Attachment 890967 Details for Bug 1071674 – audit.log

audit.log

keystone.log.perm-audit.log (text/x-log), 1.35 MB, created by Pavel Sedlák on 2014-04-29 23:05:50 UTC

(hide)

Description:

Filename:

MIME Type:

Creator: Pavel Sedlák

Created: 2014-04-29 23:05:50 UTC

Size: 1.35 MB

patch

obsolete

>type=DAEMON_START msg=audit(1398700620.399:4063): auditd start, ver=2.2 format=raw kernel=2.6.32-431.el6.x86_64 auid=4294967295 pid=945 subj=system_u:system_r:auditd_t:s0 res=success
>type=CONFIG_CHANGE msg=audit(1398700620.510:4): audit_backlog_limit=320 old=64 auid=4294967295 ses=4294967295 subj=system_u:system_r:auditctl_t:s0 res=1
>type=CRYPTO_KEY_USER msg=audit(1398700631.387:5): user pid=4418 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=4418 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700631.387:6): user pid=4418 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=4418 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700631.389:7): user pid=4420 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=4420 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700631.389:8): user pid=4420 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=4420 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=CRYPTO_SESSION msg=audit(1398700631.390:9): user pid=4419 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 spid=4420 suid=74 rport=38102 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=CRYPTO_SESSION msg=audit(1398700631.390:10): user pid=4419 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 spid=4420 suid=74 rport=38102 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=USER_AUTH msg=audit(1398700631.584:11): user pid=4419 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=38102 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=USER_AUTH msg=audit(1398700631.584:12): user pid=4419 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=e7:e2:3d:94:48:cf:f5:8c:5e:54:98:bd:89:a5:29:a9 rport=38102 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=USER_ACCT msg=audit(1398700631.598:13): user pid=4419 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700631.598:14): user pid=4419 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=4420 suid=74 rport=38102 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=USER_AUTH msg=audit(1398700631.599:15): user pid=4419 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=ssh res=success'
>type=CRED_ACQ msg=audit(1398700631.600:16): user pid=4419 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=LOGIN msg=audit(1398700631.600:17): pid=4419 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=1
>type=USER_ROLE_CHANGE msg=audit(1398700631.731:18): user pid=4419 uid=0 auid=0 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=USER_START msg=audit(1398700631.752:19): user pid=4419 uid=0 auid=0 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=USER_LOGIN msg=audit(1398700631.764:20): user pid=4419 uid=0 auid=0 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=USER_START msg=audit(1398700631.764:21): user pid=4419 uid=0 auid=0 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700631.765:22): user pid=4429 uid=0 auid=0 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=4429 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700631.765:23): user pid=4429 uid=0 auid=0 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=4429 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=CRED_REFR msg=audit(1398700631.766:24): user pid=4429 uid=0 auid=0 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=USER_END msg=audit(1398700631.868:25): user pid=4419 uid=0 auid=0 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=USER_LOGOUT msg=audit(1398700631.868:26): user pid=4419 uid=0 auid=0 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=USER_END msg=audit(1398700631.971:27): user pid=4419 uid=0 auid=0 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=CRED_DISP msg=audit(1398700631.972:28): user pid=4419 uid=0 auid=0 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700631.972:29): user pid=4419 uid=0 auid=0 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=4419 suid=0 rport=38102 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700631.972:30): user pid=4419 uid=0 auid=0 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=4419 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700631.973:31): user pid=4419 uid=0 auid=0 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=4419 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700631.979:32): user pid=4448 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=4448 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700631.980:33): user pid=4448 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=4448 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=CRYPTO_SESSION msg=audit(1398700631.980:34): user pid=4447 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 spid=4448 suid=74 rport=38103 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=CRYPTO_SESSION msg=audit(1398700631.980:35): user pid=4447 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 spid=4448 suid=74 rport=38103 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=USER_AUTH msg=audit(1398700632.172:36): user pid=4447 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=38103 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=USER_AUTH msg=audit(1398700632.172:37): user pid=4447 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=e7:e2:3d:94:48:cf:f5:8c:5e:54:98:bd:89:a5:29:a9 rport=38103 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=USER_ACCT msg=audit(1398700632.180:38): user pid=4447 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700632.180:39): user pid=4447 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=4448 suid=74 rport=38103 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=USER_AUTH msg=audit(1398700632.181:40): user pid=4447 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=ssh res=success'
>type=CRED_ACQ msg=audit(1398700632.181:41): user pid=4447 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=LOGIN msg=audit(1398700632.181:42): pid=4447 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=2
>type=USER_ROLE_CHANGE msg=audit(1398700632.311:43): user pid=4447 uid=0 auid=0 ses=2 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=USER_START msg=audit(1398700632.315:44): user pid=4447 uid=0 auid=0 ses=2 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=USER_LOGIN msg=audit(1398700632.319:45): user pid=4447 uid=0 auid=0