389204965.196:7746): pid=24503 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204965.197:7747): pid=24503 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=24504 suid=74 rport=34205 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204965.198:7748): pid=24503 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1389204965.200:7749): pid=24503 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=LOGIN msg=audit(1389204965.200:7750): login pid=24503 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=296 >type=USER_ROLE_CHANGE msg=audit(1389204965.242:7751): pid=24503 uid=0 auid=0 ses=296 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204965.262:7752): pid=24503 uid=0 auid=0 ses=296 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1389204965.266:7753): pid=24503 uid=0 auid=0 ses=296 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204965.268:7754): pid=24503 uid=0 auid=0 ses=296 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204965.270:7755): pid=24506 uid=0 auid=0 ses=296 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=24506 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204965.270:7756): pid=24506 uid=0 auid=0 ses=296 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=24506 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRED_REFR msg=audit(1389204965.272:7757): pid=24506 uid=0 auid=0 ses=296 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204965.304:7758): pid=24518 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=24518 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204965.304:7759): pid=24518 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=24518 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204965.305:7760): pid=24517 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=24518 suid=74 rport=34206 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204965.305:7761): pid=24517 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=24518 suid=74 rport=34206 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_END msg=audit(1389204965.308:7762): pid=24503 uid=0 auid=0 ses=296 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRED_DISP msg=audit(1389204965.313:7763): pid=24503 uid=0 auid=0 ses=296 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204965.315:7764): pid=24503 uid=0 auid=0 ses=296 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1389204965.317:7765): pid=24503 uid=0 auid=0 ses=296 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204965.317:7766): pid=24503 uid=0 auid=0 ses=296 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=24503 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204965.317:7767): pid=24503 uid=0 auid=0 ses=296 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=24503 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204965.317:7768): pid=24503 uid=0 auid=0 ses=296 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=24503 suid=0 rport=34205 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204965.847:7769): pid=24517 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=34206 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204965.847:7770): pid=24517 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=4096 fp=8b:56:b0:3f:c8:ad:38:a6:94:f4:a7:26:83:75:cc:85 rport=34206 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_ACCT msg=audit(1389204965.851:7771): pid=24517 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204965.852:7772): pid=24517 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=24518 suid=74 rport=34206 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204965.853:7773): pid=24517 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1389204965.857:7774): pid=24517 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=LOGIN msg=audit(1389204965.857:7775): login pid=24517 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=297 >type=USER_ROLE_CHANGE msg=audit(1389204965.901:7776): pid=24517 uid=0 auid=0 ses=297 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204965.918:7777): pid=24517 uid=0 auid=0 ses=297 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1389204965.937:7778): pid=24517 uid=0 auid=0 ses=297 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204965.950:7779): pid=24517 uid=0 auid=0 ses=297 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204965.950:7780): pid=24525 uid=0 auid=0 ses=297 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=24525 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204965.950:7781): pid=24525 uid=0 auid=0 ses=297 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=24525 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRED_REFR msg=audit(1389204965.954:7782): pid=24525 uid=0 auid=0 ses=297 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204965.983:7783): pid=24517 uid=0 auid=0 ses=297 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRED_DISP msg=audit(1389204965.996:7784): pid=24517 uid=0 auid=0 ses=297 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204966.030:7785): pid=24517 uid=0 auid=0 ses=297 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1389204966.062:7786): pid=24517 uid=0 auid=0 ses=297 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204966.062:7787): pid=24517 uid=0 auid=0 ses=297 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=24517 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204966.062:7788): pid=24517 uid=0 auid=0 ses=297 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=24517 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204966.063:7789): pid=24517 uid=0 auid=0 ses=297 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=24517 suid=0 rport=34206 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=NETFILTER_CFG msg=audit(1389204968.808:7790): table=filter family=2 entries=0 >type=NETFILTER_CFG msg=audit(1389204968.808:7790): table=nat family=2 entries=0 >type=NETFILTER_CFG msg=audit(1389204968.808:7790): table=mangle family=2 entries=0 >type=NETFILTER_CFG msg=audit(1389204968.808:7790): table=filter family=10 entries=0 >type=SYSCALL msg=audit(1389204968.808:7790): arch=c000003e syscall=272 success=yes exit=0 a0=40000000 a1=c0 a2=0 a3=7ffff4108e80 items=0 ppid=24752 pid=24759 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=292 tty=(none) comm="ip" exe="/usr/sbin/ip" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null) >type=CRYPTO_KEY_USER msg=audit(1389204968.994:7791): pid=24768 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=24768 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204968.994:7792): pid=24768 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=24768 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204968.995:7793): pid=24767 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=24768 suid=74 rport=34207 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204968.995:7794): pid=24767 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=24768 suid=74 rport=34207 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=NETFILTER_CFG msg=audit(1389204968.825:7795): table=filter family=2 entries=0 >type=NETFILTER_CFG msg=audit(1389204968.825:7795): table=nat family=2 entries=0 >type=NETFILTER_CFG msg=audit(1389204968.825:7795): table=mangle family=2 entries=0 >type=NETFILTER_CFG msg=audit(1389204968.825:7795): table=filter family=10 entries=0 >type=SYSCALL msg=audit(1389204968.825:7795): arch=c000003e syscall=272 success=yes exit=0 a0=40000000 a1=c0 a2=0 a3=7fff62c36440 items=0 ppid=24752 pid=24763 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=292 tty=(none) comm="ip" exe="/usr/sbin/ip" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null) >type=NETFILTER_CFG msg=audit(1389204969.091:7796): table=filter family=2 entries=0 >type=NETFILTER_CFG msg=audit(1389204969.091:7796): table=nat family=2 entries=0 >type=NETFILTER_CFG msg=audit(1389204969.091:7796): table=mangle family=2 entries=0 >type=NETFILTER_CFG msg=audit(1389204969.091:7796): table=filter family=10 entries=0 >type=SYSCALL msg=audit(1389204969.091:7796): arch=c000003e syscall=272 success=yes exit=0 a0=40000000 a1=c0 a2=0 a3=7fffa3840250 items=0 ppid=24752 pid=24770 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=292 tty=(none) comm="ip" exe="/usr/sbin/ip" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null) >type=USER_AUTH msg=audit(1389204969.519:7797): pid=24767 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=34207 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204969.519:7798): pid=24767 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=4096 fp=8b:56:b0:3f:c8:ad:38:a6:94:f4:a7:26:83:75:cc:85 rport=34207 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_ACCT msg=audit(1389204969.524:7799): pid=24767 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204969.524:7800): pid=24767 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=24768 suid=74 rport=34207 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204969.526:7801): pid=24767 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1389204969.528:7802): pid=24767 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=LOGIN msg=audit(1389204969.528:7803): login pid=24767 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=298 >type=USER_ROLE_CHANGE msg=audit(1389204969.572:7804): pid=24767 uid=0 auid=0 ses=298 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204969.593:7805): pid=24767 uid=0 auid=0 ses=298 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1389204969.598:7806): pid=24767 uid=0 auid=0 ses=298 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204969.600:7807): pid=24767 uid=0 auid=0 ses=298 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204969.601:7808): pid=24786 uid=0 auid=0 ses=298 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=24786 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204969.601:7809): pid=24786 uid=0 auid=0 ses=298 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=24786 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRED_REFR msg=audit(1389204969.604:7810): pid=24786 uid=0 auid=0 ses=298 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204969.626:7811): pid=24767 uid=0 auid=0 ses=298 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRED_DISP msg=audit(1389204969.628:7812): pid=24767 uid=0 auid=0 ses=298 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204969.630:7813): pid=24767 uid=0 auid=0 ses=298 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1389204969.632:7814): pid=24767 uid=0 auid=0 ses=298 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204969.632:7815): pid=24767 uid=0 auid=0 ses=298 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=24767 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204969.632:7816): pid=24767 uid=0 auid=0 ses=298 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=24767 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204969.632:7817): pid=24767 uid=0 auid=0 ses=298 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=24767 suid=0 rport=34207 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204972.645:7818): pid=24815 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=24815 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204972.645:7819): pid=24815 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=24815 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204972.646:7820): pid=24814 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=24815 suid=74 rport=34208 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204972.646:7821): pid=24814 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=24815 suid=74 rport=34208 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204973.209:7822): pid=24814 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=34208 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204973.209:7823): pid=24814 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=4096 fp=8b:56:b0:3f:c8:ad:38:a6:94:f4:a7:26:83:75:cc:85 rport=34208 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_ACCT msg=audit(1389204973.245:7824): pid=24814 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204973.245:7825): pid=24814 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=24815 suid=74 rport=34208 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204973.247:7826): pid=24814 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1389204973.281:7827): pid=24814 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=LOGIN msg=audit(1389204973.281:7828): login pid=24814 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=299 >type=USER_ROLE_CHANGE msg=audit(1389204973.377:7829): pid=24814 uid=0 auid=0 ses=299 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204973.414:7830): pid=24814 uid=0 auid=0 ses=299 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1389204973.450:7831): pid=24814 uid=0 auid=0 ses=299 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204973.484:7832): pid=24814 uid=0 auid=0 ses=299 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204973.485:7833): pid=24817 uid=0 auid=0 ses=299 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=24817 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204973.485:7834): pid=24817 uid=0 auid=0 ses=299 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=24817 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRED_REFR msg=audit(1389204973.499:7835): pid=24817 uid=0 auid=0 ses=299 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204973.544:7836): pid=24814 uid=0 auid=0 ses=299 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRED_DISP msg=audit(1389204973.577:7837): pid=24814 uid=0 auid=0 ses=299 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204973.611:7838): pid=24814 uid=0 auid=0 ses=299 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1389204973.644:7839): pid=24814 uid=0 auid=0 ses=299 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204973.644:7840): pid=24814 uid=0 auid=0 ses=299 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=24814 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204973.644:7841): pid=24814 uid=0 auid=0 ses=299 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=24814 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204973.644:7842): pid=24814 uid=0 auid=0 ses=299 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=24814 suid=0 rport=34208 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=NETFILTER_CFG msg=audit(1389204974.078:7843): table=filter family=2 entries=40 >type=SYSCALL msg=audit(1389204974.078:7843): arch=c000003e syscall=54 success=yes exit=0 a0=3 a1=0 a2=40 a3=1e636b0 items=0 ppid=24223 pid=24831 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=292 tty=(none) comm="iptables" exe="/usr/sbin/xtables-multi" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null) >type=NETFILTER_CFG msg=audit(1389204974.109:7844): table=filter family=2 entries=41 >type=SYSCALL msg=audit(1389204974.109:7844): arch=c000003e syscall=54 success=yes exit=0 a0=3 a1=0 a2=40 a3=2674b00 items=0 ppid=24223 pid=24840 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=292 tty=(none) comm="iptables" exe="/usr/sbin/xtables-multi" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null) >type=CRYPTO_KEY_USER msg=audit(1389204976.549:7845): pid=24853 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=24853 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204976.549:7846): pid=24853 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=24853 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204976.550:7847): pid=24852 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=24853 suid=74 rport=34209 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204976.550:7848): pid=24852 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=24853 suid=74 rport=34209 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204976.850:7849): pid=24852 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=34209 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204976.850:7850): pid=24852 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=4096 fp=8b:56:b0:3f:c8:ad:38:a6:94:f4:a7:26:83:75:cc:85 rport=34209 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_ACCT msg=audit(1389204976.886:7851): pid=24852 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204976.886:7852): pid=24852 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=24853 suid=74 rport=34209 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204976.888:7853): pid=24852 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1389204976.917:7854): pid=24852 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=LOGIN msg=audit(1389204976.917:7855): login pid=24852 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=300 >type=USER_ROLE_CHANGE msg=audit(1389204977.024:7856): pid=24852 uid=0 auid=0 ses=300 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204977.061:7857): pid=24852 uid=0 auid=0 ses=300 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1389204977.087:7858): pid=24852 uid=0 auid=0 ses=300 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204977.120:7859): pid=24852 uid=0 auid=0 ses=300 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204977.121:7860): pid=24855 uid=0 auid=0 ses=300 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=24855 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204977.121:7861): pid=24855 uid=0 auid=0 ses=300 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=24855 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRED_REFR msg=audit(1389204977.145:7862): pid=24855 uid=0 auid=0 ses=300 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204977.189:7863): pid=24852 uid=0 auid=0 ses=300 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRED_DISP msg=audit(1389204977.205:7864): pid=24852 uid=0 auid=0 ses=300 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204977.239:7865): pid=24852 uid=0 auid=0 ses=300 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1389204977.272:7866): pid=24852 uid=0 auid=0 ses=300 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204977.272:7867): pid=24852 uid=0 auid=0 ses=300 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=24852 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204977.272:7868): pid=24852 uid=0 auid=0 ses=300 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=24852 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204977.272:7869): pid=24852 uid=0 auid=0 ses=300 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=24852 suid=0 rport=34209 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204980.189:7870): pid=24912 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=24912 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204980.189:7871): pid=24912 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=24912 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204980.190:7872): pid=24911 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=24912 suid=74 rport=34211 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204980.190:7873): pid=24911 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=24912 suid=74 rport=34211 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204980.787:7874): pid=24911 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=34211 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204980.787:7875): pid=24911 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=4096 fp=8b:56:b0:3f:c8:ad:38:a6:94:f4:a7:26:83:75:cc:85 rport=34211 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_ACCT msg=audit(1389204980.823:7876): pid=24911 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204980.823:7877): pid=24911 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=24912 suid=74 rport=34211 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204980.825:7878): pid=24911 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1389204980.838:7879): pid=24911 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=LOGIN msg=audit(1389204980.838:7880): login pid=24911 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=301 >type=USER_ROLE_CHANGE msg=audit(1389204980.928:7881): pid=24911 uid=0 auid=0 ses=301 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204981.021:7882): pid=24911 uid=0 auid=0 ses=301 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1389204981.057:7883): pid=24911 uid=0 auid=0 ses=301 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204981.086:7884): pid=24911 uid=0 auid=0 ses=301 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204981.087:7885): pid=24914 uid=0 auid=0 ses=301 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=24914 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204981.087:7886): pid=24914 uid=0 auid=0 ses=301 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=24914 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRED_REFR msg=audit(1389204981.111:7887): pid=24914 uid=0 auid=0 ses=301 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204981.153:7888): pid=24911 uid=0 auid=0 ses=301 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRED_DISP msg=audit(1389204981.187:7889): pid=24911 uid=0 auid=0 ses=301 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204981.221:7890): pid=24911 uid=0 auid=0 ses=301 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1389204981.251:7891): pid=24911 uid=0 auid=0 ses=301 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204981.251:7892): pid=24911 uid=0 auid=0 ses=301 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=24911 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204981.251:7893): pid=24911 uid=0 auid=0 ses=301 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=24911 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204981.251:7894): pid=24911 uid=0 auid=0 ses=301 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=24911 suid=0 rport=34211 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204984.171:7895): pid=24971 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=24971 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204984.171:7896): pid=24971 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=24971 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204984.172:7897): pid=24970 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=24971 suid=74 rport=34213 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204984.172:7898): pid=24970 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=24971 suid=74 rport=34213 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204984.775:7899): pid=24970 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=34213 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204984.775:7900): pid=24970 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=4096 fp=8b:56:b0:3f:c8:ad:38:a6:94:f4:a7:26:83:75:cc:85 rport=34213 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_ACCT msg=audit(1389204984.811:7901): pid=24970 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204984.811:7902): pid=24970 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=24971 suid=74 rport=34213 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204984.813:7903): pid=24970 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1389204984.847:7904): pid=24970 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=LOGIN msg=audit(1389204984.847:7905): login pid=24970 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=302 >type=USER_ROLE_CHANGE msg=audit(1389204984.950:7906): pid=24970 uid=0 auid=0 ses=302 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204985.043:7907): pid=24970 uid=0 auid=0 ses=302 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1389204985.080:7908): pid=24970 uid=0 auid=0 ses=302 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204985.109:7909): pid=24970 uid=0 auid=0 ses=302 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204985.110:7910): pid=24973 uid=0 auid=0 ses=302 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=24973 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204985.110:7911): pid=24973 uid=0 auid=0 ses=302 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=24973 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRED_REFR msg=audit(1389204985.144:7912): pid=24973 uid=0 auid=0 ses=302 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204985.198:7913): pid=24970 uid=0 auid=0 ses=302 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRED_DISP msg=audit(1389204985.231:7914): pid=24970 uid=0 auid=0 ses=302 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204985.265:7915): pid=24970 uid=0 auid=0 ses=302 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1389204985.289:7916): pid=24970 uid=0 auid=0 ses=302 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204985.289:7917): pid=24970 uid=0 auid=0 ses=302 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=24970 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204985.289:7918): pid=24970 uid=0 auid=0 ses=302 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=24970 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204985.290:7919): pid=24970 uid=0 auid=0 ses=302 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=24970 suid=0 rport=34213 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204988.186:7920): pid=25030 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=25030 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204988.186:7921): pid=25030 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=25030 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204988.187:7922): pid=25029 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=25030 suid=74 rport=34215 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204988.187:7923): pid=25029 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=25030 suid=74 rport=34215 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204988.844:7924): pid=25029 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=34215 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204988.844:7925): pid=25029 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=4096 fp=8b:56:b0:3f:c8:ad:38:a6:94:f4:a7:26:83:75:cc:85 rport=34215 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_ACCT msg=audit(1389204988.881:7926): pid=25029 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204988.881:7927): pid=25029 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=25030 suid=74 rport=34215 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204988.883:7928): pid=25029 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1389204988.916:7929): pid=25029 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=LOGIN msg=audit(1389204988.916:7930): login pid=25029 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=303 >type=USER_ROLE_CHANGE msg=audit(1389204989.013:7931): pid=25029 uid=0 auid=0 ses=303 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204989.109:7932): pid=25029 uid=0 auid=0 ses=303 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1389204989.145:7933): pid=25029 uid=0 auid=0 ses=303 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204989.174:7934): pid=25029 uid=0 auid=0 ses=303 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204989.175:7935): pid=25032 uid=0 auid=0 ses=303 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=25032 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204989.175:7936): pid=25032 uid=0 auid=0 ses=303 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=25032 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRED_REFR msg=audit(1389204989.209:7937): pid=25032 uid=0 auid=0 ses=303 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204989.246:7938): pid=25029 uid=0 auid=0 ses=303 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRED_DISP msg=audit(1389204989.280:7939): pid=25029 uid=0 auid=0 ses=303 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204989.297:7940): pid=25029 uid=0 auid=0 ses=303 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1389204989.330:7941): pid=25029 uid=0 auid=0 ses=303 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204989.330:7942): pid=25029 uid=0 auid=0 ses=303 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=25029 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204989.330:7943): pid=25029 uid=0 auid=0 ses=303 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=25029 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204989.330:7944): pid=25029 uid=0 auid=0 ses=303 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=25029 suid=0 rport=34215 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204992.249:7945): pid=25045 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=25045 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204992.249:7946): pid=25045 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=25045 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204992.250:7947): pid=25044 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=25045 suid=74 rport=34218 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204992.250:7948): pid=25044 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=25045 suid=74 rport=34218 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204992.785:7949): pid=25044 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=34218 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204992.785:7950): pid=25044 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=4096 fp=8b:56:b0:3f:c8:ad:38:a6:94:f4:a7:26:83:75:cc:85 rport=34218 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_ACCT msg=audit(1389204992.796:7951): pid=25044 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204992.796:7952): pid=25044 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=25045 suid=74 rport=34218 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204992.798:7953): pid=25044 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1389204992.801:7954): pid=25044 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=LOGIN msg=audit(1389204992.801:7955): login pid=25044 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=304 >type=USER_ROLE_CHANGE msg=audit(1389204992.851:7956): pid=25044 uid=0 auid=0 ses=304 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204992.917:7957): pid=25044 uid=0 auid=0 ses=304 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1389204992.929:7958): pid=25044 uid=0 auid=0 ses=304 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204992.932:7959): pid=25044 uid=0 auid=0 ses=304 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204992.933:7960): pid=25066 uid=0 auid=0 ses=304 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=25066 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204992.933:7961): pid=25066 uid=0 auid=0 ses=304 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=25066 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRED_REFR msg=audit(1389204992.935:7962): pid=25066 uid=0 auid=0 ses=304 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204992.958:7963): pid=25044 uid=0 auid=0 ses=304 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRED_DISP msg=audit(1389204992.960:7964): pid=25044 uid=0 auid=0 ses=304 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204992.962:7965): pid=25044 uid=0 auid=0 ses=304 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1389204992.964:7966): pid=25044 uid=0 auid=0 ses=304 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204992.964:7967): pid=25044 uid=0 auid=0 ses=304 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=25044 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204992.964:7968): pid=25044 uid=0 auid=0 ses=304 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=25044 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204992.964:7969): pid=25044 uid=0 auid=0 ses=304 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=25044 suid=0 rport=34218 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=SERVICE_START msg=audit(1389204993.807:7970): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="openstack-swift-container-auditor" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1389204994.094:7971): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="openstack-swift-account-reaper" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1389204994.468:7972): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="openstack-swift-account-auditor" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1389204994.744:7973): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="openstack-swift-object-auditor" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1389204995.022:7974): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="openstack-swift-proxy" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=AVC msg=audit(1389204995.614:7975): avc: denied { write } for pid=25373 comm="rsync" name="lock" dev="tmpfs" ino=6217 scontext=system_u:system_r:rsync_t:s0-s0:c0.c1023 tcontext=system_u:object_r:var_lock_t:s0 tclass=dir >type=AVC msg=audit(1389204995.614:7975): avc: denied { add_name } for pid=25373 comm="rsync" name="swift_server.lock" scontext=system_u:system_r:rsync_t:s0-s0:c0.c1023 tcontext=system_u:object_r:var_lock_t:s0 tclass=dir >type=AVC msg=audit(1389204995.614:7975): avc: denied { create } for pid=25373 comm="rsync" name="swift_server.lock" scontext=system_u:system_r:rsync_t:s0-s0:c0.c1023 tcontext=system_u:object_r:var_lock_t:s0 tclass=file >type=AVC msg=audit(1389204995.614:7975): avc: denied { write } for pid=25373 comm="rsync" path="/run/lock/swift_server.lock" dev="tmpfs" ino=164855 scontext=system_u:system_r:rsync_t:s0-s0:c0.c1023 tcontext=system_u:object_r:var_lock_t:s0 tclass=file >type=SYSCALL msg=audit(1389204995.614:7975): arch=c000003e syscall=2 success=yes exit=4 a0=f27e90 a1=42 a2=180 a3=7f25c7d6be00 items=0 ppid=24054 pid=25373 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="rsync" exe="/usr/bin/rsync" subj=system_u:system_r:rsync_t:s0-s0:c0.c1023 key=(null) >type=CRYPTO_KEY_USER msg=audit(1389204995.970:7976): pid=25388 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=25388 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204995.970:7977): pid=25388 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=25388 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204995.971:7978): pid=25386 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=25388 suid=74 rport=34221 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204995.971:7979): pid=25386 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=25388 suid=74 rport=34221 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204996.528:7980): pid=25386 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=34221 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204996.528:7981): pid=25386 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=4096 fp=8b:56:b0:3f:c8:ad:38:a6:94:f4:a7:26:83:75:cc:85 rport=34221 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_ACCT msg=audit(1389204996.538:7982): pid=25386 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204996.538:7983): pid=25386 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=25388 suid=74 rport=34221 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389204996.540:7984): pid=25386 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1389204996.546:7985): pid=25386 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=LOGIN msg=audit(1389204996.546:7986): login pid=25386 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=305 >type=USER_ROLE_CHANGE msg=audit(1389204996.644:7987): pid=25386 uid=0 auid=0 ses=305 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204996.712:7988): pid=25386 uid=0 auid=0 ses=305 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1389204996.728:7989): pid=25386 uid=0 auid=0 ses=305 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389204996.731:7990): pid=25386 uid=0 auid=0 ses=305 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204996.732:7991): pid=25402 uid=0 auid=0 ses=305 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=25402 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204996.732:7992): pid=25402 uid=0 auid=0 ses=305 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=25402 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRED_REFR msg=audit(1389204996.735:7993): pid=25402 uid=0 auid=0 ses=305 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204996.757:7994): pid=25386 uid=0 auid=0 ses=305 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRED_DISP msg=audit(1389204996.759:7995): pid=25386 uid=0 auid=0 ses=305 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389204996.762:7996): pid=25386 uid=0 auid=0 ses=305 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1389204996.764:7997): pid=25386 uid=0 auid=0 ses=305 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389204996.764:7998): pid=25386 uid=0 auid=0 ses=305 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=25386 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204996.764:7999): pid=25386 uid=0 auid=0 ses=305 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=25386 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204996.764:8000): pid=25386 uid=0 auid=0 ses=305 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=25386 suid=0 rport=34221 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=SERVICE_START msg=audit(1389204998.065:8001): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="openstack-swift-object-updater" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=AVC msg=audit(1389204998.373:8002): avc: denied { write } for pid=25485 comm="rsync" name="swift_server.lock" dev="tmpfs" ino=164855 scontext=system_u:system_r:rsync_t:s0-s0:c0.c1023 tcontext=system_u:object_r:var_lock_t:s0 tclass=file >type=SYSCALL msg=audit(1389204998.373:8002): arch=c000003e syscall=2 success=yes exit=4 a0=1477e90 a1=42 a2=180 a3=7fa58236ae00 items=0 ppid=24054 pid=25485 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="rsync" exe="/usr/bin/rsync" subj=system_u:system_r:rsync_t:s0-s0:c0.c1023 key=(null) >type=SERVICE_START msg=audit(1389204998.875:8003): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="openstack-swift-container-replicator" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1389204999.176:8004): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="openstack-swift-container" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=AVC msg=audit(1389204999.500:8005): avc: denied { name_bind } for pid=25594 comm="swift-container" src=6001 scontext=system_u:system_r:swift_t:s0 tcontext=system_u:object_r:xserver_port_t:s0 tclass=tcp_socket >type=SYSCALL msg=audit(1389204999.500:8005): arch=c000003e syscall=49 success=yes exit=0 a0=4 a1=7fff0d78b130 a2=10 a3=2 items=0 ppid=1 pid=25594 auid=4294967295 uid=1001 gid=1001 euid=1001 suid=1001 fsuid=1001 egid=1001 sgid=1001 fsgid=1001 ses=4294967295 tty=(none) comm="swift-container" exe="/usr/bin/python2.7" subj=system_u:system_r:swift_t:s0 key=(null) >type=SERVICE_START msg=audit(1389204999.571:8006): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="openstack-swift-account-replicator" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204999.798:8007): pid=25718 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=25718 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389204999.798:8008): pid=25718 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=25718 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204999.799:8009): pid=25708 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=25718 suid=74 rport=34223 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389204999.799:8010): pid=25708 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=25718 suid=74 rport=34223 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=SERVICE_START msg=audit(1389204999.871:8011): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="openstack-swift-account" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=AVC msg=audit(1389205000.102:8012): avc: denied { name_bind } for pid=25726 comm="swift-account-s" src=6002 scontext=system_u:system_r:swift_t:s0 tcontext=system_u:object_r:xserver_port_t:s0 tclass=tcp_socket >type=SYSCALL msg=audit(1389205000.102:8012): arch=c000003e syscall=49 success=yes exit=0 a0=4 a1=7fff51332a60 a2=10 a3=2 items=0 ppid=1 pid=25726 auid=4294967295 uid=1001 gid=1001 euid=1001 suid=1001 fsuid=1001 egid=1001 sgid=1001 fsgid=1001 ses=4294967295 tty=(none) comm="swift-account-s" exe="/usr/bin/python2.7" subj=system_u:system_r:swift_t:s0 key=(null) >type=USER_AUTH msg=audit(1389205000.365:8013): pid=25708 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=34223 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389205000.365:8014): pid=25708 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=4096 fp=8b:56:b0:3f:c8:ad:38:a6:94:f4:a7:26:83:75:cc:85 rport=34223 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_ACCT msg=audit(1389205000.374:8015): pid=25708 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389205000.374:8016): pid=25708 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=25718 suid=74 rport=34223 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389205000.375:8017): pid=25708 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1389205000.390:8018): pid=25708 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=LOGIN msg=audit(1389205000.390:8019): login pid=25708 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=306 >type=USER_ROLE_CHANGE msg=audit(1389205000.474:8020): pid=25708 uid=0 auid=0 ses=306 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=SERVICE_START msg=audit(1389205000.491:8021): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="openstack-swift-object" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1389205000.616:8022): pid=25708 uid=0 auid=0 ses=306 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1389205000.631:8023): pid=25708 uid=0 auid=0 ses=306 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389205000.638:8024): pid=25708 uid=0 auid=0 ses=306 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389205000.638:8025): pid=25824 uid=0 auid=0 ses=306 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=25824 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389205000.638:8026): pid=25824 uid=0 auid=0 ses=306 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=25824 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRED_REFR msg=audit(1389205000.643:8027): pid=25824 uid=0 auid=0 ses=306 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389205000.681:8028): pid=25708 uid=0 auid=0 ses=306 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRED_DISP msg=audit(1389205000.685:8029): pid=25708 uid=0 auid=0 ses=306 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389205000.689:8030): pid=25708 uid=0 auid=0 ses=306 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1389205000.698:8031): pid=25708 uid=0 auid=0 ses=306 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389205000.698:8032): pid=25708 uid=0 auid=0 ses=306 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=25708 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389205000.698:8033): pid=25708 uid=0 auid=0 ses=306 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=25708 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389205000.698:8034): pid=25708 uid=0 auid=0 ses=306 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=25708 suid=0 rport=34223 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=AVC msg=audit(1389205000.773:8035): avc: denied { name_bind } for pid=25813 comm="swift-object-se" src=6000 scontext=system_u:system_r:swift_t:s0 tcontext=system_u:object_r:xserver_port_t:s0 tclass=tcp_socket >type=SYSCALL msg=audit(1389205000.773:8035): arch=c000003e syscall=49 success=yes exit=0 a0=4 a1=7fff49ef97e0 a2=10 a3=2 items=0 ppid=1 pid=25813 auid=4294967295 uid=1001 gid=1001 euid=1001 suid=1001 fsuid=1001 egid=1001 sgid=1001 fsgid=1001 ses=4294967295 tty=(none) comm="swift-object-se" exe="/usr/bin/python2.7" subj=system_u:system_r:swift_t:s0 key=(null) >type=AVC msg=audit(1389205000.809:8036): avc: denied { getattr } for pid=25813 comm="swift-object-se" name="/" dev="tmpfs" ino=5941 scontext=system_u:system_r:swift_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=filesystem >type=SYSCALL msg=audit(1389205000.809:8036): arch=c000003e syscall=137 success=yes exit=0 a0=7f7101a249b6 a1=7fff49ef8bc0 a2=1 a3=7fff49ef8940 items=0 ppid=1 pid=25813 auid=4294967295 uid=1001 gid=1001 euid=1001 suid=1001 fsuid=1001 egid=1001 sgid=1001 fsgid=1001 ses=4294967295 tty=(none) comm="swift-object-se" exe="/usr/bin/python2.7" subj=system_u:system_r:swift_t:s0 key=(null) >type=AVC msg=audit(1389205000.810:8037): avc: denied { write } for pid=25813 comm="swift-object-se" name="/" dev="tmpfs" ino=5941 scontext=system_u:system_r:swift_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=dir >type=AVC msg=audit(1389205000.810:8037): avc: denied { add_name } for pid=25813 comm="swift-object-se" name="sem.vNetrT" scontext=system_u:system_r:swift_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=dir >type=AVC msg=audit(1389205000.810:8037): avc: denied { create } for pid=25813 comm="swift-object-se" name="sem.vNetrT" scontext=system_u:system_r:swift_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=file >type=AVC msg=audit(1389205000.810:8037): avc: denied { read write open } for pid=25813 comm="swift-object-se" path="/dev/shm/sem.vNetrT" dev="tmpfs" ino=167258 scontext=system_u:system_r:swift_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=file >type=SYSCALL msg=audit(1389205000.810:8037): arch=c000003e syscall=2 success=yes exit=5 a0=7fff49ef8e40 a1=c2 a2=180 a3=52cd9608 items=0 ppid=1 pid=25813 auid=4294967295 uid=1001 gid=1001 euid=1001 suid=1001 fsuid=1001 egid=1001 sgid=1001 fsgid=1001 ses=4294967295 tty=(none) comm="swift-object-se" exe="/usr/bin/python2.7" subj=system_u:system_r:swift_t:s0 key=(null) >type=AVC msg=audit(1389205000.810:8038): avc: denied { link } for pid=25813 comm="swift-object-se" name="sem.vNetrT" dev="tmpfs" ino=167258 scontext=system_u:system_r:swift_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=file >type=SYSCALL msg=audit(1389205000.810:8038): arch=c000003e syscall=86 success=yes exit=0 a0=7fff49ef8e40 a1=7fff49ef8e70 a2=3 a3=7fff49ef8c00 items=0 ppid=1 pid=25813 auid=4294967295 uid=1001 gid=1001 euid=1001 suid=1001 fsuid=1001 egid=1001 sgid=1001 fsgid=1001 ses=4294967295 tty=(none) comm="swift-object-se" exe="/usr/bin/python2.7" subj=system_u:system_r:swift_t:s0 key=(null) >type=AVC msg=audit(1389205000.810:8039): avc: denied { getattr } for pid=25813 comm="swift-object-se" path="/dev/shm/sem.vNetrT" dev="tmpfs" ino=167258 scontext=system_u:system_r:swift_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=file >type=SYSCALL msg=audit(1389205000.810:8039): arch=c000003e syscall=5 success=yes exit=0 a0=5 a1=7fff49ef8d70 a2=7fff49ef8d70 a3=7fff49ef8b20 items=0 ppid=1 pid=25813 auid=4294967295 uid=1001 gid=1001 euid=1001 suid=1001 fsuid=1001 egid=1001 sgid=1001 fsgid=1001 ses=4294967295 tty=(none) comm="swift-object-se" exe="/usr/bin/python2.7" subj=system_u:system_r:swift_t:s0 key=(null) >type=AVC msg=audit(1389205000.810:8040): avc: denied { remove_name } for pid=25813 comm="swift-object-se" name="sem.vNetrT" dev="tmpfs" ino=167258 scontext=system_u:system_r:swift_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=dir >type=AVC msg=audit(1389205000.810:8040): avc: denied { unlink } for pid=25813 comm="swift-object-se" name="sem.vNetrT" dev="tmpfs" ino=167258 scontext=system_u:system_r:swift_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=file >type=SYSCALL msg=audit(1389205000.810:8040): arch=c000003e syscall=87 success=yes exit=0 a0=7fff49ef8e40 a1=160e400 a2=0 a3=7fff49ef8c00 items=0 ppid=1 pid=25813 auid=4294967295 uid=1001 gid=1001 euid=1001 suid=1001 fsuid=1001 egid=1001 sgid=1001 fsgid=1001 ses=4294967295 tty=(none) comm="swift-object-se" exe="/usr/bin/python2.7" subj=system_u:system_r:swift_t:s0 key=(null) >type=SERVICE_START msg=audit(1389205000.878:8041): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="openstack-swift-object-replicator" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=AVC msg=audit(1389205001.098:8042): avc: denied { getattr } for pid=25867 comm="swift-object-re" path="/srv/node/device1" dev="loop1" ino=2 scontext=system_u:system_r:swift_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=dir >type=SYSCALL msg=audit(1389205001.098:8042): arch=c000003e syscall=4 success=yes exit=0 a0=243ebb0 a1=7fff8e0010a0 a2=7fff8e0010a0 a3=0 items=0 ppid=1 pid=25867 auid=4294967295 uid=1001 gid=1001 euid=1001 suid=1001 fsuid=1001 egid=1001 sgid=1001 fsgid=1001 ses=4294967295 tty=(none) comm="swift-object-re" exe="/usr/bin/python2.7" subj=system_u:system_r:swift_t:s0 key=(null) >type=AVC msg=audit(1389205001.098:8043): avc: denied { write } for pid=25867 comm="swift-object-re" name="/" dev="loop1" ino=2 scontext=system_u:system_r:swift_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=dir >type=AVC msg=audit(1389205001.098:8043): avc: denied { add_name } for pid=25867 comm="swift-object-re" name="objects" scontext=system_u:system_r:swift_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=dir >type=AVC msg=audit(1389205001.098:8043): avc: denied { create } for pid=25867 comm="swift-object-re" name="objects" scontext=system_u:system_r:swift_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=dir >type=SYSCALL msg=audit(1389205001.098:8043): arch=c000003e syscall=83 success=yes exit=0 a0=2519d70 a1=1ff a2=7fced925df88 a3=7fff8e001050 items=0 ppid=1 pid=25867 auid=4294967295 uid=1001 gid=1001 euid=1001 suid=1001 fsuid=1001 egid=1001 sgid=1001 fsgid=1001 ses=4294967295 tty=(none) comm="swift-object-re" exe="/usr/bin/python2.7" subj=system_u:system_r:swift_t:s0 key=(null) >type=SERVICE_START msg=audit(1389205001.183:8044): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="openstack-swift-container-updater" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=NETFILTER_CFG msg=audit(1389205003.158:8045): table=filter family=2 entries=0 >type=NETFILTER_CFG msg=audit(1389205003.158:8045): table=nat family=2 entries=0 >type=NETFILTER_CFG msg=audit(1389205003.158:8045): table=mangle family=2 entries=0 >type=NETFILTER_CFG msg=audit(1389205003.158:8045): table=filter family=10 entries=0 >type=SYSCALL msg=audit(1389205003.158:8045): arch=c000003e syscall=272 success=yes exit=0 a0=40000000 a1=c0 a2=0 a3=7fff91e05b70 items=0 ppid=26160 pid=26167 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=293 tty=(none) comm="ip" exe="/usr/sbin/ip" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null) >type=NETFILTER_CFG msg=audit(1389205003.177:8046): table=filter family=2 entries=0 >type=NETFILTER_CFG msg=audit(1389205003.177:8046): table=nat family=2 entries=0 >type=NETFILTER_CFG msg=audit(1389205003.177:8046): table=mangle family=2 entries=0 >type=NETFILTER_CFG msg=audit(1389205003.177:8046): table=filter family=10 entries=0 >type=SYSCALL msg=audit(1389205003.177:8046): arch=c000003e syscall=272 success=yes exit=0 a0=40000000 a1=c0 a2=0 a3=7fffad22e090 items=0 ppid=26160 pid=26174 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=293 tty=(none) comm="ip" exe="/usr/sbin/ip" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null) >type=NETFILTER_CFG msg=audit(1389205003.442:8047): table=filter family=2 entries=0 >type=NETFILTER_CFG msg=audit(1389205003.442:8047): table=nat family=2 entries=0 >type=NETFILTER_CFG msg=audit(1389205003.442:8047): table=mangle family=2 entries=0 >type=NETFILTER_CFG msg=audit(1389205003.442:8047): table=filter family=10 entries=0 >type=SYSCALL msg=audit(1389205003.442:8047): arch=c000003e syscall=272 success=yes exit=0 a0=40000000 a1=c0 a2=0 a3=7fffaf5c96e0 items=0 ppid=26160 pid=26176 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=293 tty=(none) comm="ip" exe="/usr/sbin/ip" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null) >type=CRYPTO_KEY_USER msg=audit(1389205003.687:8048): pid=26196 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=26196 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389205003.687:8049): pid=26196 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=26196 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389205003.688:8050): pid=26195 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=26196 suid=74 rport=34224 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389205003.688:8051): pid=26195 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=26196 suid=74 rport=34224 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389205004.218:8052): pid=26195 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=34224 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389205004.218:8053): pid=26195 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=4096 fp=8b:56:b0:3f:c8:ad:38:a6:94:f4:a7:26:83:75:cc:85 rport=34224 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_ACCT msg=audit(1389205004.225:8054): pid=26195 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389205004.225:8055): pid=26195 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=26196 suid=74 rport=34224 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389205004.226:8056): pid=26195 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1389205004.235:8057): pid=26195 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=LOGIN msg=audit(1389205004.235:8058): login pid=26195 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=307 >type=USER_ROLE_CHANGE msg=audit(1389205004.294:8059): pid=26195 uid=0 auid=0 ses=307 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389205004.374:8060): pid=26195 uid=0 auid=0 ses=307 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1389205004.383:8061): pid=26195 uid=0 auid=0 ses=307 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389205004.385:8062): pid=26195 uid=0 auid=0 ses=307 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389205004.386:8063): pid=26198 uid=0 auid=0 ses=307 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=26198 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389205004.386:8064): pid=26198 uid=0 auid=0 ses=307 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=26198 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRED_REFR msg=audit(1389205004.389:8065): pid=26198 uid=0 auid=0 ses=307 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389205004.435:8066): pid=26206 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=26206 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389205004.435:8067): pid=26206 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=26206 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389205004.436:8068): pid=26205 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=26206 suid=74 rport=34225 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389205004.436:8069): pid=26205 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=26206 suid=74 rport=34225 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_END msg=audit(1389205004.437:8070): pid=26195 uid=0 auid=0 ses=307 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRED_DISP msg=audit(1389205004.442:8071): pid=26195 uid=0 auid=0 ses=307 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389205004.444:8072): pid=26195 uid=0 auid=0 ses=307 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1389205004.447:8073): pid=26195 uid=0 auid=0 ses=307 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389205004.447:8074): pid=26195 uid=0 auid=0 ses=307 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=26195 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389205004.447:8075): pid=26195 uid=0 auid=0 ses=307 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=26195 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389205004.447:8076): pid=26195 uid=0 auid=0 ses=307 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=26195 suid=0 rport=34224 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389205004.955:8077): pid=26205 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=34225 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389205004.955:8078): pid=26205 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=4096 fp=8b:56:b0:3f:c8:ad:38:a6:94:f4:a7:26:83:75:cc:85 rport=34225 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_ACCT msg=audit(1389205004.960:8079): pid=26205 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389205004.961:8080): pid=26205 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=26206 suid=74 rport=34225 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389205004.962:8081): pid=26205 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1389205004.964:8082): pid=26205 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=LOGIN msg=audit(1389205004.964:8083): login pid=26205 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=308 >type=USER_ROLE_CHANGE msg=audit(1389205005.005:8084): pid=26205 uid=0 auid=0 ses=308 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389205005.022:8085): pid=26205 uid=0 auid=0 ses=308 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1389205005.027:8086): pid=26205 uid=0 auid=0 ses=308 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389205005.029:8087): pid=26205 uid=0 auid=0 ses=308 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389205005.030:8088): pid=26210 uid=0 auid=0 ses=308 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=26210 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389205005.030:8089): pid=26210 uid=0 auid=0 ses=308 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=26210 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRED_REFR msg=audit(1389205005.033:8090): pid=26210 uid=0 auid=0 ses=308 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389205005.056:8091): pid=26205 uid=0 auid=0 ses=308 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRED_DISP msg=audit(1389205005.058:8092): pid=26205 uid=0 auid=0 ses=308 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389205005.060:8093): pid=26205 uid=0 auid=0 ses=308 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1389205005.063:8094): pid=26205 uid=0 auid=0 ses=308 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389205005.063:8095): pid=26205 uid=0 auid=0 ses=308 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=26205 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389205005.063:8096): pid=26205 uid=0 auid=0 ses=308 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=26205 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389205005.063:8097): pid=26205 uid=0 auid=0 ses=308 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=26205 suid=0 rport=34225 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=NETFILTER_CFG msg=audit(1389205006.635:8098): table=filter family=2 entries=0 >type=NETFILTER_CFG msg=audit(1389205006.635:8098): table=nat family=2 entries=0 >type=NETFILTER_CFG msg=audit(1389205006.635:8098): table=mangle family=2 entries=0 >type=NETFILTER_CFG msg=audit(1389205006.635:8098): table=filter family=10 entries=0 >type=SYSCALL msg=audit(1389205006.635:8098): arch=c000003e syscall=272 success=yes exit=0 a0=40000000 a1=c0 a2=0 a3=7fff1b2d3690 items=0 ppid=26433 pid=26440 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=293 tty=(none) comm="ip" exe="/usr/sbin/ip" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null) >type=NETFILTER_CFG msg=audit(1389205006.650:8099): table=filter family=2 entries=0 >type=NETFILTER_CFG msg=audit(1389205006.650:8099): table=nat family=2 entries=0 >type=NETFILTER_CFG msg=audit(1389205006.650:8099): table=mangle family=2 entries=0 >type=NETFILTER_CFG msg=audit(1389205006.650:8099): table=filter family=10 entries=0 >type=SYSCALL msg=audit(1389205006.650:8099): arch=c000003e syscall=272 success=yes exit=0 a0=40000000 a1=c0 a2=0 a3=7fff07fef900 items=0 ppid=26433 pid=26444 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=293 tty=(none) comm="ip" exe="/usr/sbin/ip" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null) >type=NETFILTER_CFG msg=audit(1389205006.915:8100): table=filter family=2 entries=0 >type=NETFILTER_CFG msg=audit(1389205006.915:8100): table=nat family=2 entries=0 >type=NETFILTER_CFG msg=audit(1389205006.915:8100): table=mangle family=2 entries=0 >type=NETFILTER_CFG msg=audit(1389205006.915:8100): table=filter family=10 entries=0 >type=SYSCALL msg=audit(1389205006.915:8100): arch=c000003e syscall=272 success=yes exit=0 a0=40000000 a1=c0 a2=0 a3=7fff5b9850f0 items=0 ppid=26433 pid=26446 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=293 tty=(none) comm="ip" exe="/usr/sbin/ip" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null) >type=CRYPTO_KEY_USER msg=audit(1389205008.071:8101): pid=26476 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=26476 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389205008.071:8102): pid=26476 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=26476 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389205008.071:8103): pid=26475 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=26476 suid=74 rport=34226 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389205008.072:8104): pid=26475 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=26476 suid=74 rport=34226 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=NETFILTER_CFG msg=audit(1389205008.350:8105): table=filter family=2 entries=42 >type=SYSCALL msg=audit(1389205008.350:8105): arch=c000003e syscall=54 success=yes exit=0 a0=3 a1=0 a2=40 a3=b753c0 items=0 ppid=25934 pid=26486 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=293 tty=(none) comm="iptables" exe="/usr/sbin/xtables-multi" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null) >type=NETFILTER_CFG msg=audit(1389205008.378:8106): table=nat family=2 entries=28 >type=SYSCALL msg=audit(1389205008.378:8106): arch=c000003e syscall=54 success=yes exit=0 a0=3 a1=0 a2=40 a3=cf7950 items=0 ppid=25934 pid=26495 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=293 tty=(none) comm="iptables" exe="/usr/sbin/xtables-multi" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null) >type=USER_AUTH msg=audit(1389205008.655:8107): pid=26475 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=34226 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389205008.655:8108): pid=26475 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=4096 fp=8b:56:b0:3f:c8:ad:38:a6:94:f4:a7:26:83:75:cc:85 rport=34226 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_ACCT msg=audit(1389205008.663:8109): pid=26475 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389205008.663:8110): pid=26475 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=26476 suid=74 rport=34226 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389205008.665:8111): pid=26475 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1389205008.668:8112): pid=26475 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=LOGIN msg=audit(1389205008.668:8113): login pid=26475 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=309 >type=USER_ROLE_CHANGE msg=audit(1389205008.807:8114): pid=26475 uid=0 auid=0 ses=309 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389205008.825:8115): pid=26475 uid=0 auid=0 ses=309 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1389205008.830:8116): pid=26475 uid=0 auid=0 ses=309 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389205008.833:8117): pid=26475 uid=0 auid=0 ses=309 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389205008.835:8118): pid=26511 uid=0 auid=0 ses=309 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=26511 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389205008.835:8119): pid=26511 uid=0 auid=0 ses=309 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=26511 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRED_REFR msg=audit(1389205008.838:8120): pid=26511 uid=0 auid=0 ses=309 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389205008.867:8121): pid=26475 uid=0 auid=0 ses=309 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRED_DISP msg=audit(1389205008.872:8122): pid=26475 uid=0 auid=0 ses=309 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389205008.882:8123): pid=26475 uid=0 auid=0 ses=309 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1389205008.886:8124): pid=26475 uid=0 auid=0 ses=309 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389205008.886:8125): pid=26475 uid=0 auid=0 ses=309 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=26475 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389205008.886:8126): pid=26475 uid=0 auid=0 ses=309 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=26475 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389205008.886:8127): pid=26475 uid=0 auid=0 ses=309 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=26475 suid=0 rport=34226 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=NETFILTER_CFG msg=audit(1389205010.210:8128): table=filter family=2 entries=43 >type=SYSCALL msg=audit(1389205010.210:8128): arch=c000003e syscall=54 success=yes exit=0 a0=3 a1=0 a2=40 a3=1016770 items=0 ppid=25934 pid=26552 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=293 tty=(none) comm="iptables" exe="/usr/sbin/xtables-multi" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null) >type=CRYPTO_KEY_USER msg=audit(1389205011.885:8129): pid=26602 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=26602 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389205011.885:8130): pid=26602 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=26602 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389205011.886:8131): pid=26601 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=26602 suid=74 rport=34258 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389205011.887:8132): pid=26601 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=26602 suid=74 rport=34258 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389205012.838:8133): pid=26601 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=34258 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389205012.838:8134): pid=26601 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=4096 fp=8b:56:b0:3f:c8:ad:38:a6:94:f4:a7:26:83:75:cc:85 rport=34258 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_ACCT msg=audit(1389205012.866:8135): pid=26601 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389205012.866:8136): pid=26601 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=26602 suid=74 rport=34258 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389205012.868:8137): pid=26601 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1389205012.902:8138): pid=26601 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=LOGIN msg=audit(1389205012.902:8139): login pid=26601 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=310 >type=USER_ROLE_CHANGE msg=audit(1389205013.009:8140): pid=26601 uid=0 auid=0 ses=310 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389205013.050:8141): pid=26601 uid=0 auid=0 ses=310 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1389205013.059:8142): pid=26601 uid=0 auid=0 ses=310 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389205013.061:8143): pid=26601 uid=0 auid=0 ses=310 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389205013.063:8144): pid=26631 uid=0 auid=0 ses=310 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=26631 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389205013.063:8145): pid=26631 uid=0 auid=0 ses=310 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=26631 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRED_REFR msg=audit(1389205013.069:8146): pid=26631 uid=0 auid=0 ses=310 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389205013.132:8147): pid=26601 uid=0 auid=0 ses=310 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRED_DISP msg=audit(1389205013.142:8148): pid=26601 uid=0 auid=0 ses=310 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389205013.146:8149): pid=26601 uid=0 auid=0 ses=310 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1389205013.149:8150): pid=26601 uid=0 auid=0 ses=310 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389205013.149:8151): pid=26601 uid=0 auid=0 ses=310 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=26601 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389205013.149:8152): pid=26601 uid=0 auid=0 ses=310 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=26601 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389205013.149:8153): pid=26601 uid=0 auid=0 ses=310 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=26601 suid=0 rport=34258 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389205016.133:8154): pid=26734 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=26734 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389205016.133:8155): pid=26734 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=26734 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389205016.134:8156): pid=26733 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=26734 suid=74 rport=34281 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389205016.134:8157): pid=26733 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=26734 suid=74 rport=34281 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=AVC msg=audit(1389205016.677:8158): avc: denied { nlmsg_write } for pid=26744 comm="ip" scontext=system_u:system_r:neutron_t:s0 tcontext=system_u:system_r:neutron_t:s0 tclass=netlink_route_socket >type=SYSCALL msg=audit(1389205016.677:8158): arch=c000003e syscall=44 success=yes exit=32 a0=3 a1=7fff46a97f60 a2=20 a3=0 items=0 ppid=21505 pid=26744 auid=4294967295 uid=995 gid=992 euid=995 suid=995 fsuid=995 egid=992 sgid=992 fsgid=992 ses=4294967295 tty=(none) comm="ip" exe="/usr/sbin/ip" subj=system_u:system_r:neutron_t:s0 key=(null) >type=USER_CMD msg=audit(1389205016.745:8159): pid=26745 uid=995 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206970202D6F206E65746E73206C697374 terminal=? res=success' >type=USER_START msg=audit(1389205016.746:8160): pid=26745 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1389205016.812:8161): pid=26745 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1389205016.824:8162): pid=26748 uid=995 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206970206E65746E73206164642071726F757465722D30323130623937632D366534612D346563392D623763632D623234316137636635336339 terminal=? res=success' >type=USER_START msg=audit(1389205016.824:8163): pid=26748 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=AVC msg=audit(1389205016.886:8164): avc: denied { mounton } for pid=26751 comm="ip" path="/run/netns" dev="tmpfs" ino=19796 scontext=system_u:system_r:neutron_t:s0 tcontext=unconfined_u:object_r:var_run_t:s0 tclass=dir >type=SYSCALL msg=audit(1389205016.886:8164): arch=c000003e syscall=165 success=yes exit=0 a0=43c234 a1=4370a2 a2=43818d a3=104000 items=0 ppid=26749 pid=26751 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="ip" exe="/usr/sbin/ip" subj=system_u:system_r:neutron_t:s0 key=(null) >type=AVC msg=audit(1389205016.886:8165): avc: denied { create } for pid=26751 comm="ip" name="qrouter-0210b97c-6e4a-4ec9-b7cc-b241a7cf53c9" scontext=system_u:system_r:neutron_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file >type=AVC msg=audit(1389205016.886:8165): avc: denied { read open } for pid=26751 comm="ip" path="/run/netns/qrouter-0210b97c-6e4a-4ec9-b7cc-b241a7cf53c9" dev="tmpfs" ino=172386 scontext=system_u:system_r:neutron_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file >type=SYSCALL msg=audit(1389205016.886:8165): arch=c000003e syscall=2 success=yes exit=4 a0=7ffff5e03220 a1=c0 a2=0 a3=7ffff5e02fd0 items=0 ppid=26749 pid=26751 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="ip" exe="/usr/sbin/ip" subj=system_u:system_r:neutron_t:s0 key=(null) >type=NETFILTER_CFG msg=audit(1389205016.886:8166): table=filter family=2 entries=0 >type=NETFILTER_CFG msg=audit(1389205016.886:8166): table=nat family=2 entries=0 >type=NETFILTER_CFG msg=audit(1389205016.886:8166): table=mangle family=2 entries=0 >type=NETFILTER_CFG msg=audit(1389205016.886:8166): table=filter family=10 entries=0 >type=SYSCALL msg=audit(1389205016.886:8166): arch=c000003e syscall=272 success=yes exit=0 a0=40000000 a1=c0 a2=0 a3=7ffff5e02fd0 items=0 ppid=26749 pid=26751 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="ip" exe="/usr/sbin/ip" subj=system_u:system_r:neutron_t:s0 key=(null) >type=AVC msg=audit(1389205016.886:8167): avc: denied { mounton } for pid=26751 comm="ip" path="/run/netns/qrouter-0210b97c-6e4a-4ec9-b7cc-b241a7cf53c9" dev="tmpfs" ino=172386 scontext=system_u:system_r:neutron_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file >type=SYSCALL msg=audit(1389205016.886:8167): arch=c000003e syscall=165 success=yes exit=0 a0=43718e a1=7ffff5e03220 a2=43818d a3=1000 items=0 ppid=26749 pid=26751 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="ip" exe="/usr/sbin/ip" subj=system_u:system_r:neutron_t:s0 key=(null) >type=USER_END msg=audit(1389205016.912:8168): pid=26748 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1389205016.919:8169): pid=26756 uid=995 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206970206E65746E7320657865632071726F757465722D30323130623937632D366534612D346563392D623763632D623234316137636635336339206970206C696E6B20736574206C6F207570 terminal=? res=success' >type=USER_START msg=audit(1389205016.919:8170): pid=26756 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=AVC msg=audit(1389205016.987:8171): avc: denied { mounton } for pid=26760 comm="ip" path="/" dev="vda1" ino=2 scontext=system_u:system_r:neutron_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir >type=SYSCALL msg=audit(1389205016.987:8171): arch=c000003e syscall=165 success=yes exit=0 a0=43c234 a1=4370cf a2=43818d a3=84000 items=0 ppid=26757 pid=26760 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="ip" exe="/usr/sbin/ip" subj=system_u:system_r:neutron_t:s0 key=(null) >type=AVC msg=audit(1389205016.987:8172): avc: denied { unmount } for pid=26760 comm="ip" scontext=system_u:system_r:neutron_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=filesystem >type=SYSCALL msg=audit(1389205016.987:8172): arch=c000003e syscall=166 success=yes exit=0 a0=437115 a1=2 a2=43818d a3=7fff93d33040 items=0 ppid=26757 pid=26760 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="ip" exe="/usr/sbin/ip" subj=system_u:system_r:neutron_t:s0 key=(null) >type=AVC msg=audit(1389205016.987:8173): avc: denied { mounton } for pid=26760 comm="ip" path="/sys" dev="vda1" ino=15650 scontext=system_u:system_r:neutron_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=dir >type=SYSCALL msg=audit(1389205016.987:8173): arch=c000003e syscall=165 success=yes exit=0 a0=7fff93d38e60 a1=437115 a2=437135 a3=0 items=0 ppid=26757 pid=26760 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="ip" exe="/usr/sbin/ip" subj=system_u:system_r:neutron_t:s0 key=(null) >type=USER_END msg=audit(1389205017.013:8174): pid=26756 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1389205017.019:8175): pid=26761 uid=995 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206970206E65746E7320657865632071726F757465722D30323130623937632D366534612D346563392D623763632D6232343161376366353363392073797363746C202D77206E65742E697076342E69705F666F72776172643D31 terminal=? res=success' >type=USER_START msg=audit(1389205017.019:8176): pid=26761 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=AVC msg=audit(1389205017.097:8177): avc: denied { search } for pid=26766 comm="sysctl" name="net" dev="proc" ino=7848 scontext=system_u:system_r:neutron_t:s0 tcontext=system_u:object_r:sysctl_net_t:s0 tclass=dir >type=AVC msg=audit(1389205017.097:8177): avc: denied { getattr } for pid=26766 comm="sysctl" path="/proc/sys/net/ipv4/ip_forward" dev="proc" ino=172513 scontext=system_u:system_r:neutron_t:s0 tcontext=system_u:object_r:sysctl_net_t:s0 tclass=file >type=SYSCALL msg=audit(1389205017.097:8177): arch=c000003e syscall=4 success=yes exit=0 a0=1173050 a1=7fff421f4910 a2=7fff421f4910 a3=7fff421f46c0 items=0 ppid=26762 pid=26766 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="sysctl" exe="/usr/sbin/sysctl" subj=system_u:system_r:neutron_t:s0 key=(null) >type=AVC msg=audit(1389205017.097:8178): avc: denied { write } for pid=26766 comm="sysctl" name="ip_forward" dev="proc" ino=172513 scontext=system_u:system_r:neutron_t:s0 tcontext=system_u:object_r:sysctl_net_t:s0 tclass=file >type=AVC msg=audit(1389205017.097:8178): avc: denied { open } for pid=26766 comm="sysctl" path="/proc/sys/net/ipv4/ip_forward" dev="proc" ino=172513 scontext=system_u:system_r:neutron_t:s0 tcontext=system_u:object_r:sysctl_net_t:s0 tclass=file >type=SYSCALL msg=audit(1389205017.097:8178): arch=c000003e syscall=2 success=yes exit=3 a0=1173050 a1=241 a2=1b6 a3=7fff421f46c0 items=0 ppid=26762 pid=26766 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="sysctl" exe="/usr/sbin/sysctl" subj=system_u:system_r:neutron_t:s0 key=(null) >type=USER_END msg=audit(1389205017.103:8179): pid=26761 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_AUTH msg=audit(1389205017.106:8180): pid=26733 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=34281 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389205017.106:8181): pid=26733 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=4096 fp=8b:56:b0:3f:c8:ad:38:a6:94:f4:a7:26:83:75:cc:85 rport=34281 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_ACCT msg=audit(1389205017.125:8182): pid=26733 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389205017.125:8183): pid=26733 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=26734 suid=74 rport=34281 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389205017.127:8184): pid=26733 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=ssh res=success' >type=USER_CMD msg=audit(1389205017.130:8185): pid=26767 uid=995 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206970206E65746E7320657865632071726F757465722D30323130623937632D366534612D346563392D623763632D6232343161376366353363392069707461626C65732D73617665202D63 terminal=? res=success' >type=USER_START msg=audit(1389205017.130:8186): pid=26767 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_ACQ msg=audit(1389205017.154:8187): pid=26733 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=LOGIN msg=audit(1389205017.154:8188): login pid=26733 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=311 >type=AVC msg=audit(1389205017.202:8189): avc: denied { mounton } for pid=26771 comm="ip" path="/" dev="vda1" ino=2 scontext=system_u:system_r:neutron_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir >type=SYSCALL msg=audit(1389205017.202:8189): arch=c000003e syscall=165 success=yes exit=0 a0=43c234 a1=4370cf a2=43818d a3=84000 items=0 ppid=26769 pid=26771 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="ip" exe="/usr/sbin/ip" subj=system_u:system_r:neutron_t:s0 key=(null) >type=AVC msg=audit(1389205017.202:8190): avc: denied { unmount } for pid=26771 comm="ip" scontext=system_u:system_r:neutron_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=filesystem >type=SYSCALL msg=audit(1389205017.202:8190): arch=c000003e syscall=166 success=yes exit=0 a0=437115 a1=2 a2=43818d a3=7fff8142bdf0 items=0 ppid=26769 pid=26771 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="ip" exe="/usr/sbin/ip" subj=system_u:system_r:neutron_t:s0 key=(null) >type=AVC msg=audit(1389205017.202:8191): avc: denied { mounton } for pid=26771 comm="ip" path="/sys" dev="vda1" ino=15650 scontext=system_u:system_r:neutron_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=dir >type=SYSCALL msg=audit(1389205017.202:8191): arch=c000003e syscall=165 success=yes exit=0 a0=7fff81431e62 a1=437115 a2=437135 a3=0 items=0 ppid=26769 pid=26771 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="ip" exe="/usr/sbin/ip" subj=system_u:system_r:neutron_t:s0 key=(null) >type=USER_END msg=audit(1389205017.236:8192): pid=26767 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1389205017.267:8193): pid=26775 uid=995 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206970206E65746E7320657865632071726F757465722D30323130623937632D366534612D346563392D623763632D6232343161376366353363392069707461626C65732D726573746F7265202D63 terminal=? res=success' >type=USER_START msg=audit(1389205017.268:8194): pid=26775 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_ROLE_CHANGE msg=audit(1389205017.316:8195): pid=26733 uid=0 auid=0 ses=311 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=AVC msg=audit(1389205017.340:8196): avc: denied { mounton } for pid=26777 comm="ip" path="/" dev="vda1" ino=2 scontext=system_u:system_r:neutron_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir >type=SYSCALL msg=audit(1389205017.340:8196): arch=c000003e syscall=165 success=yes exit=0 a0=43c234 a1=4370cf a2=43818d a3=84000 items=0 ppid=26776 pid=26777 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="ip" exe="/usr/sbin/ip" subj=system_u:system_r:neutron_t:s0 key=(null) >type=AVC msg=audit(1389205017.340:8197): avc: denied { unmount } for pid=26777 comm="ip" scontext=system_u:system_r:neutron_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=filesystem >type=SYSCALL msg=audit(1389205017.340:8197): arch=c000003e syscall=166 success=yes exit=0 a0=437115 a1=2 a2=43818d a3=7fff77c30eb0 items=0 ppid=26776 pid=26777 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="ip" exe="/usr/sbin/ip" subj=system_u:system_r:neutron_t:s0 key=(null) >type=AVC msg=audit(1389205017.340:8198): avc: denied { mounton } for pid=26777 comm="ip" path="/sys" dev="vda1" ino=15650 scontext=system_u:system_r:neutron_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=dir >type=SYSCALL msg=audit(1389205017.340:8198): arch=c000003e syscall=165 success=yes exit=0 a0=7fff77c35e5c a1=437115 a2=437135 a3=0 items=0 ppid=26776 pid=26777 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="ip" exe="/usr/sbin/ip" subj=system_u:system_r:neutron_t:s0 key=(null) >type=USER_START msg=audit(1389205017.342:8199): pid=26733 uid=0 auid=0 ses=311 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=NETFILTER_CFG msg=audit(1389205017.367:8200): table=mangle family=2 entries=6 >type=SYSCALL msg=audit(1389205017.367:8200): arch=c000003e syscall=54 success=yes exit=0 a0=3 a1=0 a2=40 a3=24c3850 items=0 ppid=26776 pid=26777 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=USER_LOGIN msg=audit(1389205017.367:8201): pid=26733 uid=0 auid=0 ses=311 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389205017.391:8202): pid=26733 uid=0 auid=0 ses=311 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389205017.392:8203): pid=26779 uid=0 auid=0 ses=311 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=26779 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389205017.392:8204): pid=26779 uid=0 auid=0 ses=311 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=26779 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRED_REFR msg=audit(1389205017.406:8205): pid=26779 uid=0 auid=0 ses=311 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389205017.448:8206): pid=26733 uid=0 auid=0 ses=311 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRED_DISP msg=audit(1389205017.452:8207): pid=26733 uid=0 auid=0 ses=311 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389205017.460:8208): pid=26733 uid=0 auid=0 ses=311 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1389205017.470:8209): pid=26733 uid=0 auid=0 ses=311 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389205017.470:8210): pid=26733 uid=0 auid=0 ses=311 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=26733 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389205017.470:8211): pid=26733 uid=0 auid=0 ses=311 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=26733 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389205017.470:8212): pid=26733 uid=0 auid=0 ses=311 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=26733 suid=0 rport=34281 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=NETFILTER_CFG msg=audit(1389205017.379:8213): table=nat family=2 entries=5 >type=SYSCALL msg=audit(1389205017.379:8213): arch=c000003e syscall=54 success=yes exit=0 a0=3 a1=0 a2=40 a3=24c6d80 items=0 ppid=26776 pid=26777 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=NETFILTER_CFG msg=audit(1389205017.480:8214): table=filter family=2 entries=4 >type=SYSCALL msg=audit(1389205017.480:8214): arch=c000003e syscall=54 success=yes exit=0 a0=3 a1=0 a2=40 a3=24c6e90 items=0 ppid=26776 pid=26777 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=USER_END msg=audit(1389205017.491:8215): pid=26775 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1389205017.520:8216): pid=26785 uid=995 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1389205017.520:8217): pid=26785 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=AVC msg=audit(1389205018.028:8218): avc: denied { dac_override } for pid=26787 comm="neutron-ns-meta" capability=1 scontext=system_u:system_r:neutron_t:s0 tcontext=system_u:system_r:neutron_t:s0 tclass=capability >type=SYSCALL msg=audit(1389205018.028:8218): arch=c000003e syscall=2 success=yes exit=3 a0=1ab1f10 a1=441 a2=1b6 a3=0 items=0 ppid=26786 pid=26787 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="neutron-ns-meta" exe="/usr/bin/python2.7" subj=system_u:system_r:neutron_t:s0 key=(null) >type=AVC msg=audit(1389205018.099:8219): avc: denied { name_bind } for pid=26802 comm="neutron-ns-meta" src=9697 scontext=system_u:system_r:neutron_t:s0 tcontext=system_u:object_r:unreserved_port_t:s0 tclass=tcp_socket >type=SYSCALL msg=audit(1389205018.099:8219): arch=c000003e syscall=49 success=yes exit=0 a0=5 a1=7fff96ec9320 a2=10 a3=0 items=0 ppid=26801 pid=26802 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="neutron-ns-meta" exe="/usr/bin/python2.7" subj=system_u:system_r:neutron_t:s0 key=(null) >type=USER_END msg=audit(1389205018.134:8220): pid=26785 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1389205018.153:8221): pid=26803 uid=995 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206970206E65746E7320657865632071726F757465722D30323130623937632D366534612D346563392D623763632D623234316137636635336339206970202D6F206C696E6B2073686F772071672D65623535616634632D6561 terminal=? res=success' >type=USER_START msg=audit(1389205018.153:8222): pid=26803 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=AVC msg=audit(1389205018.194:8223): avc: denied { nlmsg_write } for pid=26805 comm="ip" scontext=system_u:system_r:neutron_t:s0 tcontext=system_u:system_r:neutron_t:s0 tclass=netlink_route_socket >type=SYSCALL msg=audit(1389205018.194:8223): arch=c000003e syscall=44 success=yes exit=32 a0=3 a1=7fffff9f5ed0 a2=20 a3=0 items=0 ppid=26804 pid=26805 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="ip" exe="/usr/sbin/ip" subj=system_u:system_r:neutron_t:s0 key=(null) >type=USER_END msg=audit(1389205018.245:8224): pid=26803 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1389205018.288:8225): pid=26811 uid=995 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206970206E65746E7320657865632071726F757465722D30323130623937632D366534612D346563392D623763632D623234316137636635336339206970202D6F206C696E6B2073686F772071672D65623535616634632D6561 terminal=? res=success' >type=USER_START msg=audit(1389205018.288:8226): pid=26811 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1389205018.399:8227): pid=26811 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1389205018.413:8228): pid=26819 uid=995 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=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 terminal=? res=success' >type=USER_START msg=audit(1389205018.413:8229): pid=26819 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=ANOM_PROMISCUOUS msg=audit(1389205018.538:8230): dev=qg-eb55af4c-ea prom=256 old_prom=0 auid=4294967295 uid=0 gid=0 ses=4294967295 >type=SYSCALL msg=audit(1389205018.538:8230): arch=c000003e syscall=46 success=yes exit=60 a0=10 a1=7fff3a4aa920 a2=0 a3=0 items=0 ppid=21249 pid=21250 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="ovs-vswitchd" exe="/usr/sbin/ovs-vswitchd" subj=system_u:system_r:openvswitch_t:s0 key=(null) >type=USER_END msg=audit(1389205018.554:8231): pid=26819 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1389205018.572:8232): pid=26834 uid=995 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206970206C696E6B207365742071672D65623535616634632D656120616464726573732066613A31363A33653A35313A61383A3861 terminal=? res=success' >type=USER_START msg=audit(1389205018.572:8233): pid=26834 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1389205018.637:8234): pid=26834 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1389205018.643:8235): pid=26837 uid=995 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206970202D6F206E65746E73206C697374 terminal=? res=success' >type=USER_START msg=audit(1389205018.643:8236): pid=26837 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1389205018.707:8237): pid=26837 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1389205018.713:8238): pid=26844 uid=995 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206970206C696E6B207365742071672D65623535616634632D6561206E65746E732071726F757465722D30323130623937632D366534612D346563392D623763632D623234316137636635336339 terminal=? res=success' >type=USER_START msg=audit(1389205018.713:8239): pid=26844 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1389205018.821:8240): pid=26844 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1389205018.829:8241): pid=26848 uid=995 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206970206E65746E7320657865632071726F757465722D30323130623937632D366534612D346563392D623763632D623234316137636635336339206970206C696E6B207365742071672D65623535616634632D6561207570 terminal=? res=success' >type=USER_START msg=audit(1389205018.830:8242): pid=26848 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1389205018.920:8243): pid=26848 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1389205018.926:8244): pid=26855 uid=995 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206970206E65746E7320657865632071726F757465722D30323130623937632D366534612D346563392D623763632D62323431613763663533633920697020616464722073686F772071672D65623535616634632D6561207065726D616E656E742073636F706520676C6F62616C terminal=? res=success' >type=USER_START msg=audit(1389205018.926:8245): pid=26855 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1389205018.990:8246): pid=26855 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1389205019.002:8247): pid=26861 uid=995 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206970206E65746E7320657865632071726F757465722D30323130623937632D366534612D346563392D623763632D623234316137636635336339206970202D34206164647220616464203137322E32342E342E3232362F323820627264203137322E32342E342E3233392073636F706520676C6F62616C206465762071672D65623535616634632D6561 terminal=? res=success' >type=USER_START msg=audit(1389205019.002:8248): pid=26861 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1389205019.069:8249): pid=26861 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1389205019.082:8250): pid=26866 uid=995 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206970206E65746E7320657865632071726F757465722D30323130623937632D366534612D346563392D623763632D62323431613763663533633920726F757465206164642064656661756C74206777203137322E32342E342E323235 terminal=? res=success' >type=USER_START msg=audit(1389205019.082:8251): pid=26866 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1389205019.105:8252): pid=26867 uid=995 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206970206E65746E7320657865632071726F757465722D30323130623937632D366534612D346563392D623763632D62323431613763663533633920617270696E67202D41202D492071672D65623535616634632D6561202D632033203137322E32342E342E323236 terminal=? res=success' >type=USER_START msg=audit(1389205019.105:8253): pid=26867 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=AVC msg=audit(1389205019.219:8254): avc: denied { execute } for pid=26869 comm="neutron-rootwra" name="arping" dev="vda1" ino=14897 scontext=system_u:system_r:neutron_t:s0 tcontext=system_u:object_r:netutils_exec_t:s0 tclass=file >type=SYSCALL msg=audit(1389205019.219:8254): arch=c000003e syscall=21 success=yes exit=0 a0=1004020 a1=1 a2=7fac08e31f88 a3=7fff55a26090 items=0 ppid=26867 pid=26869 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="neutron-rootwra" exe="/usr/bin/python2.7" subj=system_u:system_r:neutron_t:s0 key=(null) >type=AVC msg=audit(1389205019.220:8255): avc: denied { mounton } for pid=26873 comm="ip" path="/sys" dev="vda1" ino=15650 scontext=system_u:system_r:neutron_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=dir >type=SYSCALL msg=audit(1389205019.220:8255): arch=c000003e syscall=165 success=yes exit=0 a0=7fff4c01ee40 a1=437115 a2=437135 a3=0 items=0 ppid=26868 pid=26873 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="ip" exe="/usr/sbin/ip" subj=system_u:system_r:neutron_t:s0 key=(null) >type=USER_END msg=audit(1389205019.230:8256): pid=26866 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=AVC msg=audit(1389205019.232:8257): avc: denied { read open } for pid=26874 comm="ip" path="/usr/sbin/arping" dev="vda1" ino=14897 scontext=system_u:system_r:neutron_t:s0 tcontext=system_u:object_r:netutils_exec_t:s0 tclass=file >type=AVC msg=audit(1389205019.232:8257): avc: denied { execute_no_trans } for pid=26874 comm="ip" path="/usr/sbin/arping" dev="vda1" ino=14897 scontext=system_u:system_r:neutron_t:s0 tcontext=system_u:object_r:netutils_exec_t:s0 tclass=file >type=SYSCALL msg=audit(1389205019.232:8257): arch=c000003e syscall=59 success=yes exit=0 a0=7fff9669f768 a1=7fff966a39e8 a2=7fff966a3a28 a3=7f2125056000 items=0 ppid=26869 pid=26874 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="arping" exe="/usr/sbin/arping" subj=system_u:system_r:neutron_t:s0 key=(null) >type=AVC msg=audit(1389205019.233:8258): avc: denied { setcap } for pid=26874 comm="arping" scontext=system_u:system_r:neutron_t:s0 tcontext=system_u:system_r:neutron_t:s0 tclass=process >type=SYSCALL msg=audit(1389205019.233:8258): arch=c000003e syscall=126 success=yes exit=0 a0=7fae6d30f014 a1=7fae6d30f01c a2=1 a3=7fff5cd9a4b0 items=0 ppid=26869 pid=26874 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="arping" exe="/usr/sbin/arping" subj=system_u:system_r:neutron_t:s0 key=(null) >type=AVC msg=audit(1389205019.233:8259): avc: denied { create } for pid=26874 comm="arping" scontext=system_u:system_r:neutron_t:s0 tcontext=system_u:system_r:neutron_t:s0 tclass=packet_socket >type=AVC msg=audit(1389205019.233:8259): avc: denied { net_raw } for pid=26874 comm="arping" capability=13 scontext=system_u:system_r:neutron_t:s0 tcontext=system_u:system_r:neutron_t:s0 tclass=capability >type=SYSCALL msg=audit(1389205019.233:8259): arch=c000003e syscall=41 success=yes exit=3 a0=11 a1=2 a2=0 a3=7fff5cd9a4c0 items=0 ppid=26869 pid=26874 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="arping" exe="/usr/sbin/arping" subj=system_u:system_r:neutron_t:s0 key=(null) >type=AVC msg=audit(1389205019.233:8260): avc: denied { bind } for pid=26874 comm="arping" scontext=system_u:system_r:neutron_t:s0 tcontext=system_u:system_r:neutron_t:s0 tclass=packet_socket >type=SYSCALL msg=audit(1389205019.233:8260): arch=c000003e syscall=49 success=yes exit=0 a0=3 a1=7fae6bb273a0 a2=80 a3=7fff5cd9a4c0 items=0 ppid=26869 pid=26874 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="arping" exe="/usr/sbin/arping" subj=system_u:system_r:neutron_t:s0 key=(null) >type=AVC msg=audit(1389205019.233:8261): avc: denied { getattr } for pid=26874 comm="arping" scontext=system_u:system_r:neutron_t:s0 tcontext=system_u:system_r:neutron_t:s0 tclass=packet_socket >type=SYSCALL msg=audit(1389205019.233:8261): arch=c000003e syscall=51 success=yes exit=0 a0=3 a1=7fae6bb273a0 a2=7fff5cd9a740 a3=7fff5cd9a4c0 items=0 ppid=26869 pid=26874 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="arping" exe="/usr/sbin/arping" subj=system_u:system_r:neutron_t:s0 key=(null) >type=USER_CMD msg=audit(1389205019.241:8262): pid=26876 uid=995 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206970206E65746E7320657865632071726F757465722D30323130623937632D366534612D346563392D623763632D62323431613763663533633920697020616464722073686F772071672D65623535616634632D6561 terminal=? res=success' >type=USER_START msg=audit(1389205019.241:8263): pid=26876 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1389205019.268:8264): pid=26881 uid=995 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D767363746C202D2D74696D656F75743D32206C6973742D706F7274732062722D696E74 terminal=? res=success' >type=USER_START msg=audit(1389205019.268:8265): pid=26881 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1389205019.354:8266): pid=26876 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1389205019.359:8267): pid=26881 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1389205019.364:8268): pid=26885 uid=995 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206970206E65746E7320657865632071726F757465722D30323130623937632D366534612D346563392D623763632D6232343161376366353363392069707461626C65732D73617665202D63 terminal=? res=success' >type=USER_START msg=audit(1389205019.364:8269): pid=26885 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1389205019.377:8270): pid=26886 uid=995 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D767363746C202D2D74696D656F75743D32202D2D666F726D61743D6A736F6E202D2D202D2D636F6C756D6E733D6E616D652C65787465726E616C5F696473206C69737420496E74657266616365 terminal=? res=success' >type=USER_START msg=audit(1389205019.377:8271): pid=26886 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1389205019.466:8272): pid=26885 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1389205019.472:8273): pid=26886 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1389205019.474:8274): pid=26891 uid=995 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206970206E65746E7320657865632071726F757465722D30323130623937632D366534612D346563392D623763632D6232343161376366353363392069707461626C65732D726573746F7265202D63 terminal=? res=success' >type=USER_START msg=audit(1389205019.474:8275): pid=26891 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=NETFILTER_CFG msg=audit(1389205019.541:8276): table=mangle family=2 entries=6 >type=SYSCALL msg=audit(1389205019.541:8276): arch=c000003e syscall=54 success=yes exit=0 a0=3 a1=0 a2=40 a3=a51850 items=0 ppid=26892 pid=26893 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=NETFILTER_CFG msg=audit(1389205019.546:8277): table=nat family=2 entries=24 >type=SYSCALL msg=audit(1389205019.546:8277): arch=c000003e syscall=54 success=yes exit=0 a0=3 a1=0 a2=40 a3=a566e0 items=0 ppid=26892 pid=26893 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=NETFILTER_CFG msg=audit(1389205019.547:8278): table=filter family=2 entries=21 >type=SYSCALL msg=audit(1389205019.547:8278): arch=c000003e syscall=54 success=yes exit=0 a0=3 a1=0 a2=40 a3=a55f70 items=0 ppid=26892 pid=26893 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=USER_END msg=audit(1389205019.551:8279): pid=26891 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389205020.457:8280): pid=26920 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=26920 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389205020.457:8281): pid=26920 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=26920 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389205020.458:8282): pid=26919 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=26920 suid=74 rport=34303 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389205020.458:8283): pid=26919 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=26920 suid=74 rport=34303 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389205021.077:8284): pid=26919 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=34303 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389205021.077:8285): pid=26919 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=4096 fp=8b:56:b0:3f:c8:ad:38:a6:94:f4:a7:26:83:75:cc:85 rport=34303 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_ACCT msg=audit(1389205021.088:8286): pid=26919 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389205021.088:8287): pid=26919 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=26920 suid=74 rport=34303 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389205021.090:8288): pid=26919 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1389205021.093:8289): pid=26919 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=LOGIN msg=audit(1389205021.093:8290): login pid=26919 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=312 >type=USER_ROLE_CHANGE msg=audit(1389205021.232:8291): pid=26919 uid=0 auid=0 ses=312 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389205021.246:8292): pid=26867 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1389205021.266:8293): pid=26919 uid=0 auid=0 ses=312 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1389205021.287:8294): pid=26919 uid=0 auid=0 ses=312 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389205021.310:8295): pid=26919 uid=0 auid=0 ses=312 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389205021.311:8296): pid=26954 uid=0 auid=0 ses=312 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=26954 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389205021.311:8297): pid=26954 uid=0 auid=0 ses=312 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=26954 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRED_REFR msg=audit(1389205021.344:8298): pid=26954 uid=0 auid=0 ses=312 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389205021.385:8299): pid=26919 uid=0 auid=0 ses=312 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRED_DISP msg=audit(1389205021.418:8300): pid=26919 uid=0 auid=0 ses=312 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389205021.434:8301): pid=26919 uid=0 auid=0 ses=312 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1389205021.437:8302): pid=26919 uid=0 auid=0 ses=312 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389205021.437:8303): pid=26919 uid=0 auid=0 ses=312 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=26919 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389205021.437:8304): pid=26919 uid=0 auid=0 ses=312 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=26919 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389205021.437:8305): pid=26919 uid=0 auid=0 ses=312 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=26919 suid=0 rport=34303 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=AVC msg=audit(1389205022.702:8306): avc: denied { nlmsg_write } for pid=27006 comm="ip" scontext=system_u:system_r:neutron_t:s0 tcontext=system_u:system_r:neutron_t:s0 tclass=netlink_route_socket >type=SYSCALL msg=audit(1389205022.702:8306): arch=c000003e syscall=44 success=yes exit=32 a0=3 a1=7fff78172740 a2=20 a3=0 items=0 ppid=21505 pid=27006 auid=4294967295 uid=995 gid=992 euid=995 suid=995 fsuid=995 egid=992 sgid=992 fsgid=992 ses=4294967295 tty=(none) comm="ip" exe="/usr/sbin/ip" subj=system_u:system_r:neutron_t:s0 key=(null) >type=USER_CMD msg=audit(1389205022.761:8307): pid=27007 uid=995 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206970206E65746E7320657865632071726F757465722D30323130623937632D366534612D346563392D623763632D623234316137636635336339206970202D6F206C696E6B2073686F772071722D64313832313065382D3163 terminal=? res=success' >type=USER_START msg=audit(1389205022.762:8308): pid=27007 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=AVC msg=audit(1389205022.815:8309): avc: denied { mounton } for pid=27009 comm="ip" path="/" dev="vda1" ino=2 scontext=system_u:system_r:neutron_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir >type=SYSCALL msg=audit(1389205022.815:8309): arch=c000003e syscall=165 success=yes exit=0 a0=43c234 a1=4370cf a2=43818d a3=84000 items=0 ppid=27008 pid=27009 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="ip" exe="/usr/sbin/ip" subj=system_u:system_r:neutron_t:s0 key=(null) >type=AVC msg=audit(1389205022.815:8310): avc: denied { unmount } for pid=27009 comm="ip" scontext=system_u:system_r:neutron_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=filesystem >type=SYSCALL msg=audit(1389205022.815:8310): arch=c000003e syscall=166 success=yes exit=0 a0=437115 a1=2 a2=43818d a3=7fff997c4bc0 items=0 ppid=27008 pid=27009 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="ip" exe="/usr/sbin/ip" subj=system_u:system_r:neutron_t:s0 key=(null) >type=AVC msg=audit(1389205022.815:8311): avc: denied { mounton } for pid=27009 comm="ip" path="/sys" dev="vda1" ino=15650 scontext=system_u:system_r:neutron_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=dir >type=SYSCALL msg=audit(1389205022.815:8311): arch=c000003e syscall=165 success=yes exit=0 a0=7fff997cae46 a1=437115 a2=437135 a3=0 items=0 ppid=27008 pid=27009 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="ip" exe="/usr/sbin/ip" subj=system_u:system_r:neutron_t:s0 key=(null) >type=USER_END msg=audit(1389205022.877:8312): pid=27007 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1389205022.886:8313): pid=27015 uid=995 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206970206E65746E7320657865632071726F757465722D30323130623937632D366534612D346563392D623763632D623234316137636635336339206970202D6F206C696E6B2073686F772071722D64313832313065382D3163 terminal=? res=success' >type=USER_START msg=audit(1389205022.886:8314): pid=27015 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=AVC msg=audit(1389205022.962:8315): avc: denied { mounton } for pid=27020 comm="ip" path="/sys" dev="vda1" ino=15650 scontext=system_u:system_r:neutron_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=dir >type=SYSCALL msg=audit(1389205022.962:8315): arch=c000003e syscall=165 success=yes exit=0 a0=7fffe7829e46 a1=437115 a2=437135 a3=0 items=0 ppid=27016 pid=27020 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="ip" exe="/usr/sbin/ip" subj=system_u:system_r:neutron_t:s0 key=(null) >type=USER_END msg=audit(1389205023.012:8316): pid=27015 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1389205023.017:8317): pid=27025 uid=995 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D767363746C202D2D202D2D6D61792D6578697374206164642D706F72742062722D696E742071722D64313832313065382D3163202D2D2073657420496E746572666163652071722D64313832313065382D316320747970653D696E7465726E616C202D2D2073657420496E746572666163652071722D64313832313065382D31632065787465726E616C2D6964733A69666163652D69643D64313832313065382D316339302D343131662D393665642D613362383363636166633863202D2D2073657420496E746572666163652071722D64313832313065382D31632065787465726E616C2D6964733A69666163652D7374617475733D616374697665202D2D2073657420496E746572666163652071722D64313832313065382D31632065787465726E616C2D6964733A61747461636865642D6D61633D66613A31363A33653A61643A38333A6235 terminal=? res=success' >type=USER_START msg=audit(1389205023.030:8318): pid=27025 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=ANOM_PROMISCUOUS msg=audit(1389205023.133:8319): dev=qr-d18210e8-1c prom=256 old_prom=0 auid=4294967295 uid=0 gid=0 ses=4294967295 >type=SYSCALL msg=audit(1389205023.133:8319): arch=c000003e syscall=46 success=yes exit=60 a0=10 a1=7fff3a4aa920 a2=0 a3=0 items=0 ppid=21249 pid=21250 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="ovs-vswitchd" exe="/usr/sbin/ovs-vswitchd" subj=system_u:system_r:openvswitch_t:s0 key=(null) >type=USER_END msg=audit(1389205023.152:8320): pid=27025 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1389205023.169:8321): pid=27042 uid=995 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206970206C696E6B207365742071722D64313832313065382D316320616464726573732066613A31363A33653A61643A38333A6235 terminal=? res=success' >type=USER_START msg=audit(1389205023.170:8322): pid=27042 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=AVC msg=audit(1389205023.222:8323): avc: denied { nlmsg_write } for pid=27044 comm="ip" scontext=system_u:system_r:neutron_t:s0 tcontext=system_u:system_r:neutron_t:s0 tclass=netlink_route_socket >type=SYSCALL msg=audit(1389205023.222:8323): arch=c000003e syscall=44 success=yes exit=32 a0=3 a1=7fffa76dbe80 a2=20 a3=0 items=0 ppid=27043 pid=27044 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="ip" exe="/usr/sbin/ip" subj=system_u:system_r:neutron_t:s0 key=(null) >type=USER_END msg=audit(1389205023.226:8324): pid=27042 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1389205023.237:8325): pid=27045 uid=995 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206970202D6F206E65746E73206C697374 terminal=? res=success' >type=USER_START msg=audit(1389205023.237:8326): pid=27045 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1389205023.279:8327): pid=27047 uid=995 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D767363746C202D2D74696D656F75743D32206C6973742D706F7274732062722D696E74 terminal=? res=success' >type=USER_START msg=audit(1389205023.279:8328): pid=27047 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1389205023.357:8329): pid=27045 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1389205023.363:8330): pid=27053 uid=995 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206970206C696E6B207365742071722D64313832313065382D3163206E65746E732071726F757465722D30323130623937632D366534612D346563392D623763632D623234316137636635336339 terminal=? res=success' >type=USER_START msg=audit(1389205023.363:8331): pid=27053 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1389205023.395:8332): pid=27047 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1389205023.412:8333): pid=27056 uid=995 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D767363746C202D2D74696D656F75743D32202D2D666F726D61743D6A736F6E202D2D202D2D636F6C756D6E733D6E616D652C65787465726E616C5F696473206C69737420496E74657266616365 terminal=? res=success' >type=USER_START msg=audit(1389205023.413:8334): pid=27056 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1389205023.489:8335): pid=27053 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1389205023.495:8336): pid=27056 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1389205023.503:8337): pid=27061 uid=995 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206970206E65746E7320657865632071726F757465722D30323130623937632D366534612D346563392D623763632D623234316137636635336339206970206C696E6B207365742071722D64313832313065382D3163207570 terminal=? res=success' >type=USER_START msg=audit(1389205023.503:8338): pid=27061 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=AVC msg=audit(1389205023.616:8339): avc: denied { mounton } for pid=27072 comm="ip" path="/" dev="vda1" ino=2 scontext=system_u:system_r:neutron_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir >type=SYSCALL msg=audit(1389205023.616:8339): arch=c000003e syscall=165 success=yes exit=0 a0=43c234 a1=4370cf a2=43818d a3=84000 items=0 ppid=27066 pid=27072 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="ip" exe="/usr/sbin/ip" subj=system_u:system_r:neutron_t:s0 key=(null) >type=AVC msg=audit(1389205023.617:8340): avc: denied { unmount } for pid=27072 comm="ip" scontext=system_u:system_r:neutron_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=filesystem >type=SYSCALL msg=audit(1389205023.617:8340): arch=c000003e syscall=166 success=yes exit=0 a0=437115 a1=2 a2=43818d a3=7fff80894be0 items=0 ppid=27066 pid=27072 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="ip" exe="/usr/sbin/ip" subj=system_u:system_r:neutron_t:s0 key=(null) >type=USER_CMD msg=audit(1389205023.622:8341): pid=27071 uid=995 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E662069707461626C65732D73617665202D63 terminal=? res=success' >type=USER_START msg=audit(1389205023.622:8342): pid=27071 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1389205023.639:8343): pid=27061 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1389205023.657:8344): pid=27075 uid=995 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206970206E65746E7320657865632071726F757465722D30323130623937632D366534612D346563392D623763632D62323431613763663533633920697020616464722073686F772071722D64313832313065382D3163207065726D616E656E742073636F706520676C6F62616C terminal=? res=success' >type=USER_START msg=audit(1389205023.657:8345): pid=27075 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1389205023.728:8346): pid=27079 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D43204C414E473D4320766773202D2D6E6F68656164696E6773202D2D756E69743D67202D6F206E616D652C73697A652C667265652C6C765F636F756E742C75756964202D2D736570617261746F72203A202D2D6E6F7375666669782063696E6465722D766F6C756D6573 terminal=? res=success' >type=USER_START msg=audit(1389205023.729:8347): pid=27079 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1389205023.755:8348): pid=27071 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1389205023.773:8349): pid=27084 uid=995 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E662069707461626C65732D726573746F7265202D63 terminal=? res=success' >type=USER_START msg=audit(1389205023.773:8350): pid=27084 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1389205023.799:8351): pid=27075 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1389205023.818:8352): pid=27087 uid=995 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206970206E65746E7320657865632071726F757465722D30323130623937632D366534612D346563392D623763632D623234316137636635336339206970202D342061646472206164642031302E302E302E312F3234206272642031302E302E302E3235352073636F706520676C6F62616C206465762071722D64313832313065382D3163 terminal=? res=success' >type=USER_START msg=audit(1389205023.818:8353): pid=27087 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=NETFILTER_CFG msg=audit(1389205023.893:8354): table=mangle family=2 entries=10 >type=SYSCALL msg=audit(1389205023.893:8354): arch=c000003e syscall=54 success=yes exit=0 a0=3 a1=0 a2=40 a3=20db940 items=0 ppid=27085 pid=27091 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=NETFILTER_CFG msg=audit(1389205023.894:8355): table=nat family=2 entries=29 >type=SYSCALL msg=audit(1389205023.894:8355): arch=c000003e syscall=54 success=yes exit=0 a0=3 a1=0 a2=40 a3=20de770 items=0 ppid=27085 pid=27091 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=NETFILTER_CFG msg=audit(1389205023.895:8356): table=filter family=2 entries=44 >type=SYSCALL msg=audit(1389205023.895:8356): arch=c000003e syscall=54 success=yes exit=0 a0=3 a1=0 a2=40 a3=20e42c0 items=0 ppid=27085 pid=27091 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=USER_END msg=audit(1389205023.897:8357): pid=27079 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1389205023.917:8358): pid=27084 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1389205023.927:8359): pid=27093 uid=995 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206970367461626C65732D73617665202D63 terminal=? res=success' >type=USER_START msg=audit(1389205023.927:8360): pid=27093 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1389205023.938:8361): pid=27087 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1389205023.961:8362): pid=27095 uid=995 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206970206E65746E7320657865632071726F757465722D30323130623937632D366534612D346563392D623763632D62323431613763663533633920697020616464722073686F772071672D65623535616634632D6561 terminal=? res=success' >type=USER_START msg=audit(1389205023.968:8363): pid=27095 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1389205023.969:8364): pid=27096 uid=995 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206970206E65746E7320657865632071726F757465722D30323130623937632D366534612D346563392D623763632D62323431613763663533633920617270696E67202D41202D492071722D64313832313065382D3163202D6320332031302E302E302E31 terminal=? res=success' >type=USER_START msg=audit(1389205023.970:8365): pid=27096 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1389205024.062:8366): pid=27093 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1389205024.073:8367): pid=27103 uid=995 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206970367461626C65732D726573746F7265202D63 terminal=? res=success' >type=USER_START msg=audit(1389205024.074:8368): pid=27103 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=NETFILTER_CFG msg=audit(1389205024.148:8369): table=filter family=10 entries=4 >type=SYSCALL msg=audit(1389205024.148:8369): arch=c000003e syscall=54 success=yes exit=0 a0=3 a1=29 a2=40 a3=1a69ba0 items=0 ppid=27104 pid=27105 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="ip6tables-resto" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=AVC msg=audit(1389205024.167:8370): avc: denied { execute } for pid=27098 comm="neutron-rootwra" name="arping" dev="vda1" ino=14897 scontext=system_u:system_r:neutron_t:s0 tcontext=system_u:object_r:netutils_exec_t:s0 tclass=file >type=SYSCALL msg=audit(1389205024.167:8370): arch=c000003e syscall=21 success=yes exit=0 a0=10a8020 a1=1 a2=7f4ec0bccf88 a3=7fffbb4fe270 items=0 ppid=27096 pid=27098 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="neutron-rootwra" exe="/usr/bin/python2.7" subj=system_u:system_r:neutron_t:s0 key=(null) >type=AVC msg=audit(1389205024.169:8371): avc: denied { read open } for pid=27107 comm="ip" path="/usr/sbin/arping" dev="vda1" ino=14897 scontext=system_u:system_r:neutron_t:s0 tcontext=system_u:object_r:netutils_exec_t:s0 tclass=file >type=AVC msg=audit(1389205024.169:8371): avc: denied { execute_no_trans } for pid=27107 comm="ip" path="/usr/sbin/arping" dev="vda1" ino=14897 scontext=system_u:system_r:neutron_t:s0 tcontext=system_u:object_r:netutils_exec_t:s0 tclass=file >type=SYSCALL msg=audit(1389205024.169:8371): arch=c000003e syscall=59 success=yes exit=0 a0=7fff7c1d0558 a1=7fff7c1d47d8 a2=7fff7c1d4818 a3=7fff7c1d03d0 items=0 ppid=27098 pid=27107 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="arping" exe="/usr/sbin/arping" subj=system_u:system_r:neutron_t:s0 key=(null) >type=AVC msg=audit(1389205024.169:8372): avc: denied { setcap } for pid=27107 comm="arping" scontext=system_u:system_r:neutron_t:s0 tcontext=system_u:system_r:neutron_t:s0 tclass=process >type=SYSCALL msg=audit(1389205024.169:8372): arch=c000003e syscall=126 success=yes exit=0 a0=7f06b04cb014 a1=7f06b04cb01c a2=1 a3=7fff90b217d0 items=0 ppid=27098 pid=27107 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="arping" exe="/usr/sbin/arping" subj=system_u:system_r:neutron_t:s0 key=(null) >type=AVC msg=audit(1389205024.169:8373): avc: denied { create } for pid=27107 comm="arping" scontext=system_u:system_r:neutron_t:s0 tcontext=system_u:system_r:neutron_t:s0 tclass=packet_socket >type=AVC msg=audit(1389205024.169:8373): avc: denied { net_raw } for pid=27107 comm="arping" capability=13 scontext=system_u:system_r:neutron_t:s0 tcontext=system_u:system_r:neutron_t:s0 tclass=capability >type=SYSCALL msg=audit(1389205024.169:8373): arch=c000003e syscall=41 success=yes exit=3 a0=11 a1=2 a2=0 a3=7fff90b217e0 items=0 ppid=27098 pid=27107 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="arping" exe="/usr/sbin/arping" subj=system_u:system_r:neutron_t:s0 key=(null) >type=AVC msg=audit(1389205024.169:8374): avc: denied { bind } for pid=27107 comm="arping" scontext=system_u:system_r:neutron_t:s0 tcontext=system_u:system_r:neutron_t:s0 tclass=packet_socket >type=SYSCALL msg=audit(1389205024.169:8374): arch=c000003e syscall=49 success=yes exit=0 a0=3 a1=7f06b02233a0 a2=80 a3=7fff90b217e0 items=0 ppid=27098 pid=27107 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="arping" exe="/usr/sbin/arping" subj=system_u:system_r:neutron_t:s0 key=(null) >type=AVC msg=audit(1389205024.169:8375): avc: denied { getattr } for pid=27107 comm="arping" scontext=system_u:system_r:neutron_t:s0 tcontext=system_u:system_r:neutron_t:s0 tclass=packet_socket >type=SYSCALL msg=audit(1389205024.169:8375): arch=c000003e syscall=51 success=yes exit=0 a0=3 a1=7f06b02233a0 a2=7fff90b21a60 a3=7fff90b217e0 items=0 ppid=27098 pid=27107 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="arping" exe="/usr/sbin/arping" subj=system_u:system_r:neutron_t:s0 key=(null) >type=USER_END msg=audit(1389205024.175:8376): pid=27103 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1389205024.211:8377): pid=27095 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1389205024.227:8378): pid=27108 uid=995 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206970206E65746E7320657865632071726F757465722D30323130623937632D366534612D346563392D623763632D6232343161376366353363392069707461626C65732D73617665202D63 terminal=? res=success' >type=USER_START msg=audit(1389205024.227:8379): pid=27108 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1389205024.313:8380): pid=27108 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1389205024.330:8381): pid=27117 uid=995 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206970206E65746E7320657865632071726F757465722D30323130623937632D366534612D346563392D623763632D6232343161376366353363392069707461626C65732D726573746F7265202D63 terminal=? res=success' >type=USER_START msg=audit(1389205024.330:8382): pid=27117 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1389205024.361:8383): pid=27119 uid=995 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D767363746C202D2D74696D656F75743D32202D2D202D2D636F6C756D6E733D65787465726E616C5F6964732C6E616D652C6F66706F72742066696E6420496E746572666163652065787465726E616C5F6964733A69666163652D69643D2264313832313065382D316339302D343131662D393665642D61336238336363616663386322 terminal=? res=success' >type=USER_START msg=audit(1389205024.361:8384): pid=27119 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389205024.422:8385): pid=27125 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=27125 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389205024.422:8386): pid=27125 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=27125 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389205024.423:8387): pid=27124 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=27125 suid=74 rport=34319 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389205024.423:8388): pid=27124 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=27125 suid=74 rport=34319 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=NETFILTER_CFG msg=audit(1389205024.475:8389): table=mangle family=2 entries=6 >type=SYSCALL msg=audit(1389205024.475:8389): arch=c000003e syscall=54 success=yes exit=0 a0=3 a1=0 a2=40 a3=253d850 items=0 ppid=27118 pid=27126 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=USER_END msg=audit(1389205024.497:8390): pid=27119 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1389205024.504:8391): pid=27129 uid=995 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D767363746C202D2D74696D656F75743D322073657420506F72742071722D64313832313065382D3163207461673D31 terminal=? res=success' >type=USER_START msg=audit(1389205024.505:8392): pid=27129 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=NETFILTER_CFG msg=audit(1389205024.497:8393): table=nat family=2 entries=25 >type=SYSCALL msg=audit(1389205024.497:8393): arch=c000003e syscall=54 success=yes exit=0 a0=3 a1=0 a2=40 a3=2542820 items=0 ppid=27118 pid=27126 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=NETFILTER_CFG msg=audit(1389205024.557:8394): table=filter family=2 entries=21 >type=SYSCALL msg=audit(1389205024.557:8394): arch=c000003e syscall=54 success=yes exit=0 a0=3 a1=0 a2=40 a3=2542390 items=0 ppid=27118 pid=27126 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=USER_END msg=audit(1389205024.573:8395): pid=27117 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1389205024.651:8396): pid=27129 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1389205024.657:8397): pid=27140 uid=995 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D6F6663746C2064656C2D666C6F77732062722D696E7420696E5F706F72743D31 terminal=? res=success' >type=USER_START msg=audit(1389205024.658:8398): pid=27140 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1389205024.723:8399): pid=27140 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=AVC msg=audit(1389205025.005:8400): avc: denied { getattr } for pid=25281 comm="swift-object-au" path="/srv/node/device1" dev="loop1" ino=2 scontext=system_u:system_r:swift_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=dir >type=SYSCALL msg=audit(1389205025.005:8400): arch=c000003e syscall=6 success=yes exit=0 a0=191db90 a1=7fffb71158a0 a2=7fffb71158a0 a3=0 items=0 ppid=1 pid=25281 auid=4294967295 uid=1001 gid=1001 euid=1001 suid=1001 fsuid=1001 egid=1001 sgid=1001 fsgid=1001 ses=4294967295 tty=(none) comm="swift-object-au" exe="/usr/bin/python2.7" subj=system_u:system_r:swift_t:s0 key=(null) >type=AVC msg=audit(1389205025.005:8401): avc: denied { read } for pid=25281 comm="swift-object-au" name="objects" dev="loop1" ino=12 scontext=system_u:system_r:swift_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=dir >type=AVC msg=audit(1389205025.005:8401): avc: denied { open } for pid=25281 comm="swift-object-au" path="/srv/node/device1/objects" dev="loop1" ino=12 scontext=system_u:system_r:swift_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=dir >type=SYSCALL msg=audit(1389205025.005:8401): arch=c000003e syscall=257 success=yes exit=3 a0=ffffffffffffff9c a1=1981070 a2=90800 a3=0 items=0 ppid=1 pid=25281 auid=4294967295 uid=1001 gid=1001 euid=1001 suid=1001 fsuid=1001 egid=1001 sgid=1001 fsgid=1001 ses=4294967295 tty=(none) comm="swift-object-au" exe="/usr/bin/python2.7" subj=system_u:system_r:swift_t:s0 key=(null) >type=USER_AUTH msg=audit(1389205025.158:8402): pid=27124 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=34319 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389205025.158:8403): pid=27124 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=4096 fp=8b:56:b0:3f:c8:ad:38:a6:94:f4:a7:26:83:75:cc:85 rport=34319 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_ACCT msg=audit(1389205025.195:8404): pid=27124 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389205025.195:8405): pid=27124 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=27125 suid=74 rport=34319 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389205025.197:8406): pid=27124 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1389205025.214:8407): pid=27124 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=LOGIN msg=audit(1389205025.214:8408): login pid=27124 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=313 >type=USER_ROLE_CHANGE msg=audit(1389205025.342:8409): pid=27124 uid=0 auid=0 ses=313 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389205025.380:8410): pid=27124 uid=0 auid=0 ses=313 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1389205025.404:8411): pid=27124 uid=0 auid=0 ses=313 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389205025.407:8412): pid=27124 uid=0 auid=0 ses=313 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389205025.408:8413): pid=27168 uid=0 auid=0 ses=313 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=27168 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389205025.408:8414): pid=27168 uid=0 auid=0 ses=313 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=27168 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRED_REFR msg=audit(1389205025.431:8415): pid=27168 uid=0 auid=0 ses=313 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389205025.489:8416): pid=27124 uid=0 auid=0 ses=313 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRED_DISP msg=audit(1389205025.523:8417): pid=27124 uid=0 auid=0 ses=313 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389205025.539:8418): pid=27124 uid=0 auid=0 ses=313 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1389205025.573:8419): pid=27124 uid=0 auid=0 ses=313 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389205025.573:8420): pid=27124 uid=0 auid=0 ses=313 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=27124 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389205025.573:8421): pid=27124 uid=0 auid=0 ses=313 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=27124 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389205025.573:8422): pid=27124 uid=0 auid=0 ses=313 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=27124 suid=0 rport=34319 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_END msg=audit(1389205026.185:8423): pid=27096 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389205028.489:8424): pid=27277 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=27277 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389205028.489:8425): pid=27277 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=27277 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389205028.490:8426): pid=27276 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=27277 suid=74 rport=34333 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389205028.490:8427): pid=27276 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=27277 suid=74 rport=34333 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=NETFILTER_CFG msg=audit(1389205028.787:8428): table=filter family=2 entries=0 >type=NETFILTER_CFG msg=audit(1389205028.787:8428): table=nat family=2 entries=0 >type=NETFILTER_CFG msg=audit(1389205028.787:8428): table=mangle family=2 entries=0 >type=NETFILTER_CFG msg=audit(1389205028.787:8428): table=filter family=10 entries=0 >type=SYSCALL msg=audit(1389205028.787:8428): arch=c000003e syscall=272 success=yes exit=0 a0=40000000 a1=c0 a2=0 a3=7fff4907c370 items=0 ppid=27468 pid=27475 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=294 tty=(none) comm="ip" exe="/usr/sbin/ip" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null) >type=USER_AUTH msg=audit(1389205029.022:8429): pid=27276 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=34333 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389205029.022:8430): pid=27276 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=4096 fp=8b:56:b0:3f:c8:ad:38:a6:94:f4:a7:26:83:75:cc:85 rport=34333 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_ACCT msg=audit(1389205029.027:8431): pid=27276 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389205029.027:8432): pid=27276 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=27277 suid=74 rport=34333 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389205029.029:8433): pid=27276 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1389205029.031:8434): pid=27276 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=LOGIN msg=audit(1389205029.031:8435): login pid=27276 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=314 >type=NETFILTER_CFG msg=audit(1389205028.807:8436): table=filter family=2 entries=0 >type=NETFILTER_CFG msg=audit(1389205028.807:8436): table=nat family=2 entries=0 >type=NETFILTER_CFG msg=audit(1389205028.807:8436): table=mangle family=2 entries=0 >type=NETFILTER_CFG msg=audit(1389205028.807:8436): table=filter family=10 entries=0 >type=SYSCALL msg=audit(1389205028.807:8436): arch=c000003e syscall=272 success=yes exit=0 a0=40000000 a1=c0 a2=0 a3=7fff30d4e2f0 items=0 ppid=27468 pid=27482 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=294 tty=(none) comm="ip" exe="/usr/sbin/ip" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null) >type=NETFILTER_CFG msg=audit(1389205029.093:8437): table=filter family=2 entries=0 >type=NETFILTER_CFG msg=audit(1389205029.093:8437): table=nat family=2 entries=0 >type=NETFILTER_CFG msg=audit(1389205029.093:8437): table=mangle family=2 entries=0 >type=NETFILTER_CFG msg=audit(1389205029.093:8437): table=filter family=10 entries=0 >type=SYSCALL msg=audit(1389205029.093:8437): arch=c000003e syscall=272 success=yes exit=0 a0=40000000 a1=c0 a2=0 a3=7fffd06d27c0 items=0 ppid=27468 pid=27485 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=294 tty=(none) comm="ip" exe="/usr/sbin/ip" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null) >type=USER_ROLE_CHANGE msg=audit(1389205029.096:8438): pid=27276 uid=0 auid=0 ses=314 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389205029.117:8439): pid=27276 uid=0 auid=0 ses=314 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1389205029.126:8440): pid=27276 uid=0 auid=0 ses=314 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389205029.135:8441): pid=27276 uid=0 auid=0 ses=314 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389205029.136:8442): pid=27495 uid=0 auid=0 ses=314 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=27495 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389205029.136:8443): pid=27495 uid=0 auid=0 ses=314 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=27495 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRED_REFR msg=audit(1389205029.144:8444): pid=27495 uid=0 auid=0 ses=314 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389205029.175:8445): pid=27276 uid=0 auid=0 ses=314 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRED_DISP msg=audit(1389205029.181:8446): pid=27276 uid=0 auid=0 ses=314 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389205029.184:8447): pid=27276 uid=0 auid=0 ses=314 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1389205029.186:8448): pid=27276 uid=0 auid=0 ses=314 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389205029.186:8449): pid=27276 uid=0 auid=0 ses=314 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=27276 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389205029.187:8450): pid=27276 uid=0 auid=0 ses=314 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=27276 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389205029.187:8451): pid=27276 uid=0 auid=0 ses=314 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=27276 suid=0 rport=34333 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=AVC msg=audit(1389205031.135:8452): avc: denied { getattr } for pid=25867 comm="swift-object-re" path="/srv/node/device1/objects" dev="loop1" ino=12 scontext=system_u:system_r:swift_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=dir >type=SYSCALL msg=audit(1389205031.135:8452): arch=c000003e syscall=4 success=yes exit=0 a0=251f1e0 a1=7fff8e001400 a2=7fff8e001400 a3=0 items=0 ppid=1 pid=25867 auid=4294967295 uid=1001 gid=1001 euid=1001 suid=1001 fsuid=1001 egid=1001 sgid=1001 fsgid=1001 ses=4294967295 tty=(none) comm="swift-object-re" exe="/usr/bin/python2.7" subj=system_u:system_r:swift_t:s0 key=(null) >type=AVC msg=audit(1389205031.135:8453): avc: denied { read } for pid=25867 comm="swift-object-re" name="objects" dev="loop1" ino=12 scontext=system_u:system_r:swift_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=dir >type=AVC msg=audit(1389205031.135:8453): avc: denied { open } for pid=25867 comm="swift-object-re" path="/srv/node/device1/objects" dev="loop1" ino=12 scontext=system_u:system_r:swift_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=dir >type=SYSCALL msg=audit(1389205031.135:8453): arch=c000003e syscall=257 success=yes exit=3 a0=ffffffffffffff9c a1=251f1e0 a2=90800 a3=0 items=0 ppid=1 pid=25867 auid=4294967295 uid=1001 gid=1001 euid=1001 suid=1001 fsuid=1001 egid=1001 sgid=1001 fsgid=1001 ses=4294967295 tty=(none) comm="swift-object-re" exe="/usr/bin/python2.7" subj=system_u:system_r:swift_t:s0 key=(null) >type=NETFILTER_CFG msg=audit(1389205032.010:8454): table=filter family=2 entries=0 >type=NETFILTER_CFG msg=audit(1389205032.010:8454): table=nat family=2 entries=0 >type=NETFILTER_CFG msg=audit(1389205032.010:8454): table=mangle family=2 entries=0 >type=NETFILTER_CFG msg=audit(1389205032.010:8454): table=filter family=10 entries=0 >type=SYSCALL msg=audit(1389205032.010:8454): arch=c000003e syscall=272 success=yes exit=0 a0=40000000 a1=c0 a2=0 a3=7fff6b0b0e20 items=0 ppid=27733 pid=27740 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=294 tty=(none) comm="ip" exe="/usr/sbin/ip" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null) >type=CRYPTO_KEY_USER msg=audit(1389205032.187:8455): pid=27749 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=27749 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389205032.187:8456): pid=27749 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=27749 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389205032.188:8457): pid=27748 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=27749 suid=74 rport=34334 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389205032.188:8458): pid=27748 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=27749 suid=74 rport=34334 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=NETFILTER_CFG msg=audit(1389205032.026:8459): table=filter family=2 entries=0 >type=NETFILTER_CFG msg=audit(1389205032.026:8459): table=nat family=2 entries=0 >type=NETFILTER_CFG msg=audit(1389205032.026:8459): table=mangle family=2 entries=0 >type=NETFILTER_CFG msg=audit(1389205032.026:8459): table=filter family=10 entries=0 >type=SYSCALL msg=audit(1389205032.026:8459): arch=c000003e syscall=272 success=yes exit=0 a0=40000000 a1=c0 a2=0 a3=7fff07a46520 items=0 ppid=27733 pid=27744 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=294 tty=(none) comm="ip" exe="/usr/sbin/ip" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null) >type=NETFILTER_CFG msg=audit(1389205032.293:8460): table=filter family=2 entries=0 >type=NETFILTER_CFG msg=audit(1389205032.293:8460): table=nat family=2 entries=0 >type=NETFILTER_CFG msg=audit(1389205032.293:8460): table=mangle family=2 entries=0 >type=NETFILTER_CFG msg=audit(1389205032.293:8460): table=filter family=10 entries=0 >type=SYSCALL msg=audit(1389205032.293:8460): arch=c000003e syscall=272 success=yes exit=0 a0=40000000 a1=c0 a2=0 a3=7fffbf730760 items=0 ppid=27733 pid=27751 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=294 tty=(none) comm="ip" exe="/usr/sbin/ip" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null) >type=USER_AUTH msg=audit(1389205032.706:8461): pid=27748 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=34334 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389205032.706:8462): pid=27748 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=4096 fp=8b:56:b0:3f:c8:ad:38:a6:94:f4:a7:26:83:75:cc:85 rport=34334 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_ACCT msg=audit(1389205032.712:8463): pid=27748 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389205032.712:8464): pid=27748 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=27749 suid=74 rport=34334 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389205032.713:8465): pid=27748 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1389205032.716:8466): pid=27748 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=LOGIN msg=audit(1389205032.716:8467): login pid=27748 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=315 >type=USER_ROLE_CHANGE msg=audit(1389205032.759:8468): pid=27748 uid=0 auid=0 ses=315 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389205032.775:8469): pid=27748 uid=0 auid=0 ses=315 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1389205032.779:8470): pid=27748 uid=0 auid=0 ses=315 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389205032.781:8471): pid=27748 uid=0 auid=0 ses=315 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389205032.782:8472): pid=27767 uid=0 auid=0 ses=315 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=27767 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389205032.783:8473): pid=27767 uid=0 auid=0 ses=315 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=27767 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRED_REFR msg=audit(1389205032.785:8474): pid=27767 uid=0 auid=0 ses=315 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389205032.816:8475): pid=27775 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=27775 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389205032.816:8476): pid=27775 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=27775 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389205032.817:8477): pid=27774 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=27775 suid=74 rport=34335 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389205032.817:8478): pid=27774 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=27775 suid=74 rport=34335 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_END msg=audit(1389205032.820:8479): pid=27748 uid=0 auid=0 ses=315 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRED_DISP msg=audit(1389205032.824:8480): pid=27748 uid=0 auid=0 ses=315 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389205032.826:8481): pid=27748 uid=0 auid=0 ses=315 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1389205032.829:8482): pid=27748 uid=0 auid=0 ses=315 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389205032.829:8483): pid=27748 uid=0 auid=0 ses=315 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=27748 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389205032.829:8484): pid=27748 uid=0 auid=0 ses=315 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=27748 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389205032.829:8485): pid=27748 uid=0 auid=0 ses=315 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=27748 suid=0 rport=34334 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389205033.337:8486): pid=27774 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=34335 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389205033.337:8487): pid=27774 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=4096 fp=8b:56:b0:3f:c8:ad:38:a6:94:f4:a7:26:83:75:cc:85 rport=34335 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_ACCT msg=audit(1389205033.342:8488): pid=27774 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389205033.342:8489): pid=27774 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=27775 suid=74 rport=34335 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389205033.344:8490): pid=27774 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1389205033.346:8491): pid=27774 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=LOGIN msg=audit(1389205033.346:8492): login pid=27774 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=316 >type=USER_ROLE_CHANGE msg=audit(1389205033.388:8493): pid=27774 uid=0 auid=0 ses=316 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389205033.404:8494): pid=27774 uid=0 auid=0 ses=316 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1389205033.409:8495): pid=27774 uid=0 auid=0 ses=316 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389205033.411:8496): pid=27774 uid=0 auid=0 ses=316 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389205033.412:8497): pid=27778 uid=0 auid=0 ses=316 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=27778 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389205033.412:8498): pid=27778 uid=0 auid=0 ses=316 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=27778 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRED_REFR msg=audit(1389205033.415:8499): pid=27778 uid=0 auid=0 ses=316 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389205033.437:8500): pid=27774 uid=0 auid=0 ses=316 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRED_DISP msg=audit(1389205033.439:8501): pid=27774 uid=0 auid=0 ses=316 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389205033.442:8502): pid=27774 uid=0 auid=0 ses=316 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1389205033.444:8503): pid=27774 uid=0 auid=0 ses=316 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389205033.444:8504): pid=27774 uid=0 auid=0 ses=316 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=27774 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389205033.444:8505): pid=27774 uid=0 auid=0 ses=316 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=27774 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389205033.444:8506): pid=27774 uid=0 auid=0 ses=316 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=27774 suid=0 rport=34335 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=NETFILTER_CFG msg=audit(1389205034.617:8507): table=filter family=2 entries=65 >type=SYSCALL msg=audit(1389205034.617:8507): arch=c000003e syscall=54 success=yes exit=0 a0=3 a1=0 a2=40 a3=1400e00 items=0 ppid=27254 pid=27803 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=294 tty=(none) comm="iptables" exe="/usr/sbin/xtables-multi" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null) >type=CRYPTO_KEY_USER msg=audit(1389205036.455:8508): pid=27822 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=27822 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389205036.455:8509): pid=27822 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=27822 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389205036.455:8510): pid=27821 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=27822 suid=74 rport=34336 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389205036.455:8511): pid=27821 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=27822 suid=74 rport=34336 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389205037.038:8512): pid=27821 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=34336 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389205037.038:8513): pid=27821 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=4096 fp=8b:56:b0:3f:c8:ad:38:a6:94:f4:a7:26:83:75:cc:85 rport=34336 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_ACCT msg=audit(1389205037.074:8514): pid=27821 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389205037.074:8515): pid=27821 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=27822 suid=74 rport=34336 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389205037.076:8516): pid=27821 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1389205037.109:8517): pid=27821 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=LOGIN msg=audit(1389205037.109:8518): login pid=27821 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=317 >type=USER_ROLE_CHANGE msg=audit(1389205037.215:8519): pid=27821 uid=0 auid=0 ses=317 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389205037.244:8520): pid=27821 uid=0 auid=0 ses=317 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1389205037.270:8521): pid=27821 uid=0 auid=0 ses=317 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389205037.304:8522): pid=27821 uid=0 auid=0 ses=317 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389205037.305:8523): pid=27824 uid=0 auid=0 ses=317 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=27824 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389205037.305:8524): pid=27824 uid=0 auid=0 ses=317 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=27824 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRED_REFR msg=audit(1389205037.339:8525): pid=27824 uid=0 auid=0 ses=317 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389205037.392:8526): pid=27821 uid=0 auid=0 ses=317 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRED_DISP msg=audit(1389205037.425:8527): pid=27821 uid=0 auid=0 ses=317 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389205037.459:8528): pid=27821 uid=0 auid=0 ses=317 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1389205037.492:8529): pid=27821 uid=0 auid=0 ses=317 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389205037.492:8530): pid=27821 uid=0 auid=0 ses=317 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=27821 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389205037.492:8531): pid=27821 uid=0 auid=0 ses=317 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=27821 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389205037.492:8532): pid=27821 uid=0 auid=0 ses=317 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=27821 suid=0 rport=34336 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=NETFILTER_CFG msg=audit(1389205039.142:8533): table=filter family=2 entries=66 >type=SYSCALL msg=audit(1389205039.142:8533): arch=c000003e syscall=54 success=yes exit=0 a0=3 a1=0 a2=40 a3=117a250 items=0 ppid=27254 pid=27850 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=294 tty=(none) comm="iptables" exe="/usr/sbin/xtables-multi" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null) >type=CRYPTO_KEY_USER msg=audit(1389205040.386:8534): pid=27863 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=27863 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389205040.386:8535): pid=27863 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=27863 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389205040.387:8536): pid=27862 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=27863 suid=74 rport=34338 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389205040.387:8537): pid=27862 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=27863 suid=74 rport=34338 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389205040.961:8538): pid=27862 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=34338 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389205040.961:8539): pid=27862 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=4096 fp=8b:56:b0:3f:c8:ad:38:a6:94:f4:a7:26:83:75:cc:85 rport=34338 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_ACCT msg=audit(1389205040.997:8540): pid=27862 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389205040.997:8541): pid=27862 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=27863 suid=74 rport=34338 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389205040.999:8542): pid=27862 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1389205041.032:8543): pid=27862 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=LOGIN msg=audit(1389205041.032:8544): login pid=27862 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=318 >type=USER_ROLE_CHANGE msg=audit(1389205041.130:8545): pid=27862 uid=0 auid=0 ses=318 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389205041.220:8546): pid=27862 uid=0 auid=0 ses=318 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1389205041.256:8547): pid=27862 uid=0 auid=0 ses=318 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389205041.284:8548): pid=27862 uid=0 auid=0 ses=318 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389205041.285:8549): pid=27865 uid=0 auid=0 ses=318 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=27865 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389205041.285:8550): pid=27865 uid=0 auid=0 ses=318 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=27865 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRED_REFR msg=audit(1389205041.309:8551): pid=27865 uid=0 auid=0 ses=318 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389205041.343:8552): pid=27862 uid=0 auid=0 ses=318 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRED_DISP msg=audit(1389205041.347:8553): pid=27862 uid=0 auid=0 ses=318 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389205041.380:8554): pid=27862 uid=0 auid=0 ses=318 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1389205041.414:8555): pid=27862 uid=0 auid=0 ses=318 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389205041.414:8556): pid=27862 uid=0 auid=0 ses=318 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=27862 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389205041.414:8557): pid=27862 uid=0 auid=0 ses=318 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=27862 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389205041.414:8558): pid=27862 uid=0 auid=0 ses=318 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=27862 suid=0 rport=34338 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=SERVICE_START msg=audit(1389205043.067:8559): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="mongod" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1389205043.067:8560): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="mongod" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1389205043.209:8561): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="mongod" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389205044.348:8562): pid=27964 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=27964 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389205044.349:8563): pid=27964 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=27964 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389205044.349:8564): pid=27963 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=27964 suid=74 rport=34340 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389205044.349:8565): pid=27963 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=27964 suid=74 rport=34340 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389205044.950:8566): pid=27963 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=34340 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389205044.950:8567): pid=27963 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=4096 fp=8b:56:b0:3f:c8:ad:38:a6:94:f4:a7:26:83:75:cc:85 rport=34340 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_ACCT msg=audit(1389205044.986:8568): pid=27963 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389205044.986:8569): pid=27963 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=27964 suid=74 rport=34340 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389205044.988:8570): pid=27963 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1389205045.021:8571): pid=27963 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=LOGIN msg=audit(1389205045.021:8572): login pid=27963 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=319 >type=USER_ROLE_CHANGE msg=audit(1389205045.119:8573): pid=27963 uid=0 auid=0 ses=319 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389205045.157:8574): pid=27963 uid=0 auid=0 ses=319 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1389205045.193:8575): pid=27963 uid=0 auid=0 ses=319 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389205045.226:8576): pid=27963 uid=0 auid=0 ses=319 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389205045.227:8577): pid=27966 uid=0 auid=0 ses=319 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=27966 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389205045.227:8578): pid=27966 uid=0 auid=0 ses=319 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=27966 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRED_REFR msg=audit(1389205045.261:8579): pid=27966 uid=0 auid=0 ses=319 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389205045.305:8580): pid=27963 uid=0 auid=0 ses=319 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRED_DISP msg=audit(1389205045.339:8581): pid=27963 uid=0 auid=0 ses=319 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389205045.372:8582): pid=27963 uid=0 auid=0 ses=319 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1389205045.405:8583): pid=27963 uid=0 auid=0 ses=319 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389205045.405:8584): pid=27963 uid=0 auid=0 ses=319 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=27963 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389205045.405:8585): pid=27963 uid=0 auid=0 ses=319 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=27963 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389205045.405:8586): pid=27963 uid=0 auid=0 ses=319 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=27963 suid=0 rport=34340 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389205048.301:8587): pid=27979 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=27979 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389205048.301:8588): pid=27979 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=27979 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389205048.302:8589): pid=27978 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=27979 suid=74 rport=34343 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389205048.302:8590): pid=27978 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=27979 suid=74 rport=34343 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389205048.824:8591): pid=27978 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=34343 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389205048.824:8592): pid=27978 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=4096 fp=8b:56:b0:3f:c8:ad:38:a6:94:f4:a7:26:83:75:cc:85 rport=34343 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_ACCT msg=audit(1389205048.829:8593): pid=27978 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389205048.829:8594): pid=27978 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=27979 suid=74 rport=34343 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389205048.831:8595): pid=27978 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1389205048.834:8596): pid=27978 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=LOGIN msg=audit(1389205048.834:8597): login pid=27978 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=320 >type=USER_ROLE_CHANGE msg=audit(1389205048.877:8598): pid=27978 uid=0 auid=0 ses=320 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389205048.893:8599): pid=27978 uid=0 auid=0 ses=320 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1389205048.898:8600): pid=27978 uid=0 auid=0 ses=320 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389205048.900:8601): pid=27978 uid=0 auid=0 ses=320 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389205048.901:8602): pid=27981 uid=0 auid=0 ses=320 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=27981 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389205048.902:8603): pid=27981 uid=0 auid=0 ses=320 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=27981 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRED_REFR msg=audit(1389205048.904:8604): pid=27981 uid=0 auid=0 ses=320 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389205048.927:8605): pid=27978 uid=0 auid=0 ses=320 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRED_DISP msg=audit(1389205048.929:8606): pid=27978 uid=0 auid=0 ses=320 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389205048.931:8607): pid=27978 uid=0 auid=0 ses=320 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1389205048.933:8608): pid=27978 uid=0 auid=0 ses=320 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389205048.933:8609): pid=27978 uid=0 auid=0 ses=320 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=27978 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389205048.933:8610): pid=27978 uid=0 auid=0 ses=320 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=27978 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389205048.933:8611): pid=27978 uid=0 auid=0 ses=320 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=27978 suid=0 rport=34343 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389205051.952:8612): pid=27999 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=27999 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389205051.952:8613): pid=27999 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=27999 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389205051.953:8614): pid=27998 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=27999 suid=74 rport=34344 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389205051.953:8615): pid=27998 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=27999 suid=74 rport=34344 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389205052.546:8616): pid=27998 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=34344 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389205052.546:8617): pid=27998 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=4096 fp=8b:56:b0:3f:c8:ad:38:a6:94:f4:a7:26:83:75:cc:85 rport=34344 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_ACCT msg=audit(1389205052.583:8618): pid=27998 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389205052.583:8619): pid=27998 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=27999 suid=74 rport=34344 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389205052.585:8620): pid=27998 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1389205052.614:8621): pid=27998 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=LOGIN msg=audit(1389205052.614:8622): login pid=27998 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=321 >type=USER_ROLE_CHANGE msg=audit(1389205052.704:8623): pid=27998 uid=0 auid=0 ses=321 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389205052.735:8624): pid=27998 uid=0 auid=0 ses=321 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1389205052.750:8625): pid=27998 uid=0 auid=0 ses=321 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389205052.784:8626): pid=27998 uid=0 auid=0 ses=321 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389205052.785:8627): pid=28002 uid=0 auid=0 ses=321 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=28002 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389205052.785:8628): pid=28002 uid=0 auid=0 ses=321 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=28002 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRED_REFR msg=audit(1389205052.798:8629): pid=28002 uid=0 auid=0 ses=321 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389205052.821:8630): pid=27998 uid=0 auid=0 ses=321 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRED_DISP msg=audit(1389205052.823:8631): pid=27998 uid=0 auid=0 ses=321 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389205052.826:8632): pid=27998 uid=0 auid=0 ses=321 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1389205052.828:8633): pid=27998 uid=0 auid=0 ses=321 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389205052.828:8634): pid=27998 uid=0 auid=0 ses=321 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=27998 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389205052.828:8635): pid=27998 uid=0 auid=0 ses=321 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=27998 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389205052.828:8636): pid=27998 uid=0 auid=0 ses=321 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=27998 suid=0 rport=34344 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=AVC msg=audit(1389205055.037:8637): avc: denied { getattr } for pid=25281 comm="swift-object-au" path="/srv/node/device1" dev="loop1" ino=2 scontext=system_u:system_r:swift_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=dir >type=SYSCALL msg=audit(1389205055.037:8637): arch=c000003e syscall=6 success=yes exit=0 a0=1975b30 a1=7fffb71158a0 a2=7fffb71158a0 a3=0 items=0 ppid=1 pid=25281 auid=4294967295 uid=1001 gid=1001 euid=1001 suid=1001 fsuid=1001 egid=1001 sgid=1001 fsgid=1001 ses=4294967295 tty=(none) comm="swift-object-au" exe="/usr/bin/python2.7" subj=system_u:system_r:swift_t:s0 key=(null) >type=AVC msg=audit(1389205055.037:8638): avc: denied { read } for pid=25281 comm="swift-object-au" name="objects" dev="loop1" ino=12 scontext=system_u:system_r:swift_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=dir >type=AVC msg=audit(1389205055.037:8638): avc: denied { open } for pid=25281 comm="swift-object-au" path="/srv/node/device1/objects" dev="loop1" ino=12 scontext=system_u:system_r:swift_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=dir >type=SYSCALL msg=audit(1389205055.037:8638): arch=c000003e syscall=257 success=yes exit=3 a0=ffffffffffffff9c a1=199c4d0 a2=90800 a3=0 items=0 ppid=1 pid=25281 auid=4294967295 uid=1001 gid=1001 euid=1001 suid=1001 fsuid=1001 egid=1001 sgid=1001 fsgid=1001 ses=4294967295 tty=(none) comm="swift-object-au" exe="/usr/bin/python2.7" subj=system_u:system_r:swift_t:s0 key=(null) >type=CRYPTO_KEY_USER msg=audit(1389205055.836:8639): pid=28031 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=28031 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389205055.837:8640): pid=28031 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=28031 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389205055.837:8641): pid=28030 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=28031 suid=74 rport=34346 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389205055.837:8642): pid=28030 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=28031 suid=74 rport=34346 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389205056.428:8643): pid=28030 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=34346 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389205056.428:8644): pid=28030 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=4096 fp=8b:56:b0:3f:c8:ad:38:a6:94:f4:a7:26:83:75:cc:85 rport=34346 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_ACCT msg=audit(1389205056.455:8645): pid=28030 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389205056.455:8646): pid=28030 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=28031 suid=74 rport=34346 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389205056.457:8647): pid=28030 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1389205056.468:8648): pid=28030 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=LOGIN msg=audit(1389205056.468:8649): login pid=28030 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=322 >type=USER_ROLE_CHANGE msg=audit(1389205056.565:8650): pid=28030 uid=0 auid=0 ses=322 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389205056.643:8651): pid=28030 uid=0 auid=0 ses=322 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1389205056.655:8652): pid=28030 uid=0 auid=0 ses=322 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389205056.673:8653): pid=28030 uid=0 auid=0 ses=322 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389205056.674:8654): pid=28038 uid=0 auid=0 ses=322 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=28038 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389205056.674:8655): pid=28038 uid=0 auid=0 ses=322 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=28038 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRED_REFR msg=audit(1389205056.684:8656): pid=28038 uid=0 auid=0 ses=322 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389205056.720:8657): pid=28030 uid=0 auid=0 ses=322 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRED_DISP msg=audit(1389205056.738:8658): pid=28030 uid=0 auid=0 ses=322 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389205056.750:8659): pid=28030 uid=0 auid=0 ses=322 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1389205056.761:8660): pid=28030 uid=0 auid=0 ses=322 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389205056.761:8661): pid=28030 uid=0 auid=0 ses=322 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=28030 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389205056.761:8662): pid=28030 uid=0 auid=0 ses=322 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=28030 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389205056.761:8663): pid=28030 uid=0 auid=0 ses=322 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=28030 suid=0 rport=34346 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389205059.736:8664): pid=28071 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=28071 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389205059.736:8665): pid=28071 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=28071 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389205059.737:8666): pid=28070 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=28071 suid=74 rport=34354 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389205059.737:8667): pid=28070 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=28071 suid=74 rport=34354 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389205060.658:8668): pid=28070 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=34354 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389205060.658:8669): pid=28070 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=4096 fp=8b:56:b0:3f:c8:ad:38:a6:94:f4:a7:26:83:75:cc:85 rport=34354 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_ACCT msg=audit(1389205060.665:8670): pid=28070 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389205060.665:8671): pid=28070 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=28071 suid=74 rport=34354 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389205060.666:8672): pid=28070 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1389205060.669:8673): pid=28070 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=LOGIN msg=audit(1389205060.669:8674): login pid=28070 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=323 >type=USER_ROLE_CHANGE msg=audit(1389205060.716:8675): pid=28070 uid=0 auid=0 ses=323 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389205060.738:8676): pid=28070 uid=0 auid=0 ses=323 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1389205060.744:8677): pid=28070 uid=0 auid=0 ses=323 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389205060.746:8678): pid=28070 uid=0 auid=0 ses=323 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389205060.748:8679): pid=28074 uid=0 auid=0 ses=323 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=28074 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389205060.748:8680): pid=28074 uid=0 auid=0 ses=323 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=28074 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRED_REFR msg=audit(1389205060.751:8681): pid=28074 uid=0 auid=0 ses=323 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389205060.778:8682): pid=28070 uid=0 auid=0 ses=323 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRED_DISP msg=audit(1389205060.781:8683): pid=28070 uid=0 auid=0 ses=323 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389205060.784:8684): pid=28070 uid=0 auid=0 ses=323 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1389205060.786:8685): pid=28070 uid=0 auid=0 ses=323 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389205060.786:8686): pid=28070 uid=0 auid=0 ses=323 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=28070 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389205060.787:8687): pid=28070 uid=0 auid=0 ses=323 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=28070 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389205060.787:8688): pid=28070 uid=0 auid=0 ses=323 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=28070 suid=0 rport=34354 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=AVC msg=audit(1389205061.170:8689): avc: denied { getattr } for pid=25867 comm="swift-object-re" path="/srv/node/device1/objects" dev="loop1" ino=12 scontext=system_u:system_r:swift_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=dir >type=SYSCALL msg=audit(1389205061.170:8689): arch=c000003e syscall=4 success=yes exit=0 a0=2523570 a1=7fff8e001400 a2=7fff8e001400 a3=0 items=0 ppid=1 pid=25867 auid=4294967295 uid=1001 gid=1001 euid=1001 suid=1001 fsuid=1001 egid=1001 sgid=1001 fsgid=1001 ses=4294967295 tty=(none) comm="swift-object-re" exe="/usr/bin/python2.7" subj=system_u:system_r:swift_t:s0 key=(null) >type=AVC msg=audit(1389205061.170:8690): avc: denied { read } for pid=25867 comm="swift-object-re" name="objects" dev="loop1" ino=12 scontext=system_u:system_r:swift_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=dir >type=AVC msg=audit(1389205061.170:8690): avc: denied { open } for pid=25867 comm="swift-object-re" path="/srv/node/device1/objects" dev="loop1" ino=12 scontext=system_u:system_r:swift_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=dir >type=SYSCALL msg=audit(1389205061.170:8690): arch=c000003e syscall=257 success=yes exit=3 a0=ffffffffffffff9c a1=2523570 a2=90800 a3=0 items=0 ppid=1 pid=25867 auid=4294967295 uid=1001 gid=1001 euid=1001 suid=1001 fsuid=1001 egid=1001 sgid=1001 fsgid=1001 ses=4294967295 tty=(none) comm="swift-object-re" exe="/usr/bin/python2.7" subj=system_u:system_r:swift_t:s0 key=(null) >type=CRYPTO_KEY_USER msg=audit(1389205063.801:8691): pid=28083 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=28083 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389205063.801:8692): pid=28083 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=28083 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389205063.802:8693): pid=28082 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=28083 suid=74 rport=34356 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389205063.802:8694): pid=28082 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=28083 suid=74 rport=34356 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389205064.338:8695): pid=28082 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=34356 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389205064.338:8696): pid=28082 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=4096 fp=8b:56:b0:3f:c8:ad:38:a6:94:f4:a7:26:83:75:cc:85 rport=34356 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_ACCT msg=audit(1389205064.343:8697): pid=28082 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389205064.344:8698): pid=28082 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=28083 suid=74 rport=34356 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389205064.345:8699): pid=28082 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1389205064.348:8700): pid=28082 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=LOGIN msg=audit(1389205064.348:8701): login pid=28082 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=324 >type=USER_ROLE_CHANGE msg=audit(1389205064.391:8702): pid=28082 uid=0 auid=0 ses=324 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389205064.407:8703): pid=28082 uid=0 auid=0 ses=324 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1389205064.412:8704): pid=28082 uid=0 auid=0 ses=324 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389205064.414:8705): pid=28082 uid=0 auid=0 ses=324 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389205064.415:8706): pid=28085 uid=0 auid=0 ses=324 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=28085 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389205064.415:8707): pid=28085 uid=0 auid=0 ses=324 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=28085 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRED_REFR msg=audit(1389205064.418:8708): pid=28085 uid=0 auid=0 ses=324 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389205064.442:8709): pid=28082 uid=0 auid=0 ses=324 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRED_DISP msg=audit(1389205064.444:8710): pid=28082 uid=0 auid=0 ses=324 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389205064.446:8711): pid=28082 uid=0 auid=0 ses=324 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1389205064.448:8712): pid=28082 uid=0 auid=0 ses=324 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389205064.448:8713): pid=28082 uid=0 auid=0 ses=324 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=28082 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389205064.448:8714): pid=28082 uid=0 auid=0 ses=324 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=28082 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389205064.448:8715): pid=28082 uid=0 auid=0 ses=324 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=28082 suid=0 rport=34356 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389205067.457:8716): pid=28095 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=28095 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389205067.457:8717): pid=28095 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=28095 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389205067.458:8718): pid=28094 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=28095 suid=74 rport=34357 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389205067.458:8719): pid=28094 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=28095 suid=74 rport=34357 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389205067.976:8720): pid=28094 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=34357 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389205067.976:8721): pid=28094 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=4096 fp=8b:56:b0:3f:c8:ad:38:a6:94:f4:a7:26:83:75:cc:85 rport=34357 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_ACCT msg=audit(1389205067.983:8722): pid=28094 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389205067.983:8723): pid=28094 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=28095 suid=74 rport=34357 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389205067.985:8724): pid=28094 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1389205067.988:8725): pid=28094 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=LOGIN msg=audit(1389205067.988:8726): login pid=28094 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=325 >type=USER_ROLE_CHANGE msg=audit(1389205068.045:8727): pid=28094 uid=0 auid=0 ses=325 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389205068.066:8728): pid=28094 uid=0 auid=0 ses=325 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1389205068.072:8729): pid=28094 uid=0 auid=0 ses=325 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389205068.075:8730): pid=28094 uid=0 auid=0 ses=325 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389205068.076:8731): pid=28097 uid=0 auid=0 ses=325 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=28097 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389205068.076:8732): pid=28097 uid=0 auid=0 ses=325 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=28097 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRED_REFR msg=audit(1389205068.079:8733): pid=28097 uid=0 auid=0 ses=325 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389205068.105:8734): pid=28094 uid=0 auid=0 ses=325 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRED_DISP msg=audit(1389205068.107:8735): pid=28094 uid=0 auid=0 ses=325 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389205068.110:8736): pid=28094 uid=0 auid=0 ses=325 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1389205068.113:8737): pid=28094 uid=0 auid=0 ses=325 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389205068.113:8738): pid=28094 uid=0 auid=0 ses=325 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=28094 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389205068.113:8739): pid=28094 uid=0 auid=0 ses=325 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=28094 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389205068.113:8740): pid=28094 uid=0 auid=0 ses=325 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=28094 suid=0 rport=34357 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389205071.119:8741): pid=28123 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=28123 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389205071.119:8742): pid=28123 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=28123 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389205071.120:8743): pid=28122 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=28123 suid=74 rport=34358 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389205071.120:8744): pid=28122 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=28123 suid=74 rport=34358 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=SERVICE_START msg=audit(1389205071.493:8745): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="openstack-ceilometer-collector" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=USER_AUTH msg=audit(1389205071.709:8746): pid=28122 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=34358 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389205071.709:8747): pid=28122 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=4096 fp=8b:56:b0:3f:c8:ad:38:a6:94:f4:a7:26:83:75:cc:85 rport=34358 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_ACCT msg=audit(1389205071.720:8748): pid=28122 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389205071.721:8749): pid=28122 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=28123 suid=74 rport=34358 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389205071.722:8750): pid=28122 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1389205071.728:8751): pid=28122 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=LOGIN msg=audit(1389205071.728:8752): login pid=28122 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=326 >type=USER_ROLE_CHANGE msg=audit(1389205071.918:8753): pid=28122 uid=0 auid=0 ses=326 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=SERVICE_START msg=audit(1389205071.947:8754): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="openstack-ceilometer-central" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1389205072.120:8755): pid=28122 uid=0 auid=0 ses=326 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1389205072.140:8756): pid=28122 uid=0 auid=0 ses=326 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389205072.148:8757): pid=28122 uid=0 auid=0 ses=326 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389205072.148:8758): pid=28213 uid=0 auid=0 ses=326 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=28213 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389205072.148:8759): pid=28213 uid=0 auid=0 ses=326 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=28213 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRED_REFR msg=audit(1389205072.160:8760): pid=28213 uid=0 auid=0 ses=326 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389205072.195:8761): pid=28122 uid=0 auid=0 ses=326 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRED_DISP msg=audit(1389205072.200:8762): pid=28122 uid=0 auid=0 ses=326 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389205072.213:8763): pid=28122 uid=0 auid=0 ses=326 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1389205072.216:8764): pid=28122 uid=0 auid=0 ses=326 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389205072.216:8765): pid=28122 uid=0 auid=0 ses=326 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=28122 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389205072.216:8766): pid=28122 uid=0 auid=0 ses=326 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=28122 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389205072.216:8767): pid=28122 uid=0 auid=0 ses=326 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=28122 suid=0 rport=34358 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=SERVICE_START msg=audit(1389205072.517:8768): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="openstack-ceilometer-alarm-notifier" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1389205073.006:8769): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="openstack-ceilometer-api" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1389205073.677:8770): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="openstack-ceilometer-alarm-evaluator" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389205075.248:8771): pid=28415 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=28415 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389205075.248:8772): pid=28415 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=28415 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389205075.249:8773): pid=28414 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=28415 suid=74 rport=34395 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389205075.249:8774): pid=28414 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=28415 suid=74 rport=34395 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389205075.896:8775): pid=28414 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=34395 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389205075.896:8776): pid=28414 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=4096 fp=8b:56:b0:3f:c8:ad:38:a6:94:f4:a7:26:83:75:cc:85 rport=34395 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_ACCT msg=audit(1389205075.933:8777): pid=28414 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389205075.933:8778): pid=28414 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=28415 suid=74 rport=34395 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389205075.936:8779): pid=28414 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1389205075.960:8780): pid=28414 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=LOGIN msg=audit(1389205075.960:8781): login pid=28414 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=327 >type=USER_ROLE_CHANGE msg=audit(1389205076.051:8782): pid=28414 uid=0 auid=0 ses=327 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389205076.128:8783): pid=28414 uid=0 auid=0 ses=327 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1389205076.147:8784): pid=28414 uid=0 auid=0 ses=327 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389205076.155:8785): pid=28414 uid=0 auid=0 ses=327 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389205076.155:8786): pid=28472 uid=0 auid=0 ses=327 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=28472 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389205076.155:8787): pid=28472 uid=0 auid=0 ses=327 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=28472 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRED_REFR msg=audit(1389205076.160:8788): pid=28472 uid=0 auid=0 ses=327 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389205076.217:8789): pid=28414 uid=0 auid=0 ses=327 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389205076.234:8790): pid=28491 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=28491 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389205076.234:8791): pid=28491 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=28491 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389205076.235:8792): pid=28484 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=28491 suid=74 rport=34396 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389205076.235:8793): pid=28484 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=28491 suid=74 rport=34396 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRED_DISP msg=audit(1389205076.239:8794): pid=28414 uid=0 auid=0 ses=327 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389205076.249:8795): pid=28414 uid=0 auid=0 ses=327 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1389205076.260:8796): pid=28414 uid=0 auid=0 ses=327 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389205076.260:8797): pid=28414 uid=0 auid=0 ses=327 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=28414 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389205076.260:8798): pid=28414 uid=0 auid=0 ses=327 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=28414 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389205076.260:8799): pid=28414 uid=0 auid=0 ses=327 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=28414 suid=0 rport=34395 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=NETFILTER_CFG msg=audit(1389205076.490:8800): table=filter family=2 entries=0 >type=NETFILTER_CFG msg=audit(1389205076.490:8800): table=nat family=2 entries=0 >type=NETFILTER_CFG msg=audit(1389205076.490:8800): table=mangle family=2 entries=0 >type=NETFILTER_CFG msg=audit(1389205076.490:8800): table=filter family=10 entries=0 >type=SYSCALL msg=audit(1389205076.490:8800): arch=c000003e syscall=272 success=yes exit=0 a0=40000000 a1=c0 a2=0 a3=7fffcba636e0 items=0 ppid=28632 pid=28639 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=295 tty=(none) comm="ip" exe="/usr/sbin/ip" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null) >type=NETFILTER_CFG msg=audit(1389205076.509:8801): table=filter family=2 entries=0 >type=NETFILTER_CFG msg=audit(1389205076.509:8801): table=nat family=2 entries=0 >type=NETFILTER_CFG msg=audit(1389205076.509:8801): table=mangle family=2 entries=0 >type=NETFILTER_CFG msg=audit(1389205076.509:8801): table=filter family=10 entries=0 >type=SYSCALL msg=audit(1389205076.509:8801): arch=c000003e syscall=272 success=yes exit=0 a0=40000000 a1=c0 a2=0 a3=7fffb38f1f20 items=0 ppid=28632 pid=28646 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=295 tty=(none) comm="ip" exe="/usr/sbin/ip" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null) >type=NETFILTER_CFG msg=audit(1389205076.775:8802): table=filter family=2 entries=0 >type=NETFILTER_CFG msg=audit(1389205076.775:8802): table=nat family=2 entries=0 >type=NETFILTER_CFG msg=audit(1389205076.775:8802): table=mangle family=2 entries=0 >type=NETFILTER_CFG msg=audit(1389205076.775:8802): table=filter family=10 entries=0 >type=SYSCALL msg=audit(1389205076.775:8802): arch=c000003e syscall=272 success=yes exit=0 a0=40000000 a1=c0 a2=0 a3=7fff087c71b0 items=0 ppid=28632 pid=28648 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=295 tty=(none) comm="ip" exe="/usr/sbin/ip" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null) >type=USER_AUTH msg=audit(1389205076.780:8803): pid=28484 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=34396 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389205076.780:8804): pid=28484 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=4096 fp=8b:56:b0:3f:c8:ad:38:a6:94:f4:a7:26:83:75:cc:85 rport=34396 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_ACCT msg=audit(1389205076.791:8805): pid=28484 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389205076.792:8806): pid=28484 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=28491 suid=74 rport=34396 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389205076.793:8807): pid=28484 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1389205076.803:8808): pid=28484 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=LOGIN msg=audit(1389205076.803:8809): login pid=28484 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=328 >type=USER_ROLE_CHANGE msg=audit(1389205076.865:8810): pid=28484 uid=0 auid=0 ses=328 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389205076.882:8811): pid=28484 uid=0 auid=0 ses=328 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1389205076.886:8812): pid=28484 uid=0 auid=0 ses=328 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389205076.888:8813): pid=28484 uid=0 auid=0 ses=328 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389205076.889:8814): pid=28665 uid=0 auid=0 ses=328 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=28665 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389205076.889:8815): pid=28665 uid=0 auid=0 ses=328 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=28665 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRED_REFR msg=audit(1389205076.892:8816): pid=28665 uid=0 auid=0 ses=328 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389205076.915:8817): pid=28484 uid=0 auid=0 ses=328 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRED_DISP msg=audit(1389205076.917:8818): pid=28484 uid=0 auid=0 ses=328 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389205076.919:8819): pid=28484 uid=0 auid=0 ses=328 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1389205076.922:8820): pid=28484 uid=0 auid=0 ses=328 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389205076.922:8821): pid=28484 uid=0 auid=0 ses=328 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=28484 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389205076.922:8822): pid=28484 uid=0 auid=0 ses=328 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=28484 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389205076.922:8823): pid=28484 uid=0 auid=0 ses=328 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=28484 suid=0 rport=34396 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389205079.936:8824): pid=28695 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=28695 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389205079.936:8825): pid=28695 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=28695 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389205079.937:8826): pid=28694 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=28695 suid=74 rport=34397 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389205079.937:8827): pid=28694 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=28695 suid=74 rport=34397 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389205080.532:8828): pid=28694 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=34397 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389205080.532:8829): pid=28694 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=4096 fp=8b:56:b0:3f:c8:ad:38:a6:94:f4:a7:26:83:75:cc:85 rport=34397 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_ACCT msg=audit(1389205080.569:8830): pid=28694 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389205080.569:8831): pid=28694 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=28695 suid=74 rport=34397 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389205080.571:8832): pid=28694 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1389205080.605:8833): pid=28694 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=LOGIN msg=audit(1389205080.605:8834): login pid=28694 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=329 >type=USER_ROLE_CHANGE msg=audit(1389205080.724:8835): pid=28694 uid=0 auid=0 ses=329 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389205080.762:8836): pid=28694 uid=0 auid=0 ses=329 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1389205080.798:8837): pid=28694 uid=0 auid=0 ses=329 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389205080.831:8838): pid=28694 uid=0 auid=0 ses=329 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389205080.832:8839): pid=28697 uid=0 auid=0 ses=329 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=28697 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389205080.832:8840): pid=28697 uid=0 auid=0 ses=329 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=28697 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRED_REFR msg=audit(1389205080.866:8841): pid=28697 uid=0 auid=0 ses=329 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389205080.910:8842): pid=28694 uid=0 auid=0 ses=329 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRED_DISP msg=audit(1389205080.939:8843): pid=28694 uid=0 auid=0 ses=329 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389205080.973:8844): pid=28694 uid=0 auid=0 ses=329 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1389205081.006:8845): pid=28694 uid=0 auid=0 ses=329 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389205081.006:8846): pid=28694 uid=0 auid=0 ses=329 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=28694 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389205081.006:8847): pid=28694 uid=0 auid=0 ses=329 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=28694 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389205081.006:8848): pid=28694 uid=0 auid=0 ses=329 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=28694 suid=0 rport=34397 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=NETFILTER_CFG msg=audit(1389205081.578:8849): table=filter family=2 entries=0 >type=NETFILTER_CFG msg=audit(1389205081.578:8849): table=nat family=2 entries=0 >type=NETFILTER_CFG msg=audit(1389205081.578:8849): table=mangle family=2 entries=0 >type=NETFILTER_CFG msg=audit(1389205081.578:8849): table=filter family=10 entries=0 >type=SYSCALL msg=audit(1389205081.578:8849): arch=c000003e syscall=272 success=yes exit=0 a0=40000000 a1=c0 a2=0 a3=7fff30a39b50 items=0 ppid=28905 pid=28912 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=295 tty=(none) comm="ip" exe="/usr/sbin/ip" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null) >type=NETFILTER_CFG msg=audit(1389205081.596:8850): table=filter family=2 entries=0 >type=NETFILTER_CFG msg=audit(1389205081.596:8850): table=nat family=2 entries=0 >type=NETFILTER_CFG msg=audit(1389205081.596:8850): table=mangle family=2 entries=0 >type=NETFILTER_CFG msg=audit(1389205081.596:8850): table=filter family=10 entries=0 >type=SYSCALL msg=audit(1389205081.596:8850): arch=c000003e syscall=272 success=yes exit=0 a0=40000000 a1=c0 a2=0 a3=7fff95932770 items=0 ppid=28905 pid=28916 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=295 tty=(none) comm="ip" exe="/usr/sbin/ip" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null) >type=NETFILTER_CFG msg=audit(1389205081.862:8851): table=filter family=2 entries=0 >type=NETFILTER_CFG msg=audit(1389205081.862:8851): table=nat family=2 entries=0 >type=NETFILTER_CFG msg=audit(1389205081.862:8851): table=mangle family=2 entries=0 >type=NETFILTER_CFG msg=audit(1389205081.862:8851): table=filter family=10 entries=0 >type=SYSCALL msg=audit(1389205081.862:8851): arch=c000003e syscall=272 success=yes exit=0 a0=40000000 a1=c0 a2=0 a3=7fffc52c6d20 items=0 ppid=28905 pid=28918 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=295 tty=(none) comm="ip" exe="/usr/sbin/ip" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null) >type=CRYPTO_KEY_USER msg=audit(1389205083.943:8852): pid=28957 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=28957 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389205083.943:8853): pid=28957 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=28957 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389205083.945:8854): pid=28955 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=28957 suid=74 rport=34398 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389205083.945:8855): pid=28955 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=28957 suid=74 rport=34398 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_CMD msg=audit(1389205083.958:8856): pid=28956 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D43204C414E473D4320766773202D2D6E6F68656164696E6773202D2D756E69743D67202D6F206E616D652C73697A652C667265652C6C765F636F756E742C75756964202D2D736570617261746F72203A202D2D6E6F7375666669782063696E6465722D766F6C756D6573 terminal=? res=success' >type=USER_START msg=audit(1389205083.960:8857): pid=28956 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1389205084.079:8858): pid=28956 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_AUTH msg=audit(1389205084.572:8859): pid=28955 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=34398 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389205084.572:8860): pid=28955 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=4096 fp=8b:56:b0:3f:c8:ad:38:a6:94:f4:a7:26:83:75:cc:85 rport=34398 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_ACCT msg=audit(1389205084.609:8861): pid=28955 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389205084.609:8862): pid=28955 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=28957 suid=74 rport=34398 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389205084.611:8863): pid=28955 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1389205084.625:8864): pid=28955 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=LOGIN msg=audit(1389205084.625:8865): login pid=28955 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=330 >type=USER_ROLE_CHANGE msg=audit(1389205084.737:8866): pid=28955 uid=0 auid=0 ses=330 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389205084.777:8867): pid=28955 uid=0 auid=0 ses=330 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1389205084.813:8868): pid=28955 uid=0 auid=0 ses=330 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389205084.846:8869): pid=28955 uid=0 auid=0 ses=330 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389205084.847:8870): pid=28962 uid=0 auid=0 ses=330 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=28962 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389205084.847:8871): pid=28962 uid=0 auid=0 ses=330 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=28962 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRED_REFR msg=audit(1389205084.882:8872): pid=28962 uid=0 auid=0 ses=330 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389205084.928:8873): pid=28955 uid=0 auid=0 ses=330 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRED_DISP msg=audit(1389205084.962:8874): pid=28955 uid=0 auid=0 ses=330 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389205084.996:8875): pid=28955 uid=0 auid=0 ses=330 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1389205085.029:8876): pid=28955 uid=0 auid=0 ses=330 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389205085.029:8877): pid=28955 uid=0 auid=0 ses=330 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=28955 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389205085.029:8878): pid=28955 uid=0 auid=0 ses=330 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=28955 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389205085.029:8879): pid=28955 uid=0 auid=0 ses=330 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=28955 suid=0 rport=34398 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=AVC msg=audit(1389205085.069:8880): avc: denied { getattr } for pid=25281 comm="swift-object-au" path="/srv/node/device1" dev="loop1" ino=2 scontext=system_u:system_r:swift_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=dir >type=SYSCALL msg=audit(1389205085.069:8880): arch=c000003e syscall=6 success=yes exit=0 a0=191db90 a1=7fffb71158a0 a2=7fffb71158a0 a3=0 items=0 ppid=1 pid=25281 auid=4294967295 uid=1001 gid=1001 euid=1001 suid=1001 fsuid=1001 egid=1001 sgid=1001 fsgid=1001 ses=4294967295 tty=(none) comm="swift-object-au" exe="/usr/bin/python2.7" subj=system_u:system_r:swift_t:s0 key=(null) >type=AVC msg=audit(1389205085.069:8881): avc: denied { read } for pid=25281 comm="swift-object-au" name="objects" dev="loop1" ino=12 scontext=system_u:system_r:swift_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=dir >type=AVC msg=audit(1389205085.069:8881): avc: denied { open } for pid=25281 comm="swift-object-au" path="/srv/node/device1/objects" dev="loop1" ino=12 scontext=system_u:system_r:swift_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=dir >type=SYSCALL msg=audit(1389205085.069:8881): arch=c000003e syscall=257 success=yes exit=3 a0=ffffffffffffff9c a1=199c200 a2=90800 a3=0 items=0 ppid=1 pid=25281 auid=4294967295 uid=1001 gid=1001 euid=1001 suid=1001 fsuid=1001 egid=1001 sgid=1001 fsgid=1001 ses=4294967295 tty=(none) comm="swift-object-au" exe="/usr/bin/python2.7" subj=system_u:system_r:swift_t:s0 key=(null) >type=CRYPTO_KEY_USER msg=audit(1389205087.934:8882): pid=28977 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=28977 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389205087.934:8883): pid=28977 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=28977 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389205087.935:8884): pid=28976 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=28977 suid=74 rport=34402 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389205087.935:8885): pid=28976 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=28977 suid=74 rport=34402 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=ADD_GROUP msg=audit(1389205088.314:8886): pid=28980 uid=0 auid=0 ses=295 subj=unconfined_u:system_r:groupadd_t:s0-s0:c0.c1023 msg='op=adding group to /etc/group id=990 exe="/usr/sbin/groupadd" hostname=? addr=? terminal=? res=success' >type=ADD_GROUP msg=audit(1389205088.323:8887): pid=28980 uid=0 auid=0 ses=295 subj=unconfined_u:system_r:groupadd_t:s0-s0:c0.c1023 msg='op=adding group to /etc/gshadow id=990 exe="/usr/sbin/groupadd" hostname=? addr=? terminal=? res=success' >type=ADD_GROUP msg=audit(1389205088.324:8888): pid=28980 uid=0 auid=0 ses=295 subj=unconfined_u:system_r:groupadd_t:s0-s0:c0.c1023 msg='op= id=990 exe="/usr/sbin/groupadd" hostname=? addr=? terminal=? res=success' >type=ADD_USER msg=audit(1389205088.342:8889): pid=28985 uid=0 auid=0 ses=295 subj=unconfined_u:system_r:useradd_t:s0-s0:c0.c1023 msg='op=adding user id=993 exe="/usr/sbin/useradd" hostname=? addr=? terminal=? res=success' >type=USER_AUTH msg=audit(1389205088.470:8890): pid=28976 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=34402 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389205088.470:8891): pid=28976 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=4096 fp=8b:56:b0:3f:c8:ad:38:a6:94:f4:a7:26:83:75:cc:85 rport=34402 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_ACCT msg=audit(1389205088.476:8892): pid=28976 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389205088.476:8893): pid=28976 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=28977 suid=74 rport=34402 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389205088.478:8894): pid=28976 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1389205088.480:8895): pid=28976 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=LOGIN msg=audit(1389205088.480:8896): login pid=28976 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=331 >type=USER_ROLE_CHANGE msg=audit(1389205088.526:8897): pid=28976 uid=0 auid=0 ses=331 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389205088.544:8898): pid=28976 uid=0 auid=0 ses=331 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1389205088.549:8899): pid=28976 uid=0 auid=0 ses=331 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389205088.551:8900): pid=28976 uid=0 auid=0 ses=331 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389205088.552:8901): pid=28991 uid=0 auid=0 ses=331 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=28991 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389205088.552:8902): pid=28991 uid=0 auid=0 ses=331 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=28991 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRED_REFR msg=audit(1389205088.555:8903): pid=28991 uid=0 auid=0 ses=331 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389205088.578:8904): pid=28976 uid=0 auid=0 ses=331 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRED_DISP msg=audit(1389205088.580:8905): pid=28976 uid=0 auid=0 ses=331 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389205088.583:8906): pid=28976 uid=0 auid=0 ses=331 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1389205088.585:8907): pid=28976 uid=0 auid=0 ses=331 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389205088.585:8908): pid=28976 uid=0 auid=0 ses=331 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=28976 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389205088.585:8909): pid=28976 uid=0 auid=0 ses=331 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=28976 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389205088.585:8910): pid=28976 uid=0 auid=0 ses=331 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=28976 suid=0 rport=34402 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=NETFILTER_CFG msg=audit(1389205089.354:8911): table=filter family=2 entries=67 >type=SYSCALL msg=audit(1389205089.354:8911): arch=c000003e syscall=54 success=yes exit=0 a0=3 a1=0 a2=40 a3=fe76b0 items=0 ppid=28403 pid=29008 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=295 tty=(none) comm="iptables" exe="/usr/sbin/xtables-multi" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1389205091.205:8912): avc: denied { getattr } for pid=25867 comm="swift-object-re" path="/srv/node/device1/objects" dev="loop1" ino=12 scontext=system_u:system_r:swift_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=dir >type=SYSCALL msg=audit(1389205091.205:8912): arch=c000003e syscall=4 success=yes exit=0 a0=2523570 a1=7fff8e001400 a2=7fff8e001400 a3=0 items=0 ppid=1 pid=25867 auid=4294967295 uid=1001 gid=1001 euid=1001 suid=1001 fsuid=1001 egid=1001 sgid=1001 fsgid=1001 ses=4294967295 tty=(none) comm="swift-object-re" exe="/usr/bin/python2.7" subj=system_u:system_r:swift_t:s0 key=(null) >type=AVC msg=audit(1389205091.205:8913): avc: denied { read } for pid=25867 comm="swift-object-re" name="objects" dev="loop1" ino=12 scontext=system_u:system_r:swift_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=dir >type=AVC msg=audit(1389205091.205:8913): avc: denied { open } for pid=25867 comm="swift-object-re" path="/srv/node/device1/objects" dev="loop1" ino=12 scontext=system_u:system_r:swift_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=dir >type=SYSCALL msg=audit(1389205091.205:8913): arch=c000003e syscall=257 success=yes exit=3 a0=ffffffffffffff9c a1=2523570 a2=90800 a3=0 items=0 ppid=1 pid=25867 auid=4294967295 uid=1001 gid=1001 euid=1001 suid=1001 fsuid=1001 egid=1001 sgid=1001 fsgid=1001 ses=4294967295 tty=(none) comm="swift-object-re" exe="/usr/bin/python2.7" subj=system_u:system_r:swift_t:s0 key=(null) >type=CRYPTO_KEY_USER msg=audit(1389205091.609:8914): pid=29021 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=29021 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389205091.610:8915): pid=29021 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=29021 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389205091.610:8916): pid=29020 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=29021 suid=74 rport=34403 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389205091.610:8917): pid=29020 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=29021 suid=74 rport=34403 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389205092.206:8918): pid=29020 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=34403 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389205092.206:8919): pid=29020 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=4096 fp=8b:56:b0:3f:c8:ad:38:a6:94:f4:a7:26:83:75:cc:85 rport=34403 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_ACCT msg=audit(1389205092.243:8920): pid=29020 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389205092.244:8921): pid=29020 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=29021 suid=74 rport=34403 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389205092.246:8922): pid=29020 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1389205092.279:8923): pid=29020 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=LOGIN msg=audit(1389205092.279:8924): login pid=29020 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=332 >type=USER_ROLE_CHANGE msg=audit(1389205092.377:8925): pid=29020 uid=0 auid=0 ses=332 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389205092.414:8926): pid=29020 uid=0 auid=0 ses=332 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1389205092.450:8927): pid=29020 uid=0 auid=0 ses=332 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389205092.479:8928): pid=29020 uid=0 auid=0 ses=332 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389205092.480:8929): pid=29023 uid=0 auid=0 ses=332 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=29023 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389205092.480:8930): pid=29023 uid=0 auid=0 ses=332 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=29023 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRED_REFR msg=audit(1389205092.514:8931): pid=29023 uid=0 auid=0 ses=332 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389205092.558:8932): pid=29020 uid=0 auid=0 ses=332 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRED_DISP msg=audit(1389205092.592:8933): pid=29020 uid=0 auid=0 ses=332 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389205092.617:8934): pid=29020 uid=0 auid=0 ses=332 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1389205092.640:8935): pid=29020 uid=0 auid=0 ses=332 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389205092.640:8936): pid=29020 uid=0 auid=0 ses=332 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=29020 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389205092.640:8937): pid=29020 uid=0 auid=0 ses=332 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=29020 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389205092.641:8938): pid=29020 uid=0 auid=0 ses=332 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=29020 suid=0 rport=34403 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389205095.555:8939): pid=29043 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=29043 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389205095.556:8940): pid=29043 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=29043 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389205095.556:8941): pid=29042 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=29043 suid=74 rport=34405 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389205095.557:8942): pid=29042 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=29043 suid=74 rport=34405 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389205096.138:8943): pid=29042 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=34405 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389205096.138:8944): pid=29042 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=4096 fp=8b:56:b0:3f:c8:ad:38:a6:94:f4:a7:26:83:75:cc:85 rport=34405 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_ACCT msg=audit(1389205096.175:8945): pid=29042 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389205096.175:8946): pid=29042 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=29043 suid=74 rport=34405 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389205096.177:8947): pid=29042 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1389205096.210:8948): pid=29042 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=LOGIN msg=audit(1389205096.210:8949): login pid=29042 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=333 >type=USER_ROLE_CHANGE msg=audit(1389205096.314:8950): pid=29042 uid=0 auid=0 ses=333 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389205096.344:8951): pid=29042 uid=0 auid=0 ses=333 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1389205096.380:8952): pid=29042 uid=0 auid=0 ses=333 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389205096.414:8953): pid=29042 uid=0 auid=0 ses=333 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389205096.415:8954): pid=29045 uid=0 auid=0 ses=333 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=29045 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389205096.415:8955): pid=29045 uid=0 auid=0 ses=333 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=29045 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRED_REFR msg=audit(1389205096.434:8956): pid=29045 uid=0 auid=0 ses=333 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389205096.478:8957): pid=29042 uid=0 auid=0 ses=333 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRED_DISP msg=audit(1389205096.512:8958): pid=29042 uid=0 auid=0 ses=333 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389205096.541:8959): pid=29042 uid=0 auid=0 ses=333 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1389205096.552:8960): pid=29042 uid=0 auid=0 ses=333 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389205096.552:8961): pid=29042 uid=0 auid=0 ses=333 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=29042 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389205096.552:8962): pid=29042 uid=0 auid=0 ses=333 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=29042 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389205096.552:8963): pid=29042 uid=0 auid=0 ses=333 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=29042 suid=0 rport=34405 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389205099.472:8964): pid=29064 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=29064 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389205099.472:8965): pid=29064 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=29064 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389205099.472:8966): pid=29063 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=29064 suid=74 rport=34412 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389205099.472:8967): pid=29063 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=29064 suid=74 rport=34412 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389205099.994:8968): pid=29063 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=34412 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389205099.994:8969): pid=29063 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=4096 fp=8b:56:b0:3f:c8:ad:38:a6:94:f4:a7:26:83:75:cc:85 rport=34412 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_ACCT msg=audit(1389205100.001:8970): pid=29063 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389205100.001:8971): pid=29063 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=29064 suid=74 rport=34412 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389205100.004:8972): pid=29063 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1389205100.008:8973): pid=29063 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=LOGIN msg=audit(1389205100.008:8974): login pid=29063 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=334 >type=USER_ROLE_CHANGE msg=audit(1389205100.068:8975): pid=29063 uid=0 auid=0 ses=334 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389205100.089:8976): pid=29063 uid=0 auid=0 ses=334 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1389205100.095:8977): pid=29063 uid=0 auid=0 ses=334 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389205100.097:8978): pid=29063 uid=0 auid=0 ses=334 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389205100.099:8979): pid=29066 uid=0 auid=0 ses=334 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=29066 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389205100.099:8980): pid=29066 uid=0 auid=0 ses=334 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=29066 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRED_REFR msg=audit(1389205100.102:8981): pid=29066 uid=0 auid=0 ses=334 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389205100.128:8982): pid=29063 uid=0 auid=0 ses=334 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRED_DISP msg=audit(1389205100.130:8983): pid=29063 uid=0 auid=0 ses=334 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389205100.133:8984): pid=29063 uid=0 auid=0 ses=334 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1389205100.135:8985): pid=29063 uid=0 auid=0 ses=334 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389205100.135:8986): pid=29063 uid=0 auid=0 ses=334 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=29063 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389205100.135:8987): pid=29063 uid=0 auid=0 ses=334 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=29063 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389205100.136:8988): pid=29063 uid=0 auid=0 ses=334 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=29063 suid=0 rport=34412 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389205103.141:8989): pid=29077 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=29077 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389205103.141:8990): pid=29077 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=29077 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389205103.142:8991): pid=29076 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=29077 suid=74 rport=34413 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389205103.142:8992): pid=29076 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=29077 suid=74 rport=34413 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389205103.667:8993): pid=29076 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=34413 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389205103.667:8994): pid=29076 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=4096 fp=8b:56:b0:3f:c8:ad:38:a6:94:f4:a7:26:83:75:cc:85 rport=34413 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_ACCT msg=audit(1389205103.675:8995): pid=29076 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389205103.675:8996): pid=29076 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=29077 suid=74 rport=34413 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389205103.677:8997): pid=29076 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1389205103.679:8998): pid=29076 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=LOGIN msg=audit(1389205103.679:8999): login pid=29076 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=335 >type=USER_ROLE_CHANGE msg=audit(1389205103.725:9000): pid=29076 uid=0 auid=0 ses=335 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389205103.763:9001): pid=29076 uid=0 auid=0 ses=335 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1389205103.791:9002): pid=29076 uid=0 auid=0 ses=335 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389205103.817:9003): pid=29076 uid=0 auid=0 ses=335 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389205103.818:9004): pid=29080 uid=0 auid=0 ses=335 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=29080 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389205103.818:9005): pid=29080 uid=0 auid=0 ses=335 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=29080 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRED_REFR msg=audit(1389205103.852:9006): pid=29080 uid=0 auid=0 ses=335 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389205103.886:9007): pid=29076 uid=0 auid=0 ses=335 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRED_DISP msg=audit(1389205103.919:9008): pid=29076 uid=0 auid=0 ses=335 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389205103.953:9009): pid=29076 uid=0 auid=0 ses=335 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1389205103.986:9010): pid=29076 uid=0 auid=0 ses=335 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389205103.986:9011): pid=29076 uid=0 auid=0 ses=335 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=29076 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389205103.986:9012): pid=29076 uid=0 auid=0 ses=335 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=29076 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389205103.986:9013): pid=29076 uid=0 auid=0 ses=335 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=29076 suid=0 rport=34413 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_CHAUTHTOK msg=audit(1389205104.861:9014): pid=29086 uid=0 auid=0 ses=295 subj=unconfined_u:system_r:useradd_t:s0-s0:c0.c1023 msg='op=adding user to group acct="apache" exe="/usr/sbin/usermod" hostname=? addr=? terminal=? res=success' >type=USER_CHAUTHTOK msg=audit(1389205104.861:9015): pid=29086 uid=0 auid=0 ses=295 subj=unconfined_u:system_r:useradd_t:s0-s0:c0.c1023 msg='op=adding user to shadow group acct="apache" exe="/usr/sbin/usermod" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1389205106.111:9016): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="httpd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1389205106.111:9017): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="httpd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1389205106.176:9018): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="httpd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389205106.910:9019): pid=29169 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=29169 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389205106.911:9020): pid=29169 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=29169 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389205106.911:9021): pid=29168 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=29169 suid=74 rport=34419 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389205106.912:9022): pid=29168 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=29169 suid=74 rport=34419 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=SERVICE_START msg=audit(1389205107.143:9023): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="nagios" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=USER_AUTH msg=audit(1389205107.508:9024): pid=29168 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=34419 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389205107.508:9025): pid=29168 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=4096 fp=8b:56:b0:3f:c8:ad:38:a6:94:f4:a7:26:83:75:cc:85 rport=34419 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_ACCT msg=audit(1389205107.514:9026): pid=29168 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389205107.514:9027): pid=29168 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=29169 suid=74 rport=34419 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389205107.516:9028): pid=29168 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1389205107.519:9029): pid=29168 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=LOGIN msg=audit(1389205107.519:9030): login pid=29168 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=336 >type=USER_ROLE_CHANGE msg=audit(1389205107.565:9031): pid=29168 uid=0 auid=0 ses=336 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389205107.596:9032): pid=29168 uid=0 auid=0 ses=336 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1389205107.601:9033): pid=29168 uid=0 auid=0 ses=336 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389205107.603:9034): pid=29168 uid=0 auid=0 ses=336 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389205107.604:9035): pid=29267 uid=0 auid=0 ses=336 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=29267 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389205107.604:9036): pid=29267 uid=0 auid=0 ses=336 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=29267 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRED_REFR msg=audit(1389205107.607:9037): pid=29267 uid=0 auid=0 ses=336 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389205107.644:9038): pid=29168 uid=0 auid=0 ses=336 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRED_DISP msg=audit(1389205107.646:9039): pid=29168 uid=0 auid=0 ses=336 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389205107.649:9040): pid=29168 uid=0 auid=0 ses=336 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1389205107.651:9041): pid=29168 uid=0 auid=0 ses=336 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389205107.651:9042): pid=29168 uid=0 auid=0 ses=336 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=29168 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389205107.651:9043): pid=29168 uid=0 auid=0 ses=336 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=29168 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389205107.652:9044): pid=29168 uid=0 auid=0 ses=336 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=29168 suid=0 rport=34419 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=SERVICE_START msg=audit(1389205108.392:9045): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="httpd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1389205108.392:9046): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="httpd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1389205108.467:9047): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="httpd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=NETFILTER_CFG msg=audit(1389205109.684:9048): table=filter family=2 entries=0 >type=NETFILTER_CFG msg=audit(1389205109.684:9048): table=nat family=2 entries=0 >type=NETFILTER_CFG msg=audit(1389205109.684:9048): table=mangle family=2 entries=0 >type=NETFILTER_CFG msg=audit(1389205109.684:9048): table=filter family=10 entries=0 >type=SYSCALL msg=audit(1389205109.684:9048): arch=c000003e syscall=272 success=yes exit=0 a0=40000000 a1=c0 a2=0 a3=7fff25e257d0 items=0 ppid=29522 pid=29529 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=296 tty=(none) comm="ip" exe="/usr/sbin/ip" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null) >type=NETFILTER_CFG msg=audit(1389205109.705:9049): table=filter family=2 entries=0 >type=NETFILTER_CFG msg=audit(1389205109.705:9049): table=nat family=2 entries=0 >type=NETFILTER_CFG msg=audit(1389205109.705:9049): table=mangle family=2 entries=0 >type=NETFILTER_CFG msg=audit(1389205109.705:9049): table=filter family=10 entries=0 >type=SYSCALL msg=audit(1389205109.705:9049): arch=c000003e syscall=272 success=yes exit=0 a0=40000000 a1=c0 a2=0 a3=7fff3e249d90 items=0 ppid=29522 pid=29536 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=296 tty=(none) comm="ip" exe="/usr/sbin/ip" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null) >type=NETFILTER_CFG msg=audit(1389205109.983:9050): table=filter family=2 entries=0 >type=NETFILTER_CFG msg=audit(1389205109.983:9050): table=nat family=2 entries=0 >type=NETFILTER_CFG msg=audit(1389205109.983:9050): table=mangle family=2 entries=0 >type=NETFILTER_CFG msg=audit(1389205109.983:9050): table=filter family=10 entries=0 >type=SYSCALL msg=audit(1389205109.983:9050): arch=c000003e syscall=272 success=yes exit=0 a0=40000000 a1=c0 a2=0 a3=7fff121c1340 items=0 ppid=29522 pid=29538 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=296 tty=(none) comm="ip" exe="/usr/sbin/ip" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null) >type=CRYPTO_KEY_USER msg=audit(1389205110.661:9051): pid=29558 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=29558 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389205110.661:9052): pid=29558 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=29558 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389205110.662:9053): pid=29557 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=29558 suid=74 rport=34426 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389205110.662:9054): pid=29557 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=29558 suid=74 rport=34426 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389205111.194:9055): pid=29557 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=34426 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389205111.194:9056): pid=29557 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=4096 fp=8b:56:b0:3f:c8:ad:38:a6:94:f4:a7:26:83:75:cc:85 rport=34426 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_ACCT msg=audit(1389205111.231:9057): pid=29557 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389205111.231:9058): pid=29557 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=29558 suid=74 rport=34426 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389205111.233:9059): pid=29557 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1389205111.256:9060): pid=29557 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=LOGIN msg=audit(1389205111.256:9061): login pid=29557 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=337 >type=USER_ROLE_CHANGE msg=audit(1389205111.376:9062): pid=29557 uid=0 auid=0 ses=337 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389205111.417:9063): pid=29557 uid=0 auid=0 ses=337 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1389205111.430:9064): pid=29557 uid=0 auid=0 ses=337 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389205111.443:9065): pid=29557 uid=0 auid=0 ses=337 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389205111.444:9066): pid=29584 uid=0 auid=0 ses=337 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=29584 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389205111.444:9067): pid=29584 uid=0 auid=0 ses=337 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=29584 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRED_REFR msg=audit(1389205111.471:9068): pid=29584 uid=0 auid=0 ses=337 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389205111.514:9069): pid=29557 uid=0 auid=0 ses=337 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389205111.515:9070): pid=29592 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=29592 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389205111.515:9071): pid=29592 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=29592 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389205111.516:9072): pid=29591 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=29592 suid=74 rport=34427 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389205111.516:9073): pid=29591 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=29592 suid=74 rport=34427 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRED_DISP msg=audit(1389205111.520:9074): pid=29557 uid=0 auid=0 ses=337 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389205111.544:9075): pid=29557 uid=0 auid=0 ses=337 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1389205111.577:9076): pid=29557 uid=0 auid=0 ses=337 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389205111.577:9077): pid=29557 uid=0 auid=0 ses=337 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=29557 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389205111.577:9078): pid=29557 uid=0 auid=0 ses=337 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=29557 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389205111.577:9079): pid=29557 uid=0 auid=0 ses=337 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=29557 suid=0 rport=34426 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389205112.120:9080): pid=29591 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=34427 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389205112.121:9081): pid=29591 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=4096 fp=8b:56:b0:3f:c8:ad:38:a6:94:f4:a7:26:83:75:cc:85 rport=34427 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_ACCT msg=audit(1389205112.147:9082): pid=29591 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389205112.147:9083): pid=29591 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=29592 suid=74 rport=34427 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389205112.153:9084): pid=29591 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1389205112.162:9085): pid=29591 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=LOGIN msg=audit(1389205112.162:9086): login pid=29591 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=338 >type=USER_ROLE_CHANGE msg=audit(1389205112.340:9087): pid=29591 uid=0 auid=0 ses=338 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389205112.370:9088): pid=29591 uid=0 auid=0 ses=338 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1389205112.382:9089): pid=29591 uid=0 auid=0 ses=338 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389205112.410:9090): pid=29591 uid=0 auid=0 ses=338 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389205112.411:9091): pid=29595 uid=0 auid=0 ses=338 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=29595 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389205112.411:9092): pid=29595 uid=0 auid=0 ses=338 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=29595 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRED_REFR msg=audit(1389205112.445:9093): pid=29595 uid=0 auid=0 ses=338 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389205112.498:9094): pid=29591 uid=0 auid=0 ses=338 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRED_DISP msg=audit(1389205112.532:9095): pid=29591 uid=0 auid=0 ses=338 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389205112.566:9096): pid=29591 uid=0 auid=0 ses=338 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1389205112.600:9097): pid=29591 uid=0 auid=0 ses=338 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389205112.600:9098): pid=29591 uid=0 auid=0 ses=338 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=29591 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389205112.600:9099): pid=29591 uid=0 auid=0 ses=338 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=29591 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389205112.600:9100): pid=29591 uid=0 auid=0 ses=338 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=29591 suid=0 rport=34427 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=NETFILTER_CFG msg=audit(1389205113.078:9101): table=filter family=2 entries=0 >type=NETFILTER_CFG msg=audit(1389205113.078:9101): table=nat family=2 entries=0 >type=NETFILTER_CFG msg=audit(1389205113.078:9101): table=mangle family=2 entries=0 >type=NETFILTER_CFG msg=audit(1389205113.078:9101): table=filter family=10 entries=0 >type=SYSCALL msg=audit(1389205113.078:9101): arch=c000003e syscall=272 success=yes exit=0 a0=40000000 a1=c0 a2=0 a3=7fff389648a0 items=0 ppid=29803 pid=29810 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=296 tty=(none) comm="ip" exe="/usr/sbin/ip" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null) >type=NETFILTER_CFG msg=audit(1389205113.099:9102): table=filter family=2 entries=0 >type=NETFILTER_CFG msg=audit(1389205113.099:9102): table=nat family=2 entries=0 >type=NETFILTER_CFG msg=audit(1389205113.099:9102): table=mangle family=2 entries=0 >type=NETFILTER_CFG msg=audit(1389205113.099:9102): table=filter family=10 entries=0 >type=SYSCALL msg=audit(1389205113.099:9102): arch=c000003e syscall=272 success=yes exit=0 a0=40000000 a1=c0 a2=0 a3=7fff8d0b0eb0 items=0 ppid=29803 pid=29814 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=296 tty=(none) comm="ip" exe="/usr/sbin/ip" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null) >type=NETFILTER_CFG msg=audit(1389205113.362:9103): table=filter family=2 entries=0 >type=NETFILTER_CFG msg=audit(1389205113.362:9103): table=nat family=2 entries=0 >type=NETFILTER_CFG msg=audit(1389205113.362:9103): table=mangle family=2 entries=0 >type=NETFILTER_CFG msg=audit(1389205113.362:9103): table=filter family=10 entries=0 >type=SYSCALL msg=audit(1389205113.362:9103): arch=c000003e syscall=272 success=yes exit=0 a0=40000000 a1=c0 a2=0 a3=7fff6b77a690 items=0 ppid=29803 pid=29816 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=296 tty=(none) comm="ip" exe="/usr/sbin/ip" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1389205115.108:9104): avc: denied { getattr } for pid=25281 comm="swift-object-au" path="/srv/node/device1" dev="loop1" ino=2 scontext=system_u:system_r:swift_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=dir >type=SYSCALL msg=audit(1389205115.108:9104): arch=c000003e syscall=6 success=yes exit=0 a0=1975b30 a1=7fffb71158a0 a2=7fffb71158a0 a3=0 items=0 ppid=1 pid=25281 auid=4294967295 uid=1001 gid=1001 euid=1001 suid=1001 fsuid=1001 egid=1001 sgid=1001 fsgid=1001 ses=4294967295 tty=(none) comm="swift-object-au" exe="/usr/bin/python2.7" subj=system_u:system_r:swift_t:s0 key=(null) >type=AVC msg=audit(1389205115.108:9105): avc: denied { read } for pid=25281 comm="swift-object-au" name="objects" dev="loop1" ino=12 scontext=system_u:system_r:swift_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=dir >type=AVC msg=audit(1389205115.108:9105): avc: denied { open } for pid=25281 comm="swift-object-au" path="/srv/node/device1/objects" dev="loop1" ino=12 scontext=system_u:system_r:swift_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=dir >type=SYSCALL msg=audit(1389205115.108:9105): arch=c000003e syscall=257 success=yes exit=3 a0=ffffffffffffff9c a1=19a45a0 a2=90800 a3=0 items=0 ppid=1 pid=25281 auid=4294967295 uid=1001 gid=1001 euid=1001 suid=1001 fsuid=1001 egid=1001 sgid=1001 fsgid=1001 ses=4294967295 tty=(none) comm="swift-object-au" exe="/usr/bin/python2.7" subj=system_u:system_r:swift_t:s0 key=(null) >type=CRYPTO_KEY_USER msg=audit(1389205115.483:9106): pid=29857 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=29857 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389205115.483:9107): pid=29857 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=29857 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389205115.484:9108): pid=29856 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=29857 suid=74 rport=34428 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389205115.484:9109): pid=29856 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=29857 suid=74 rport=34428 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389205116.087:9110): pid=29856 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=34428 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389205116.087:9111): pid=29856 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=4096 fp=8b:56:b0:3f:c8:ad:38:a6:94:f4:a7:26:83:75:cc:85 rport=34428 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_ACCT msg=audit(1389205116.124:9112): pid=29856 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389205116.124:9113): pid=29856 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=29857 suid=74 rport=34428 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389205116.126:9114): pid=29856 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1389205116.160:9115): pid=29856 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=LOGIN msg=audit(1389205116.160:9116): login pid=29856 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=339 >type=USER_ROLE_CHANGE msg=audit(1389205116.272:9117): pid=29856 uid=0 auid=0 ses=339 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389205116.309:9118): pid=29856 uid=0 auid=0 ses=339 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1389205116.345:9119): pid=29856 uid=0 auid=0 ses=339 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389205116.378:9120): pid=29856 uid=0 auid=0 ses=339 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389205116.379:9121): pid=29859 uid=0 auid=0 ses=339 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=29859 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389205116.379:9122): pid=29859 uid=0 auid=0 ses=339 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=29859 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRED_REFR msg=audit(1389205116.413:9123): pid=29859 uid=0 auid=0 ses=339 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389205116.452:9124): pid=29856 uid=0 auid=0 ses=339 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRED_DISP msg=audit(1389205116.486:9125): pid=29856 uid=0 auid=0 ses=339 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389205116.520:9126): pid=29856 uid=0 auid=0 ses=339 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1389205116.553:9127): pid=29856 uid=0 auid=0 ses=339 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389205116.553:9128): pid=29856 uid=0 auid=0 ses=339 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=29856 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389205116.553:9129): pid=29856 uid=0 auid=0 ses=339 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=29856 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389205116.553:9130): pid=29856 uid=0 auid=0 ses=339 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=29856 suid=0 rport=34428 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=ADD_GROUP msg=audit(1389205118.394:9131): pid=29868 uid=0 auid=0 ses=296 subj=unconfined_u:system_r:groupadd_t:s0-s0:c0.c1023 msg='op=adding group to /etc/group id=989 exe="/usr/sbin/groupadd" hostname=? addr=? terminal=? res=success' >type=ADD_GROUP msg=audit(1389205118.400:9132): pid=29868 uid=0 auid=0 ses=296 subj=unconfined_u:system_r:groupadd_t:s0-s0:c0.c1023 msg='op=adding group to /etc/gshadow id=989 exe="/usr/sbin/groupadd" hostname=? addr=? terminal=? res=success' >type=ADD_GROUP msg=audit(1389205118.401:9133): pid=29868 uid=0 auid=0 ses=296 subj=unconfined_u:system_r:groupadd_t:s0-s0:c0.c1023 msg='op= id=989 exe="/usr/sbin/groupadd" hostname=? addr=? terminal=? res=success' >type=ADD_USER msg=audit(1389205118.419:9134): pid=29873 uid=0 auid=0 ses=296 subj=unconfined_u:system_r:useradd_t:s0-s0:c0.c1023 msg='op=adding user id=992 exe="/usr/sbin/useradd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1389205119.399:9135): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="nrpe" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389205119.463:9136): pid=29940 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=29940 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389205119.463:9137): pid=29940 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=29940 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389205119.464:9138): pid=29939 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=29940 suid=74 rport=34430 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389205119.464:9139): pid=29939 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=29940 suid=74 rport=34430 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=NETFILTER_CFG msg=audit(1389205119.531:9140): table=filter family=2 entries=68 >type=SYSCALL msg=audit(1389205119.531:9140): arch=c000003e syscall=54 success=yes exit=0 a0=3 a1=0 a2=40 a3=1cd0b00 items=0 ppid=29313 pid=29950 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=296 tty=(none) comm="iptables" exe="/usr/sbin/xtables-multi" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null) >type=USER_AUTH msg=audit(1389205120.000:9141): pid=29939 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=34430 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389205120.000:9142): pid=29939 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=4096 fp=8b:56:b0:3f:c8:ad:38:a6:94:f4:a7:26:83:75:cc:85 rport=34430 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_ACCT msg=audit(1389205120.006:9143): pid=29939 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389205120.007:9144): pid=29939 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=29940 suid=74 rport=34430 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389205120.009:9145): pid=29939 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1389205120.011:9146): pid=29939 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=LOGIN msg=audit(1389205120.011:9147): login pid=29939 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=340 >type=USER_ROLE_CHANGE msg=audit(1389205120.060:9148): pid=29939 uid=0 auid=0 ses=340 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389205120.133:9149): pid=29939 uid=0 auid=0 ses=340 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1389205120.148:9150): pid=29939 uid=0 auid=0 ses=340 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389205120.151:9151): pid=29939 uid=0 auid=0 ses=340 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389205120.152:9152): pid=29956 uid=0 auid=0 ses=340 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=29956 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389205120.152:9153): pid=29956 uid=0 auid=0 ses=340 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=29956 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRED_REFR msg=audit(1389205120.155:9154): pid=29956 uid=0 auid=0 ses=340 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389205120.188:9155): pid=29962 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=29962 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389205120.188:9156): pid=29962 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=29962 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389205120.189:9157): pid=29961 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=29962 suid=74 rport=34431 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389205120.189:9158): pid=29961 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=29962 suid=74 rport=34431 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_END msg=audit(1389205120.192:9159): pid=29939 uid=0 auid=0 ses=340 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRED_DISP msg=audit(1389205120.196:9160): pid=29939 uid=0 auid=0 ses=340 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389205120.199:9161): pid=29939 uid=0 auid=0 ses=340 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1389205120.201:9162): pid=29939 uid=0 auid=0 ses=340 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389205120.201:9163): pid=29939 uid=0 auid=0 ses=340 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=29939 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389205120.201:9164): pid=29939 uid=0 auid=0 ses=340 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=29939 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389205120.202:9165): pid=29939 uid=0 auid=0 ses=340 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=29939 suid=0 rport=34430 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389205120.717:9166): pid=29961 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=34431 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389205120.717:9167): pid=29961 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=4096 fp=8b:56:b0:3f:c8:ad:38:a6:94:f4:a7:26:83:75:cc:85 rport=34431 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_ACCT msg=audit(1389205120.723:9168): pid=29961 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389205120.724:9169): pid=29961 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=29962 suid=74 rport=34431 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389205120.725:9170): pid=29961 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1389205120.728:9171): pid=29961 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=LOGIN msg=audit(1389205120.728:9172): login pid=29961 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=341 >type=USER_ROLE_CHANGE msg=audit(1389205120.769:9173): pid=29961 uid=0 auid=0 ses=341 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389205120.784:9174): pid=29961 uid=0 auid=0 ses=341 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1389205120.789:9175): pid=29961 uid=0 auid=0 ses=341 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389205120.792:9176): pid=29961 uid=0 auid=0 ses=341 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389205120.793:9177): pid=29965 uid=0 auid=0 ses=341 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=29965 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389205120.793:9178): pid=29965 uid=0 auid=0 ses=341 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=29965 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRED_REFR msg=audit(1389205120.795:9179): pid=29965 uid=0 auid=0 ses=341 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389205120.834:9180): pid=29979 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=29979 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389205120.834:9181): pid=29979 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=29979 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389205120.835:9182): pid=29978 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=29979 suid=74 rport=34432 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389205120.835:9183): pid=29978 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=29979 suid=74 rport=34432 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_END msg=audit(1389205120.838:9184): pid=29961 uid=0 auid=0 ses=341 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRED_DISP msg=audit(1389205120.852:9185): pid=29961 uid=0 auid=0 ses=341 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389205120.886:9186): pid=29961 uid=0 auid=0 ses=341 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1389205120.917:9187): pid=29961 uid=0 auid=0 ses=341 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389205120.917:9188): pid=29961 uid=0 auid=0 ses=341 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=29961 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389205120.917:9189): pid=29961 uid=0 auid=0 ses=341 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=29961 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389205120.917:9190): pid=29961 uid=0 auid=0 ses=341 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=29961 suid=0 rport=34431 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=AVC msg=audit(1389205121.245:9191): avc: denied { getattr } for pid=25867 comm="swift-object-re" path="/srv/node/device1/objects" dev="loop1" ino=12 scontext=system_u:system_r:swift_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=dir >type=SYSCALL msg=audit(1389205121.245:9191): arch=c000003e syscall=4 success=yes exit=0 a0=2523570 a1=7fff8e001400 a2=7fff8e001400 a3=0 items=0 ppid=1 pid=25867 auid=4294967295 uid=1001 gid=1001 euid=1001 suid=1001 fsuid=1001 egid=1001 sgid=1001 fsgid=1001 ses=4294967295 tty=(none) comm="swift-object-re" exe="/usr/bin/python2.7" subj=system_u:system_r:swift_t:s0 key=(null) >type=AVC msg=audit(1389205121.245:9192): avc: denied { read } for pid=25867 comm="swift-object-re" name="objects" dev="loop1" ino=12 scontext=system_u:system_r:swift_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=dir >type=AVC msg=audit(1389205121.245:9192): avc: denied { open } for pid=25867 comm="swift-object-re" path="/srv/node/device1/objects" dev="loop1" ino=12 scontext=system_u:system_r:swift_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=dir >type=SYSCALL msg=audit(1389205121.245:9192): arch=c000003e syscall=257 success=yes exit=3 a0=ffffffffffffff9c a1=2523570 a2=90800 a3=0 items=0 ppid=1 pid=25867 auid=4294967295 uid=1001 gid=1001 euid=1001 suid=1001 fsuid=1001 egid=1001 sgid=1001 fsgid=1001 ses=4294967295 tty=(none) comm="swift-object-re" exe="/usr/bin/python2.7" subj=system_u:system_r:swift_t:s0 key=(null) >type=USER_AUTH msg=audit(1389205121.404:9193): pid=29978 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=34432 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389205121.404:9194): pid=29978 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=4096 fp=8b:56:b0:3f:c8:ad:38:a6:94:f4:a7:26:83:75:cc:85 rport=34432 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_ACCT msg=audit(1389205121.421:9195): pid=29978 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389205121.421:9196): pid=29978 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=29979 suid=74 rport=34432 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389205121.423:9197): pid=29978 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1389205121.431:9198): pid=29978 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=LOGIN msg=audit(1389205121.431:9199): login pid=29978 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=342 >type=USER_ROLE_CHANGE msg=audit(1389205121.507:9200): pid=29978 uid=0 auid=0 ses=342 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389205121.527:9201): pid=29978 uid=0 auid=0 ses=342 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1389205121.536:9202): pid=29978 uid=0 auid=0 ses=342 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389205121.543:9203): pid=29978 uid=0 auid=0 ses=342 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389205121.543:9204): pid=30035 uid=0 auid=0 ses=342 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=30035 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389205121.543:9205): pid=30035 uid=0 auid=0 ses=342 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=30035 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRED_REFR msg=audit(1389205121.547:9206): pid=30035 uid=0 auid=0 ses=342 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389205121.575:9207): pid=29978 uid=0 auid=0 ses=342 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRED_DISP msg=audit(1389205121.580:9208): pid=29978 uid=0 auid=0 ses=342 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389205121.587:9209): pid=29978 uid=0 auid=0 ses=342 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1389205121.594:9210): pid=29978 uid=0 auid=0 ses=342 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389205121.594:9211): pid=29978 uid=0 auid=0 ses=342 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=29978 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389205121.594:9212): pid=29978 uid=0 auid=0 ses=342 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=29978 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389205121.594:9213): pid=29978 uid=0 auid=0 ses=342 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=29978 suid=0 rport=34432 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=NETFILTER_CFG msg=audit(1389205121.809:9214): table=filter family=2 entries=0 >type=NETFILTER_CFG msg=audit(1389205121.809:9214): table=nat family=2 entries=0 >type=NETFILTER_CFG msg=audit(1389205121.809:9214): table=mangle family=2 entries=0 >type=NETFILTER_CFG msg=audit(1389205121.809:9214): table=filter family=10 entries=0 >type=SYSCALL msg=audit(1389205121.809:9214): arch=c000003e syscall=272 success=yes exit=0 a0=40000000 a1=c0 a2=0 a3=7fff050c2d50 items=0 ppid=30191 pid=30198 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=341 tty=(none) comm="ip" exe="/usr/sbin/ip" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null) >type=NETFILTER_CFG msg=audit(1389205121.829:9215): table=filter family=2 entries=0 >type=NETFILTER_CFG msg=audit(1389205121.829:9215): table=nat family=2 entries=0 >type=NETFILTER_CFG msg=audit(1389205121.829:9215): table=mangle family=2 entries=0 >type=NETFILTER_CFG msg=audit(1389205121.829:9215): table=filter family=10 entries=0 >type=SYSCALL msg=audit(1389205121.829:9215): arch=c000003e syscall=272 success=yes exit=0 a0=40000000 a1=c0 a2=0 a3=7fffb9064120 items=0 ppid=30191 pid=30205 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=341 tty=(none) comm="ip" exe="/usr/sbin/ip" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null) >type=NETFILTER_CFG msg=audit(1389205122.097:9216): table=filter family=2 entries=0 >type=NETFILTER_CFG msg=audit(1389205122.097:9216): table=nat family=2 entries=0 >type=NETFILTER_CFG msg=audit(1389205122.097:9216): table=mangle family=2 entries=0 >type=NETFILTER_CFG msg=audit(1389205122.097:9216): table=filter family=10 entries=0 >type=SYSCALL msg=audit(1389205122.097:9216): arch=c000003e syscall=272 success=yes exit=0 a0=40000000 a1=c0 a2=0 a3=7fff63052150 items=0 ppid=30191 pid=30207 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=341 tty=(none) comm="ip" exe="/usr/sbin/ip" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null) >type=NETFILTER_CFG msg=audit(1389205124.105:9217): table=filter family=2 entries=0 >type=NETFILTER_CFG msg=audit(1389205124.105:9217): table=nat family=2 entries=0 >type=NETFILTER_CFG msg=audit(1389205124.105:9217): table=mangle family=2 entries=0 >type=NETFILTER_CFG msg=audit(1389205124.105:9217): table=filter family=10 entries=0 >type=SYSCALL msg=audit(1389205124.105:9217): arch=c000003e syscall=272 success=yes exit=0 a0=40000000 a1=c0 a2=0 a3=7fff969b6a20 items=0 ppid=30439 pid=30446 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=341 tty=(none) comm="ip" exe="/usr/sbin/ip" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null) >type=NETFILTER_CFG msg=audit(1389205124.119:9218): table=filter family=2 entries=0 >type=NETFILTER_CFG msg=audit(1389205124.119:9218): table=nat family=2 entries=0 >type=NETFILTER_CFG msg=audit(1389205124.119:9218): table=mangle family=2 entries=0 >type=NETFILTER_CFG msg=audit(1389205124.119:9218): table=filter family=10 entries=0 >type=SYSCALL msg=audit(1389205124.119:9218): arch=c000003e syscall=272 success=yes exit=0 a0=40000000 a1=c0 a2=0 a3=7fff70babe00 items=0 ppid=30439 pid=30450 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=341 tty=(none) comm="ip" exe="/usr/sbin/ip" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null) >type=NETFILTER_CFG msg=audit(1389205124.384:9219): table=filter family=2 entries=0 >type=NETFILTER_CFG msg=audit(1389205124.384:9219): table=nat family=2 entries=0 >type=NETFILTER_CFG msg=audit(1389205124.384:9219): table=mangle family=2 entries=0 >type=NETFILTER_CFG msg=audit(1389205124.384:9219): table=filter family=10 entries=0 >type=SYSCALL msg=audit(1389205124.384:9219): arch=c000003e syscall=272 success=yes exit=0 a0=40000000 a1=c0 a2=0 a3=7fff16ab2630 items=0 ppid=30439 pid=30452 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=341 tty=(none) comm="ip" exe="/usr/sbin/ip" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null) >type=CRYPTO_KEY_USER msg=audit(1389205124.586:9220): pid=30471 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=30471 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389205124.586:9221): pid=30471 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=30471 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389205124.586:9222): pid=30470 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=30471 suid=74 rport=34433 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389205124.587:9223): pid=30470 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=30471 suid=74 rport=34433 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389205125.117:9224): pid=30470 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=34433 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389205125.117:9225): pid=30470 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=4096 fp=8b:56:b0:3f:c8:ad:38:a6:94:f4:a7:26:83:75:cc:85 rport=34433 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_ACCT msg=audit(1389205125.123:9226): pid=30470 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389205125.124:9227): pid=30470 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=30471 suid=74 rport=34433 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389205125.125:9228): pid=30470 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1389205125.128:9229): pid=30470 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=LOGIN msg=audit(1389205125.128:9230): login pid=30470 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=343 >type=USER_ROLE_CHANGE msg=audit(1389205125.179:9231): pid=30470 uid=0 auid=0 ses=343 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389205125.198:9232): pid=30470 uid=0 auid=0 ses=343 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1389205125.204:9233): pid=30470 uid=0 auid=0 ses=343 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389205125.206:9234): pid=30470 uid=0 auid=0 ses=343 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389205125.208:9235): pid=30473 uid=0 auid=0 ses=343 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=30473 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389205125.208:9236): pid=30473 uid=0 auid=0 ses=343 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=30473 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRED_REFR msg=audit(1389205125.211:9237): pid=30473 uid=0 auid=0 ses=343 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389205125.236:9238): pid=30470 uid=0 auid=0 ses=343 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRED_DISP msg=audit(1389205125.239:9239): pid=30470 uid=0 auid=0 ses=343 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389205125.242:9240): pid=30470 uid=0 auid=0 ses=343 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1389205125.244:9241): pid=30470 uid=0 auid=0 ses=343 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389205125.244:9242): pid=30470 uid=0 auid=0 ses=343 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=30470 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389205125.244:9243): pid=30470 uid=0 auid=0 ses=343 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=30470 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389205125.245:9244): pid=30470 uid=0 auid=0 ses=343 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=30470 suid=0 rport=34433 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389205128.260:9245): pid=30499 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=30499 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389205128.260:9246): pid=30499 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=30499 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389205128.261:9247): pid=30498 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=30499 suid=74 rport=34434 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389205128.261:9248): pid=30498 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=30499 suid=74 rport=34434 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389205128.848:9249): pid=30498 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=34434 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389205128.848:9250): pid=30498 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=4096 fp=8b:56:b0:3f:c8:ad:38:a6:94:f4:a7:26:83:75:cc:85 rport=34434 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_ACCT msg=audit(1389205128.885:9251): pid=30498 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389205128.885:9252): pid=30498 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=30499 suid=74 rport=34434 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389205128.887:9253): pid=30498 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1389205128.917:9254): pid=30498 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=LOGIN msg=audit(1389205128.917:9255): login pid=30498 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=344 >type=USER_ROLE_CHANGE msg=audit(1389205129.027:9256): pid=30498 uid=0 auid=0 ses=344 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389205129.065:9257): pid=30498 uid=0 auid=0 ses=344 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1389205129.101:9258): pid=30498 uid=0 auid=0 ses=344 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389205129.117:9259): pid=30498 uid=0 auid=0 ses=344 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389205129.118:9260): pid=30501 uid=0 auid=0 ses=344 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=30501 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389205129.118:9261): pid=30501 uid=0 auid=0 ses=344 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=30501 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRED_REFR msg=audit(1389205129.122:9262): pid=30501 uid=0 auid=0 ses=344 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389205129.170:9263): pid=30498 uid=0 auid=0 ses=344 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRED_DISP msg=audit(1389205129.205:9264): pid=30498 uid=0 auid=0 ses=344 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389205129.239:9265): pid=30498 uid=0 auid=0 ses=344 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1389205129.273:9266): pid=30498 uid=0 auid=0 ses=344 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389205129.273:9267): pid=30498 uid=0 auid=0 ses=344 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=30498 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389205129.273:9268): pid=30498 uid=0 auid=0 ses=344 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=30498 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389205129.273:9269): pid=30498 uid=0 auid=0 ses=344 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=30498 suid=0 rport=34434 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389205132.168:9270): pid=30517 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=30517 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389205132.168:9271): pid=30517 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=30517 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389205132.169:9272): pid=30516 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=30517 suid=74 rport=34435 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389205132.169:9273): pid=30516 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=30517 suid=74 rport=34435 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389205132.696:9274): pid=30516 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=34435 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389205132.696:9275): pid=30516 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=4096 fp=8b:56:b0:3f:c8:ad:38:a6:94:f4:a7:26:83:75:cc:85 rport=34435 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_ACCT msg=audit(1389205132.702:9276): pid=30516 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389205132.702:9277): pid=30516 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=30517 suid=74 rport=34435 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389205132.703:9278): pid=30516 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1389205132.706:9279): pid=30516 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=LOGIN msg=audit(1389205132.706:9280): login pid=30516 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=345 >type=USER_ROLE_CHANGE msg=audit(1389205132.750:9281): pid=30516 uid=0 auid=0 ses=345 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389205132.766:9282): pid=30516 uid=0 auid=0 ses=345 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1389205132.770:9283): pid=30516 uid=0 auid=0 ses=345 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389205132.772:9284): pid=30516 uid=0 auid=0 ses=345 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389205132.773:9285): pid=30519 uid=0 auid=0 ses=345 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=30519 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389205132.773:9286): pid=30519 uid=0 auid=0 ses=345 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=30519 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRED_REFR msg=audit(1389205132.775:9287): pid=30519 uid=0 auid=0 ses=345 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389205132.810:9288): pid=30525 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=30525 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389205132.810:9289): pid=30525 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=30525 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389205132.811:9290): pid=30524 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=30525 suid=74 rport=34436 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389205132.811:9291): pid=30524 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=30525 suid=74 rport=34436 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_END msg=audit(1389205132.812:9292): pid=30516 uid=0 auid=0 ses=345 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRED_DISP msg=audit(1389205132.817:9293): pid=30516 uid=0 auid=0 ses=345 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389205132.820:9294): pid=30516 uid=0 auid=0 ses=345 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1389205132.822:9295): pid=30516 uid=0 auid=0 ses=345 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389205132.822:9296): pid=30516 uid=0 auid=0 ses=345 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=30516 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389205132.822:9297): pid=30516 uid=0 auid=0 ses=345 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=30516 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389205132.822:9298): pid=30516 uid=0 auid=0 ses=345 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=30516 suid=0 rport=34435 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389205133.349:9299): pid=30524 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=34436 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389205133.349:9300): pid=30524 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=4096 fp=8b:56:b0:3f:c8:ad:38:a6:94:f4:a7:26:83:75:cc:85 rport=34436 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_ACCT msg=audit(1389205133.355:9301): pid=30524 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389205133.356:9302): pid=30524 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=30525 suid=74 rport=34436 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389205133.357:9303): pid=30524 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1389205133.360:9304): pid=30524 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=LOGIN msg=audit(1389205133.360:9305): login pid=30524 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=346 >type=USER_ROLE_CHANGE msg=audit(1389205133.401:9306): pid=30524 uid=0 auid=0 ses=346 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389205133.418:9307): pid=30524 uid=0 auid=0 ses=346 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1389205133.423:9308): pid=30524 uid=0 auid=0 ses=346 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389205133.425:9309): pid=30524 uid=0 auid=0 ses=346 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389205133.426:9310): pid=30528 uid=0 auid=0 ses=346 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=30528 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389205133.426:9311): pid=30528 uid=0 auid=0 ses=346 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=30528 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRED_REFR msg=audit(1389205133.429:9312): pid=30528 uid=0 auid=0 ses=346 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389205133.498:9313): pid=30545 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=30545 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389205133.498:9314): pid=30545 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=30545 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389205133.499:9315): pid=30544 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=30545 suid=74 rport=34437 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389205133.499:9316): pid=30544 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=30545 suid=74 rport=34437 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_END msg=audit(1389205133.501:9317): pid=30524 uid=0 auid=0 ses=346 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRED_DISP msg=audit(1389205133.506:9318): pid=30524 uid=0 auid=0 ses=346 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389205133.508:9319): pid=30524 uid=0 auid=0 ses=346 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1389205133.510:9320): pid=30524 uid=0 auid=0 ses=346 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389205133.510:9321): pid=30524 uid=0 auid=0 ses=346 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=30524 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389205133.510:9322): pid=30524 uid=0 auid=0 ses=346 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=30524 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389205133.510:9323): pid=30524 uid=0 auid=0 ses=346 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=30524 suid=0 rport=34436 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389205134.022:9324): pid=30544 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=34437 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389205134.022:9325): pid=30544 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=4096 fp=8b:56:b0:3f:c8:ad:38:a6:94:f4:a7:26:83:75:cc:85 rport=34437 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_ACCT msg=audit(1389205134.028:9326): pid=30544 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389205134.028:9327): pid=30544 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=30545 suid=74 rport=34437 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_AUTH msg=audit(1389205134.030:9328): pid=30544 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1389205134.033:9329): pid=30544 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=LOGIN msg=audit(1389205134.033:9330): login pid=30544 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=347 >type=USER_ROLE_CHANGE msg=audit(1389205134.082:9331): pid=30544 uid=0 auid=0 ses=347 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389205134.099:9332): pid=30544 uid=0 auid=0 ses=347 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1389205134.104:9333): pid=30544 uid=0 auid=0 ses=347 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_START msg=audit(1389205134.106:9334): pid=30544 uid=0 auid=0 ses=347 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389205134.108:9335): pid=30548 uid=0 auid=0 ses=347 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=30548 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389205134.108:9336): pid=30548 uid=0 auid=0 ses=347 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=30548 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRED_REFR msg=audit(1389205134.111:9337): pid=30548 uid=0 auid=0 ses=347 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389205134.155:9338): pid=30544 uid=0 auid=0 ses=347 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRED_DISP msg=audit(1389205134.157:9339): pid=30544 uid=0 auid=0 ses=347 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_END msg=audit(1389205134.159:9340): pid=30544 uid=0 auid=0 ses=347 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1389205134.161:9341): pid=30544 uid=0 auid=0 ses=347 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=os-allinone.novalocal addr=fe80::f816:3eff:fea8:f396 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389205134.161:9342): pid=30544 uid=0 auid=0 ses=347 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=30544 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389205134.161:9343): pid=30544 uid=0 auid=0 ses=347 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=30544 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389205134.161:9344): pid=30544 uid=0 auid=0 ses=347 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=30544 suid=0 rport=34437 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.40.2 terminal=? res=success' >type=USER_CMD msg=audit(1389205144.098:9345): pid=30562 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D43204C414E473D4320766773202D2D6E6F68656164696E6773202D2D756E69743D67202D6F206E616D652C73697A652C667265652C6C765F636F756E742C75756964202D2D736570617261746F72203A202D2D6E6F7375666669782063696E6465722D766F6C756D6573 terminal=? res=success' >type=USER_START msg=audit(1389205144.101:9346): pid=30562 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1389205144.146:9347): pid=30562 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=AVC msg=audit(1389205145.139:9348): avc: denied { getattr } for pid=25281 comm="swift-object-au" path="/srv/node/device1" dev="loop1" ino=2 scontext=system_u:system_r:swift_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=dir >type=SYSCALL msg=audit(1389205145.139:9348): arch=c000003e syscall=6 success=yes exit=0 a0=191db90 a1=7fffb71158a0 a2=7fffb71158a0 a3=0 items=0 ppid=1 pid=25281 auid=4294967295 uid=1001 gid=1001 euid=1001 suid=1001 fsuid=1001 egid=1001 sgid=1001 fsgid=1001 ses=4294967295 tty=(none) comm="swift-object-au" exe="/usr/bin/python2.7" subj=system_u:system_r:swift_t:s0 key=(null) >type=AVC msg=audit(1389205145.139:9349): avc: denied { read } for pid=25281 comm="swift-object-au" name="objects" dev="loop1" ino=12 scontext=system_u:system_r:swift_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=dir >type=AVC msg=audit(1389205145.139:9349): avc: denied { open } for pid=25281 comm="swift-object-au" path="/srv/node/device1/objects" dev="loop1" ino=12 scontext=system_u:system_r:swift_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=dir >type=SYSCALL msg=audit(1389205145.139:9349): arch=c000003e syscall=257 success=yes exit=3 a0=ffffffffffffff9c a1=1993740 a2=90800 a3=0 items=0 ppid=1 pid=25281 auid=4294967295 uid=1001 gid=1001 euid=1001 suid=1001 fsuid=1001 egid=1001 sgid=1001 fsgid=1001 ses=4294967295 tty=(none) comm="swift-object-au" exe="/usr/bin/python2.7" subj=system_u:system_r:swift_t:s0 key=(null) >type=USER_CMD msg=audit(1389205204.166:9350): pid=31460 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D43204C414E473D4320766773202D2D6E6F68656164696E6773202D2D756E69743D67202D6F206E616D652C73697A652C667265652C6C765F636F756E742C75756964202D2D736570617261746F72203A202D2D6E6F7375666669782063696E6465722D766F6C756D6573 terminal=? res=success' >type=USER_START msg=audit(1389205204.168:9351): pid=31460 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1389205204.267:9352): pid=31460 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=AVC msg=audit(1389205211.336:9353): avc: denied { getattr } for pid=25867 comm="swift-object-re" path="/srv/node/device1/objects" dev="loop1" ino=12 scontext=system_u:system_r:swift_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=dir >type=SYSCALL msg=audit(1389205211.336:9353): arch=c000003e syscall=4 success=yes exit=0 a0=251f1e0 a1=7fff8e001400 a2=7fff8e001400 a3=0 items=0 ppid=1 pid=25867 auid=4294967295 uid=1001 gid=1001 euid=1001 suid=1001 fsuid=1001 egid=1001 sgid=1001 fsgid=1001 ses=4294967295 tty=(none) comm="swift-object-re" exe="/usr/bin/python2.7" subj=system_u:system_r:swift_t:s0 key=(null) >type=AVC msg=audit(1389205211.336:9354): avc: denied { read } for pid=25867 comm="swift-object-re" name="objects" dev="loop1" ino=12 scontext=system_u:system_r:swift_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=dir >type=AVC msg=audit(1389205211.336:9354): avc: denied { open } for pid=25867 comm="swift-object-re" path="/srv/node/device1/objects" dev="loop1" ino=12 scontext=system_u:system_r:swift_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=dir >type=SYSCALL msg=audit(1389205211.336:9354): arch=c000003e syscall=257 success=yes exit=3 a0=ffffffffffffff9c a1=251f1e0 a2=90800 a3=0 items=0 ppid=1 pid=25867 auid=4294967295 uid=1001 gid=1001 euid=1001 suid=1001 fsuid=1001 egid=1001 sgid=1001 fsgid=1001 ses=4294967295 tty=(none) comm="swift-object-re" exe="/usr/bin/python2.7" subj=system_u:system_r:swift_t:s0 key=(null) >type=USER_CMD msg=audit(1389205264.289:9355): pid=14366 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D43204C414E473D4320766773202D2D6E6F68656164696E6773202D2D756E69743D67202D6F206E616D652C73697A652C667265652C6C765F636F756E742C75756964202D2D736570617261746F72203A202D2D6E6F7375666669782063696E6465722D766F6C756D6573 terminal=? res=success' >type=USER_START msg=audit(1389205264.291:9356): pid=14366 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1389205264.332:9357): pid=14366 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1389205324.349:9358): pid=14408 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D43204C414E473D4320766773202D2D6E6F68656164696E6773202D2D756E69743D67202D6F206E616D652C73697A652C667265652C6C765F636F756E742C75756964202D2D736570617261746F72203A202D2D6E6F7375666669782063696E6465722D766F6C756D6573 terminal=? res=success' >type=USER_START msg=audit(1389205324.350:9359): pid=14408 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1389205324.394:9360): pid=14408 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=AVC msg=audit(1389205325.315:9361): avc: denied { getattr } for pid=25281 comm="swift-object-au" path="/srv/node/device1" dev="loop1" ino=2 scontext=system_u:system_r:swift_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=dir >type=SYSCALL msg=audit(1389205325.315:9361): arch=c000003e syscall=6 success=yes exit=0 a0=191db90 a1=7fffb71158a0 a2=7fffb71158a0 a3=0 items=0 ppid=1 pid=25281 auid=4294967295 uid=1001 gid=1001 euid=1001 suid=1001 fsuid=1001 egid=1001 sgid=1001 fsgid=1001 ses=4294967295 tty=(none) comm="swift-object-au" exe="/usr/bin/python2.7" subj=system_u:system_r:swift_t:s0 key=(null) >type=AVC msg=audit(1389205325.315:9362): avc: denied { read } for pid=25281 comm="swift-object-au" name="objects" dev="loop1" ino=12 scontext=system_u:system_r:swift_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=dir >type=AVC msg=audit(1389205325.315:9362): avc: denied { open } for pid=25281 comm="swift-object-au" path="/srv/node/device1/objects" dev="loop1" ino=12 scontext=system_u:system_r:swift_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=dir >type=SYSCALL msg=audit(1389205325.315:9362): arch=c000003e syscall=257 success=yes exit=3 a0=ffffffffffffff9c a1=198c7d0 a2=90800 a3=0 items=0 ppid=1 pid=25281 auid=4294967295 uid=1001 gid=1001 euid=1001 suid=1001 fsuid=1001 egid=1001 sgid=1001 fsgid=1001 ses=4294967295 tty=(none) comm="swift-object-au" exe="/usr/bin/python2.7" subj=system_u:system_r:swift_t:s0 key=(null) >type=USER_CMD msg=audit(1389205384.412:9363): pid=14447 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D43204C414E473D4320766773202D2D6E6F68656164696E6773202D2D756E69743D67202D6F206E616D652C73697A652C667265652C6C765F636F756E742C75756964202D2D736570617261746F72203A202D2D6E6F7375666669782063696E6465722D766F6C756D6573 terminal=? res=success' >type=USER_START msg=audit(1389205384.415:9364): pid=14447 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1389205384.452:9365): pid=14447 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=AVC msg=audit(1389205421.552:9366): avc: denied { getattr } for pid=25867 comm="swift-object-re" path="/srv/node/device1/objects" dev="loop1" ino=12 scontext=system_u:system_r:swift_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=dir >type=SYSCALL msg=audit(1389205421.552:9366): arch=c000003e syscall=4 success=yes exit=0 a0=1e57880 a1=7fff8e001400 a2=7fff8e001400 a3=0 items=0 ppid=1 pid=25867 auid=4294967295 uid=1001 gid=1001 euid=1001 suid=1001 fsuid=1001 egid=1001 sgid=1001 fsgid=1001 ses=4294967295 tty=(none) comm="swift-object-re" exe="/usr/bin/python2.7" subj=system_u:system_r:swift_t:s0 key=(null) >type=AVC msg=audit(1389205421.552:9367): avc: denied { read } for pid=25867 comm="swift-object-re" name="objects" dev="loop1" ino=12 scontext=system_u:system_r:swift_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=dir >type=AVC msg=audit(1389205421.552:9367): avc: denied { open } for pid=25867 comm="swift-object-re" path="/srv/node/device1/objects" dev="loop1" ino=12 scontext=system_u:system_r:swift_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=dir >type=SYSCALL msg=audit(1389205421.552:9367): arch=c000003e syscall=257 success=yes exit=3 a0=ffffffffffffff9c a1=1e57880 a2=90800 a3=0 items=0 ppid=1 pid=25867 auid=4294967295 uid=1001 gid=1001 euid=1001 suid=1001 fsuid=1001 egid=1001 sgid=1001 fsgid=1001 ses=4294967295 tty=(none) comm="swift-object-re" exe="/usr/bin/python2.7" subj=system_u:system_r:swift_t:s0 key=(null) >type=USER_CMD msg=audit(1389205444.472:9368): pid=14510 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D43204C414E473D4320766773202D2D6E6F68656164696E6773202D2D756E69743D67202D6F206E616D652C73697A652C667265652C6C765F636F756E742C75756964202D2D736570617261746F72203A202D2D6E6F7375666669782063696E6465722D766F6C756D6573 terminal=? res=success' >type=USER_START msg=audit(1389205444.473:9369): pid=14510 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1389205444.511:9370): pid=14510 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1389205504.530:9371): pid=14556 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D43204C414E473D4320766773202D2D6E6F68656164696E6773202D2D756E69743D67202D6F206E616D652C73697A652C667265652C6C765F636F756E742C75756964202D2D736570617261746F72203A202D2D6E6F7375666669782063696E6465722D766F6C756D6573 terminal=? res=success' >type=USER_START msg=audit(1389205504.533:9372): pid=14556 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1389205504.571:9373): pid=14556 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1389205564.589:9374): pid=14596 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D43204C414E473D4320766773202D2D6E6F68656164696E6773202D2D756E69743D67202D6F206E616D652C73697A652C667265652C6C765F636F756E742C75756964202D2D736570617261746F72203A202D2D6E6F7375666669782063696E6465722D766F6C756D6573 terminal=? res=success' >type=USER_START msg=audit(1389205564.589:9375): pid=14596 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1389205564.626:9376): pid=14596 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=AVC msg=audit(1389205565.560:9377): avc: denied { getattr } for pid=25281 comm="swift-object-au" path="/srv/node/device1" dev="loop1" ino=2 scontext=system_u:system_r:swift_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=dir >type=SYSCALL msg=audit(1389205565.560:9377): arch=c000003e syscall=6 success=yes exit=0 a0=191db90 a1=7fffb71158a0 a2=7fffb71158a0 a3=0 items=0 ppid=1 pid=25281 auid=4294967295 uid=1001 gid=1001 euid=1001 suid=1001 fsuid=1001 egid=1001 sgid=1001 fsgid=1001 ses=4294967295 tty=(none) comm="swift-object-au" exe="/usr/bin/python2.7" subj=system_u:system_r:swift_t:s0 key=(null) >type=AVC msg=audit(1389205565.560:9378): avc: denied { read } for pid=25281 comm="swift-object-au" name="objects" dev="loop1" ino=12 scontext=system_u:system_r:swift_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=dir >type=AVC msg=audit(1389205565.560:9378): avc: denied { open } for pid=25281 comm="swift-object-au" path="/srv/node/device1/objects" dev="loop1" ino=12 scontext=system_u:system_r:swift_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=dir >type=SYSCALL msg=audit(1389205565.560:9378): arch=c000003e syscall=257 success=yes exit=3 a0=ffffffffffffff9c a1=1afff30 a2=90800 a3=0 items=0 ppid=1 pid=25281 auid=4294967295 uid=1001 gid=1001 euid=1001 suid=1001 fsuid=1001 egid=1001 sgid=1001 fsgid=1001 ses=4294967295 tty=(none) comm="swift-object-au" exe="/usr/bin/python2.7" subj=system_u:system_r:swift_t:s0 key=(null) >type=USER_CMD msg=audit(1389205624.643:9379): pid=14638 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D43204C414E473D4320766773202D2D6E6F68656164696E6773202D2D756E69743D67202D6F206E616D652C73697A652C667265652C6C765F636F756E742C75756964202D2D736570617261746F72203A202D2D6E6F7375666669782063696E6465722D766F6C756D6573 terminal=? res=success' >type=USER_START msg=audit(1389205624.646:9380): pid=14638 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1389205624.683:9381): pid=14638 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1389205684.702:9382): pid=14691 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D43204C414E473D4320766773202D2D6E6F68656164696E6773202D2D756E69743D67202D6F206E616D652C73697A652C667265652C6C765F636F756E742C75756964202D2D736570617261746F72203A202D2D6E6F7375666669782063696E6465722D766F6C756D6573 terminal=? res=success' >type=USER_START msg=audit(1389205684.703:9383): pid=14691 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1389205684.739:9384): pid=14691 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=AVC msg=audit(1389205685.677:9385): avc: denied { getattr } for pid=25281 comm="swift-object-au" path="/srv/node/device1" dev="loop1" ino=2 scontext=system_u:system_r:swift_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=dir >type=SYSCALL msg=audit(1389205685.677:9385): arch=c000003e syscall=6 success=yes exit=0 a0=191db90 a1=7fffb71158a0 a2=7fffb71158a0 a3=0 items=0 ppid=1 pid=25281 auid=4294967295 uid=1001 gid=1001 euid=1001 suid=1001 fsuid=1001 egid=1001 sgid=1001 fsgid=1001 ses=4294967295 tty=(none) comm="swift-object-au" exe="/usr/bin/python2.7" subj=system_u:system_r:swift_t:s0 key=(null) >type=AVC msg=audit(1389205685.677:9386): avc: denied { read } for pid=25281 comm="swift-object-au" name="objects" dev="loop1" ino=12 scontext=system_u:system_r:swift_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=dir >type=AVC msg=audit(1389205685.677:9386): avc: denied { open } for pid=25281 comm="swift-object-au" path="/srv/node/device1/objects" dev="loop1" ino=12 scontext=system_u:system_r:swift_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=dir >type=SYSCALL msg=audit(1389205685.677:9386): arch=c000003e syscall=257 success=yes exit=3 a0=ffffffffffffff9c a1=1b17950 a2=90800 a3=0 items=0 ppid=1 pid=25281 auid=4294967295 uid=1001 gid=1001 euid=1001 suid=1001 fsuid=1001 egid=1001 sgid=1001 fsgid=1001 ses=4294967295 tty=(none) comm="swift-object-au" exe="/usr/bin/python2.7" subj=system_u:system_r:swift_t:s0 key=(null) >type=USER_CMD msg=audit(1389205744.759:9387): pid=14754 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D43204C414E473D4320766773202D2D6E6F68656164696E6773202D2D756E69743D67202D6F206E616D652C73697A652C667265652C6C765F636F756E742C75756964202D2D736570617261746F72203A202D2D6E6F7375666669782063696E6465722D766F6C756D6573 terminal=? res=success' >type=USER_START msg=audit(1389205744.761:9388): pid=14754 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1389205744.802:9389): pid=14754 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=AVC msg=audit(1389205751.877:9390): avc: denied { getattr } for pid=25867 comm="swift-object-re" path="/srv/node/device1/objects" dev="loop1" ino=12 scontext=system_u:system_r:swift_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=dir >type=SYSCALL msg=audit(1389205751.877:9390): arch=c000003e syscall=4 success=yes exit=0 a0=2519d70 a1=7fff8e001400 a2=7fff8e001400 a3=0 items=0 ppid=1 pid=25867 auid=4294967295 uid=1001 gid=1001 euid=1001 suid=1001 fsuid=1001 egid=1001 sgid=1001 fsgid=1001 ses=4294967295 tty=(none) comm="swift-object-re" exe="/usr/bin/python2.7" subj=system_u:system_r:swift_t:s0 key=(null) >type=AVC msg=audit(1389205751.877:9391): avc: denied { read } for pid=25867 comm="swift-object-re" name="objects" dev="loop1" ino=12 scontext=system_u:system_r:swift_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=dir >type=AVC msg=audit(1389205751.877:9391): avc: denied { open } for pid=25867 comm="swift-object-re" path="/srv/node/device1/objects" dev="loop1" ino=12 scontext=system_u:system_r:swift_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=dir >type=SYSCALL msg=audit(1389205751.877:9391): arch=c000003e syscall=257 success=yes exit=3 a0=ffffffffffffff9c a1=2519d70 a2=90800 a3=0 items=0 ppid=1 pid=25867 auid=4294967295 uid=1001 gid=1001 euid=1001 suid=1001 fsuid=1001 egid=1001 sgid=1001 fsgid=1001 ses=4294967295 tty=(none) comm="swift-object-re" exe="/usr/bin/python2.7" subj=system_u:system_r:swift_t:s0 key=(null) >type=USER_CMD msg=audit(1389205804.822:9392): pid=14809 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D43204C414E473D4320766773202D2D6E6F68656164696E6773202D2D756E69743D67202D6F206E616D652C73697A652C667265652C6C765F636F756E742C75756964202D2D736570617261746F72203A202D2D6E6F7375666669782063696E6465722D766F6C756D6573 terminal=? res=success' >type=USER_START msg=audit(1389205804.823:9393): pid=14809 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1389205804.863:9394): pid=14809 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1389205864.883:9395): pid=14849 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D43204C414E473D4320766773202D2D6E6F68656164696E6773202D2D756E69743D67202D6F206E616D652C73697A652C667265652C6C765F636F756E742C75756964202D2D736570617261746F72203A202D2D6E6F7375666669782063696E6465722D766F6C756D6573 terminal=? res=success' >type=USER_START msg=audit(1389205864.884:9396): pid=14849 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1389205864.922:9397): pid=14849 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=AVC msg=audit(1389205865.856:9398): avc: denied { getattr } for pid=25325 comm="swift-object-au" path="/srv/node/device1" dev="loop1" ino=2 scontext=system_u:system_r:swift_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=dir >type=SYSCALL msg=audit(1389205865.856:9398): arch=c000003e syscall=6 success=yes exit=0 a0=191db90 a1=7fffb71158a0 a2=7fffb71158a0 a3=0 items=0 ppid=25281 pid=25325 auid=4294967295 uid=1001 gid=1001 euid=1001 suid=1001 fsuid=1001 egid=1001 sgid=1001 fsgid=1001 ses=4294967295 tty=(none) comm="swift-object-au" exe="/usr/bin/python2.7" subj=system_u:system_r:swift_t:s0 key=(null) >type=AVC msg=audit(1389205865.856:9399): avc: denied { read } for pid=25325 comm="swift-object-au" name="objects" dev="loop1" ino=12 scontext=system_u:system_r:swift_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=dir >type=AVC msg=audit(1389205865.856:9399): avc: denied { open } for pid=25325 comm="swift-object-au" path="/srv/node/device1/objects" dev="loop1" ino=12 scontext=system_u:system_r:swift_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=dir >type=SYSCALL msg=audit(1389205865.856:9399): arch=c000003e syscall=257 success=yes exit=3 a0=ffffffffffffff9c a1=1b6cb00 a2=90800 a3=0 items=0 ppid=25281 pid=25325 auid=4294967295 uid=1001 gid=1001 euid=1001 suid=1001 fsuid=1001 egid=1001 sgid=1001 fsgid=1001 ses=4294967295 tty=(none) comm="swift-object-au" exe="/usr/bin/python2.7" subj=system_u:system_r:swift_t:s0 key=(null) >type=USER_CMD msg=audit(1389205924.941:9400): pid=14908 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D43204C414E473D4320766773202D2D6E6F68656164696E6773202D2D756E69743D67202D6F206E616D652C73697A652C667265652C6C765F636F756E742C75756964202D2D736570617261746F72203A202D2D6E6F7375666669782063696E6465722D766F6C756D6573 terminal=? res=success' >type=USER_START msg=audit(1389205924.941:9401): pid=14908 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1389205924.978:9402): pid=14908 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1389205984.998:9403): pid=14948 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D43204C414E473D4320766773202D2D6E6F68656164696E6773202D2D756E69743D67202D6F206E616D652C73697A652C667265652C6C765F636F756E742C75756964202D2D736570617261746F72203A202D2D6E6F7375666669782063696E6465722D766F6C756D6573 terminal=? res=success' >type=USER_START msg=audit(1389205984.999:9404): pid=14948 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1389205985.036:9405): pid=14948 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=AVC msg=audit(1389206016.004:9406): avc: denied { getattr } for pid=25325 comm="swift-object-au" path="/srv/node/device1" dev="loop1" ino=2 scontext=system_u:system_r:swift_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=dir >type=SYSCALL msg=audit(1389206016.004:9406): arch=c000003e syscall=6 success=yes exit=0 a0=1975b30 a1=7fffb71158a0 a2=7fffb71158a0 a3=0 items=0 ppid=25281 pid=25325 auid=4294967295 uid=1001 gid=1001 euid=1001 suid=1001 fsuid=1001 egid=1001 sgid=1001 fsgid=1001 ses=4294967295 tty=(none) comm="swift-object-au" exe="/usr/bin/python2.7" subj=system_u:system_r:swift_t:s0 key=(null) >type=AVC msg=audit(1389206016.004:9407): avc: denied { read } for pid=25325 comm="swift-object-au" name="objects" dev="loop1" ino=12 scontext=system_u:system_r:swift_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=dir >type=AVC msg=audit(1389206016.004:9407): avc: denied { open } for pid=25325 comm="swift-object-au" path="/srv/node/device1/objects" dev="loop1" ino=12 scontext=system_u:system_r:swift_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=dir >type=SYSCALL msg=audit(1389206016.004:9407): arch=c000003e syscall=257 success=yes exit=3 a0=ffffffffffffff9c a1=1b6cb00 a2=90800 a3=0 items=0 ppid=25281 pid=25325 auid=4294967295 uid=1001 gid=1001 euid=1001 suid=1001 fsuid=1001 egid=1001 sgid=1001 fsgid=1001 ses=4294967295 tty=(none) comm="swift-object-au" exe="/usr/bin/python2.7" subj=system_u:system_r:swift_t:s0 key=(null) >type=USER_CMD msg=audit(1389206045.053:9408): pid=14993 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D43204C414E473D4320766773202D2D6E6F68656164696E6773202D2D756E69743D67202D6F206E616D652C73697A652C667265652C6C765F636F756E742C75756964202D2D736570617261746F72203A202D2D6E6F7375666669782063696E6465722D766F6C756D6573 terminal=? res=success' >type=USER_START msg=audit(1389206045.053:9409): pid=14993 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1389206045.091:9410): pid=14993 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1389206105.111:9411): pid=15039 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D43204C414E473D4320766773202D2D6E6F68656164696E6773202D2D756E69743D67202D6F206E616D652C73697A652C667265652C6C765F636F756E742C75756964202D2D736570617261746F72203A202D2D6E6F7375666669782063696E6465722D766F6C756D6573 terminal=? res=success' >type=USER_START msg=audit(1389206105.112:9412): pid=15039 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1389206105.150:9413): pid=15039 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=AVC msg=audit(1389206106.102:9414): avc: denied { getattr } for pid=25325 comm="swift-object-au" path="/srv/node/device1" dev="loop1" ino=2 scontext=system_u:system_r:swift_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=dir >type=SYSCALL msg=audit(1389206106.102:9414): arch=c000003e syscall=6 success=yes exit=0 a0=191db90 a1=7fffb71158a0 a2=7fffb71158a0 a3=0 items=0 ppid=25281 pid=25325 auid=4294967295 uid=1001 gid=1001 euid=1001 suid=1001 fsuid=1001 egid=1001 sgid=1001 fsgid=1001 ses=4294967295 tty=(none) comm="swift-object-au" exe="/usr/bin/python2.7" subj=system_u:system_r:swift_t:s0 key=(null) >type=AVC msg=audit(1389206106.102:9415): avc: denied { read } for pid=25325 comm="swift-object-au" name="objects" dev="loop1" ino=12 scontext=system_u:system_r:swift_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=dir >type=AVC msg=audit(1389206106.102:9415): avc: denied { open } for pid=25325 comm="swift-object-au" path="/srv/node/device1/objects" dev="loop1" ino=12 scontext=system_u:system_r:swift_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=dir >type=SYSCALL msg=audit(1389206106.102:9415): arch=c000003e syscall=257 success=yes exit=3 a0=ffffffffffffff9c a1=1b6cb00 a2=90800 a3=0 items=0 ppid=25281 pid=25325 auid=4294967295 uid=1001 gid=1001 euid=1001 suid=1001 fsuid=1001 egid=1001 sgid=1001 fsgid=1001 ses=4294967295 tty=(none) comm="swift-object-au" exe="/usr/bin/python2.7" subj=system_u:system_r:swift_t:s0 key=(null) >type=USER_CMD msg=audit(1389206165.166:9416): pid=15079 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D43204C414E473D4320766773202D2D6E6F68656164696E6773202D2D756E69743D67202D6F206E616D652C73697A652C667265652C6C765F636F756E742C75756964202D2D736570617261746F72203A202D2D6E6F7375666669782063696E6465722D766F6C756D6573 terminal=? res=success' >type=USER_START msg=audit(1389206165.167:9417): pid=15079 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1389206165.206:9418): pid=15079 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1389206225.224:9419): pid=15139 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D43204C414E473D4320766773202D2D6E6F68656164696E6773202D2D756E69743D67202D6F206E616D652C73697A652C667265652C6C765F636F756E742C75756964202D2D736570617261746F72203A202D2D6E6F7375666669782063696E6465722D766F6C756D6573 terminal=? res=success' >type=USER_START msg=audit(1389206225.226:9420): pid=15139 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1389206225.264:9421): pid=15139 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=AVC msg=audit(1389206256.252:9422): avc: denied { getattr } for pid=25281 comm="swift-object-au" path="/srv/node/device1" dev="loop1" ino=2 scontext=system_u:system_r:swift_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=dir >type=SYSCALL msg=audit(1389206256.252:9422): arch=c000003e syscall=6 success=yes exit=0 a0=1975b30 a1=7fffb71158a0 a2=7fffb71158a0 a3=0 items=0 ppid=1 pid=25281 auid=4294967295 uid=1001 gid=1001 euid=1001 suid=1001 fsuid=1001 egid=1001 sgid=1001 fsgid=1001 ses=4294967295 tty=(none) comm="swift-object-au" exe="/usr/bin/python2.7" subj=system_u:system_r:swift_t:s0 key=(null) >type=AVC msg=audit(1389206256.252:9423): avc: denied { read } for pid=25281 comm="swift-object-au" name="objects" dev="loop1" ino=12 scontext=system_u:system_r:swift_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=dir >type=AVC msg=audit(1389206256.252:9423): avc: denied { open } for pid=25281 comm="swift-object-au" path="/srv/node/device1/objects" dev="loop1" ino=12 scontext=system_u:system_r:swift_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=dir >type=SYSCALL msg=audit(1389206256.252:9423): arch=c000003e syscall=257 success=yes exit=3 a0=ffffffffffffff9c a1=19a45a0 a2=90800 a3=0 items=0 ppid=1 pid=25281 auid=4294967295 uid=1001 gid=1001 euid=1001 suid=1001 fsuid=1001 egid=1001 sgid=1001 fsgid=1001 ses=4294967295 tty=(none) comm="swift-object-au" exe="/usr/bin/python2.7" subj=system_u:system_r:swift_t:s0 key=(null) >type=USER_CMD msg=audit(1389206285.280:9424): pid=15192 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D43204C414E473D4320766773202D2D6E6F68656164696E6773202D2D756E69743D67202D6F206E616D652C73697A652C667265652C6C765F636F756E742C75756964202D2D736570617261746F72203A202D2D6E6F7375666669782063696E6465722D766F6C756D6573 terminal=? res=success' >type=USER_START msg=audit(1389206285.280:9425): pid=15192 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1389206285.318:9426): pid=15192 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1389206345.335:9427): pid=15237 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D43204C414E473D4320766773202D2D6E6F68656164696E6773202D2D756E69743D67202D6F206E616D652C73697A652C667265652C6C765F636F756E742C75756964202D2D736570617261746F72203A202D2D6E6F7375666669782063696E6465722D766F6C756D6573 terminal=? res=success' >type=USER_START msg=audit(1389206345.338:9428): pid=15237 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1389206345.379:9429): pid=15237 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=AVC msg=audit(1389206346.341:9430): avc: denied { getattr } for pid=25281 comm="swift-object-au" path="/srv/node/device1" dev="loop1" ino=2 scontext=system_u:system_r:swift_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=dir >type=SYSCALL msg=audit(1389206346.341:9430): arch=c000003e syscall=6 success=yes exit=0 a0=191db90 a1=7fffb71158a0 a2=7fffb71158a0 a3=0 items=0 ppid=1 pid=25281 auid=4294967295 uid=1001 gid=1001 euid=1001 suid=1001 fsuid=1001 egid=1001 sgid=1001 fsgid=1001 ses=4294967295 tty=(none) comm="swift-object-au" exe="/usr/bin/python2.7" subj=system_u:system_r:swift_t:s0 key=(null) >type=AVC msg=audit(1389206346.341:9431): avc: denied { read } for pid=25281 comm="swift-object-au" name="objects" dev="loop1" ino=12 scontext=system_u:system_r:swift_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=dir >type=AVC msg=audit(1389206346.341:9431): avc: denied { open } for pid=25281 comm="swift-object-au" path="/srv/node/device1/objects" dev="loop1" ino=12 scontext=system_u:system_r:swift_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=dir >type=SYSCALL msg=audit(1389206346.341:9431): arch=c000003e syscall=257 success=yes exit=3 a0=ffffffffffffff9c a1=1a22ed0 a2=90800 a3=0 items=0 ppid=1 pid=25281 auid=4294967295 uid=1001 gid=1001 euid=1001 suid=1001 fsuid=1001 egid=1001 sgid=1001 fsgid=1001 ses=4294967295 tty=(none) comm="swift-object-au" exe="/usr/bin/python2.7" subj=system_u:system_r:swift_t:s0 key=(null) >type=USER_CMD msg=audit(1389206405.398:9432): pid=15303 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D43204C414E473D4320766773202D2D6E6F68656164696E6773202D2D756E69743D67202D6F206E616D652C73697A652C667265652C6C765F636F756E742C75756964202D2D736570617261746F72203A202D2D6E6F7375666669782063696E6465722D766F6C756D6573 terminal=? res=success' >type=USER_START msg=audit(1389206405.399:9433): pid=15303 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1389206405.439:9434): pid=15303 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=AVC msg=audit(1389206420.152:9435): avc: denied { getattr } for pid=25459 comm="swift-object-up" path="/srv/node/device1" dev="loop1" ino=2 scontext=system_u:system_r:swift_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=dir >type=SYSCALL msg=audit(1389206420.152:9435): arch=c000003e syscall=6 success=yes exit=0 a0=1196d90 a1=7fff82c289f0 a2=7fff82c289f0 a3=3 items=0 ppid=1 pid=25459 auid=4294967295 uid=1001 gid=1001 euid=1001 suid=1001 fsuid=1001 egid=1001 sgid=1001 fsgid=1001 ses=4294967295 tty=(none) comm="swift-object-up" exe="/usr/bin/python2.7" subj=system_u:system_r:swift_t:s0 key=(null) >type=AVC msg=audit(1389206436.424:9436): avc: denied { read } for pid=25281 comm="swift-object-au" name="objects" dev="loop1" ino=12 scontext=system_u:system_r:swift_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=dir >type=AVC msg=audit(1389206436.424:9436): avc: denied { open } for pid=25281 comm="swift-object-au" path="/srv/node/device1/objects" dev="loop1" ino=12 scontext=system_u:system_r:swift_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=dir >type=SYSCALL msg=audit(1389206436.424:9436): arch=c000003e syscall=257 success=yes exit=3 a0=ffffffffffffff9c a1=1a3b860 a2=90800 a3=0 items=0 ppid=1 pid=25281 auid=4294967295 uid=1001 gid=1001 euid=1001 suid=1001 fsuid=1001 egid=1001 sgid=1001 fsgid=1001 ses=4294967295 tty=(none) comm="swift-object-au" exe="/usr/bin/python2.7" subj=system_u:system_r:swift_t:s0 key=(null) >type=USER_CMD msg=audit(1389206465.455:9437): pid=15362 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D43204C414E473D4320766773202D2D6E6F68656164696E6773202D2D756E69743D67202D6F206E616D652C73697A652C667265652C6C765F636F756E742C75756964202D2D736570617261746F72203A202D2D6E6F7375666669782063696E6465722D766F6C756D6573 terminal=? res=success' >type=USER_START msg=audit(1389206465.455:9438): pid=15362 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1389206465.495:9439): pid=15362 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1389206525.513:9440): pid=15405 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D43204C414E473D4320766773202D2D6E6F68656164696E6773202D2D756E69743D67202D6F206E616D652C73697A652C667265652C6C765F636F756E742C75756964202D2D736570617261746F72203A202D2D6E6F7375666669782063696E6465722D766F6C756D6573 terminal=? res=success' >type=USER_START msg=audit(1389206525.514:9441): pid=15405 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1389206525.557:9442): pid=15405 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=AVC msg=audit(1389206556.544:9443): avc: denied { getattr } for pid=25281 comm="swift-object-au" path="/srv/node/device1" dev="loop1" ino=2 scontext=system_u:system_r:swift_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=dir >type=SYSCALL msg=audit(1389206556.544:9443): arch=c000003e syscall=6 success=yes exit=0 a0=1975b30 a1=7fffb71158a0 a2=7fffb71158a0 a3=0 items=0 ppid=1 pid=25281 auid=4294967295 uid=1001 gid=1001 euid=1001 suid=1001 fsuid=1001 egid=1001 sgid=1001 fsgid=1001 ses=4294967295 tty=(none) comm="swift-object-au" exe="/usr/bin/python2.7" subj=system_u:system_r:swift_t:s0 key=(null) >type=AVC msg=audit(1389206556.544:9444): avc: denied { read } for pid=25281 comm="swift-object-au" name="objects" dev="loop1" ino=12 scontext=system_u:system_r:swift_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=dir >type=AVC msg=audit(1389206556.544:9444): avc: denied { open } for pid=25281 comm="swift-object-au" path="/srv/node/device1/objects" dev="loop1" ino=12 scontext=system_u:system_r:swift_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=dir >type=SYSCALL msg=audit(1389206556.544:9444): arch=c000003e syscall=257 success=yes exit=3 a0=ffffffffffffff9c a1=1aff190 a2=90800 a3=0 items=0 ppid=1 pid=25281 auid=4294967295 uid=1001 gid=1001 euid=1001 suid=1001 fsuid=1001 egid=1001 sgid=1001 fsgid=1001 ses=4294967295 tty=(none) comm="swift-object-au" exe="/usr/bin/python2.7" subj=system_u:system_r:swift_t:s0 key=(null) >type=USER_CMD msg=audit(1389206585.575:9445): pid=15446 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D43204C414E473D4320766773202D2D6E6F68656164696E6773202D2D756E69743D67202D6F206E616D652C73697A652C667265652C6C765F636F756E742C75756964202D2D736570617261746F72203A202D2D6E6F7375666669782063696E6465722D766F6C756D6573 terminal=? res=success' >type=USER_START msg=audit(1389206585.576:9446): pid=15446 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1389206585.620:9447): pid=15446 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1389206645.638:9448): pid=15488 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D43204C414E473D4320766773202D2D6E6F68656164696E6773202D2D756E69743D67202D6F206E616D652C73697A652C667265652C6C765F636F756E742C75756964202D2D736570617261746F72203A202D2D6E6F7375666669782063696E6465722D766F6C756D6573 terminal=? res=success' >type=USER_START msg=audit(1389206645.639:9449): pid=15488 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1389206645.680:9450): pid=15488 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=AVC msg=audit(1389206646.633:9451): avc: denied { getattr } for pid=25281 comm="swift-object-au" path="/srv/node/device1" dev="loop1" ino=2 scontext=system_u:system_r:swift_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=dir >type=SYSCALL msg=audit(1389206646.633:9451): arch=c000003e syscall=6 success=yes exit=0 a0=191db90 a1=7fffb71158a0 a2=7fffb71158a0 a3=0 items=0 ppid=1 pid=25281 auid=4294967295 uid=1001 gid=1001 euid=1001 suid=1001 fsuid=1001 egid=1001 sgid=1001 fsgid=1001 ses=4294967295 tty=(none) comm="swift-object-au" exe="/usr/bin/python2.7" subj=system_u:system_r:swift_t:s0 key=(null) >type=AVC msg=audit(1389206646.633:9452): avc: denied { read } for pid=25281 comm="swift-object-au" name="objects" dev="loop1" ino=12 scontext=system_u:system_r:swift_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=dir >type=AVC msg=audit(1389206646.633:9452): avc: denied { open } for pid=25281 comm="swift-object-au" path="/srv/node/device1/objects" dev="loop1" ino=12 scontext=system_u:system_r:swift_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=dir >type=SYSCALL msg=audit(1389206646.633:9452): arch=c000003e syscall=257 success=yes exit=3 a0=ffffffffffffff9c a1=1b14860 a2=90800 a3=0 items=0 ppid=1 pid=25281 auid=4294967295 uid=1001 gid=1001 euid=1001 suid=1001 fsuid=1001 egid=1001 sgid=1001 fsgid=1001 ses=4294967295 tty=(none) comm="swift-object-au" exe="/usr/bin/python2.7" subj=system_u:system_r:swift_t:s0 key=(null) >type=USER_CMD msg=audit(1389206705.701:9453): pid=15555 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D43204C414E473D4320766773202D2D6E6F68656164696E6773202D2D756E69743D67202D6F206E616D652C73697A652C667265652C6C765F636F756E742C75756964202D2D736570617261746F72203A202D2D6E6F7375666669782063696E6465722D766F6C756D6573 terminal=? res=success' >type=USER_START msg=audit(1389206705.702:9454): pid=15555 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1389206705.747:9455): pid=15555 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=AVC msg=audit(1389206706.693:9456): avc: denied { getattr } for pid=25281 comm="swift-object-au" path="/srv/node/device1" dev="loop1" ino=2 scontext=system_u:system_r:swift_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=dir >type=SYSCALL msg=audit(1389206706.693:9456): arch=c000003e syscall=6 success=yes exit=0 a0=191db90 a1=7fffb71158a0 a2=7fffb71158a0 a3=0 items=0 ppid=1 pid=25281 auid=4294967295 uid=1001 gid=1001 euid=1001 suid=1001 fsuid=1001 egid=1001 sgid=1001 fsgid=1001 ses=4294967295 tty=(none) comm="swift-object-au" exe="/usr/bin/python2.7" subj=system_u:system_r:swift_t:s0 key=(null) >type=AVC msg=audit(1389206706.693:9457): avc: denied { read } for pid=25281 comm="swift-object-au" name="objects" dev="loop1" ino=12 scontext=system_u:system_r:swift_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=dir >type=AVC msg=audit(1389206706.693:9457): avc: denied { open } for pid=25281 comm="swift-object-au" path="/srv/node/device1/objects" dev="loop1" ino=12 scontext=system_u:system_r:swift_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=dir >type=SYSCALL msg=audit(1389206706.693:9457): arch=c000003e syscall=257 success=yes exit=3 a0=ffffffffffffff9c a1=1afff30 a2=90800 a3=0 items=0 ppid=1 pid=25281 auid=4294967295 uid=1001 gid=1001 euid=1001 suid=1001 fsuid=1001 egid=1001 sgid=1001 fsgid=1001 ses=4294967295 tty=(none) comm="swift-object-au" exe="/usr/bin/python2.7" subj=system_u:system_r:swift_t:s0 key=(null) >type=USER_CMD msg=audit(1389206765.768:9458): pid=15633 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D43204C414E473D4320766773202D2D6E6F68656164696E6773202D2D756E69743D67202D6F206E616D652C73697A652C667265652C6C765F636F756E742C75756964202D2D736570617261746F72203A202D2D6E6F7375666669782063696E6465722D766F6C756D6573 terminal=? res=success' >type=USER_START msg=audit(1389206765.770:9459): pid=15633 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1389206765.814:9460): pid=15633 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=AVC msg=audit(1389206766.753:9461): avc: denied { getattr } for pid=25281 comm="swift-object-au" path="/srv/node/device1" dev="loop1" ino=2 scontext=system_u:system_r:swift_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=dir >type=SYSCALL msg=audit(1389206766.753:9461): arch=c000003e syscall=6 success=yes exit=0 a0=191db90 a1=7fffb71158a0 a2=7fffb71158a0 a3=0 items=0 ppid=1 pid=25281 auid=4294967295 uid=1001 gid=1001 euid=1001 suid=1001 fsuid=1001 egid=1001 sgid=1001 fsgid=1001 ses=4294967295 tty=(none) comm="swift-object-au" exe="/usr/bin/python2.7" subj=system_u:system_r:swift_t:s0 key=(null) >type=AVC msg=audit(1389206766.753:9462): avc: denied { read } for pid=25281 comm="swift-object-au" name="objects" dev="loop1" ino=12 scontext=system_u:system_r:swift_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=dir >type=AVC msg=audit(1389206766.753:9462): avc: denied { open } for pid=25281 comm="swift-object-au" path="/srv/node/device1/objects" dev="loop1" ino=12 scontext=system_u:system_r:swift_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=dir >type=SYSCALL msg=audit(1389206766.753:9462): arch=c000003e syscall=257 success=yes exit=3 a0=ffffffffffffff9c a1=199d410 a2=90800 a3=0 items=0 ppid=1 pid=25281 auid=4294967295 uid=1001 gid=1001 euid=1001 suid=1001 fsuid=1001 egid=1001 sgid=1001 fsgid=1001 ses=4294967295 tty=(none) comm="swift-object-au" exe="/usr/bin/python2.7" subj=system_u:system_r:swift_t:s0 key=(null) >type=USER_CMD msg=audit(1389206825.832:9463): pid=15675 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D43204C414E473D4320766773202D2D6E6F68656164696E6773202D2D756E69743D67202D6F206E616D652C73697A652C667265652C6C765F636F756E742C75756964202D2D736570617261746F72203A202D2D6E6F7375666669782063696E6465722D766F6C756D6573 terminal=? res=success' >type=USER_START msg=audit(1389206825.835:9464): pid=15675 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1389206825.875:9465): pid=15675 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1389206876.546:9466): pid=717 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_LOGOUT msg=audit(1389206876.546:9467): pid=717 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_END msg=audit(1389206876.555:9468): pid=717 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=192.168.200.1 addr=192.168.200.1 terminal=ssh res=success' >type=CRED_DISP msg=audit(1389206876.555:9469): pid=717 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=192.168.200.1 addr=192.168.200.1 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389206876.560:9470): pid=717 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=717 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.200.1 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389206876.560:9471): pid=717 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=717 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.200.1 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389206876.560:9472): pid=717 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=717 suid=0 rport=47033 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.200.1 terminal=? res=success' >type=USER_CMD msg=audit(1389206885.891:9473): pid=15735 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D43204C414E473D4320766773202D2D6E6F68656164696E6773202D2D756E69743D67202D6F206E616D652C73697A652C667265652C6C765F636F756E742C75756964202D2D736570617261746F72203A202D2D6E6F7375666669782063696E6465722D766F6C756D6573 terminal=? res=success' >type=USER_START msg=audit(1389206885.893:9474): pid=15735 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1389206885.935:9475): pid=15735 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389206886.154:9476): pid=15740 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=15740 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.200.1 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389206886.154:9477): pid=15740 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=15740 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.200.1 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389206886.155:9478): pid=15739 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=15740 suid=74 rport=49265 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=192.168.200.1 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1389206886.155:9479): pid=15739 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=15740 suid=74 rport=49265 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=192.168.200.1 terminal=? res=success' >type=USER_AUTH msg=audit(1389206886.694:9480): pid=15739 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=49265 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.200.1 terminal=? res=success' >type=USER_AUTH msg=audit(1389206886.694:9481): pid=15739 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=4096 fp=8b:56:b0:3f:c8:ad:38:a6:94:f4:a7:26:83:75:cc:85 rport=49265 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.200.1 terminal=? res=success' >type=USER_ACCT msg=audit(1389206886.697:9482): pid=15739 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=192.168.200.1 addr=192.168.200.1 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389206886.697:9483): pid=15739 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=15740 suid=74 rport=49265 laddr=192.168.40.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.200.1 terminal=? res=success' >type=USER_AUTH msg=audit(1389206886.699:9484): pid=15739 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.200.1 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1389206886.699:9485): pid=15739 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=192.168.200.1 addr=192.168.200.1 terminal=ssh res=success' >type=LOGIN msg=audit(1389206886.699:9486): login pid=15739 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=348 >type=USER_ROLE_CHANGE msg=audit(1389206886.747:9487): pid=15739 uid=0 auid=0 ses=348 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.200.1 addr=192.168.200.1 terminal=ssh res=success' >type=USER_START msg=audit(1389206886.763:9488): pid=15739 uid=0 auid=0 ses=348 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=192.168.200.1 addr=192.168.200.1 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1389206886.766:9489): pid=15739 uid=0 auid=0 ses=348 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=192.168.200.1 addr=192.168.200.1 terminal=ssh res=success' >type=USER_START msg=audit(1389206886.767:9490): pid=15739 uid=0 auid=0 ses=348 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=192.168.200.1 addr=192.168.200.1 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1389206886.768:9491): pid=15742 uid=0 auid=0 ses=348 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=74:a5:b0:98:a1:47:08:d7:ce:d4:c7:b2:71:b4:b8:0c direction=? spid=15742 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.200.1 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1389206886.768:9492): pid=15742 uid=0 auid=0 ses=348 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e1:02:41:b5:b2:5f:95:63:f6:61:da:c7:09:cd:2e:1a direction=? spid=15742 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.200.1 terminal=? res=success' >type=CRED_REFR msg=audit(1389206886.768:9493): pid=15742 uid=0 auid=0 ses=348 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=192.168.200.1 addr=192.168.200.1 terminal=ssh res=success'
<b>You cannot view the attachment while viewing its details because your browser does not support IFRAMEs. <a href="attachment.cgi?id=847302">View the attachment on a separate page</a>.</b>
View Attachment As Raw
Actions:
View
Attachments on
bug 1049817
: 847302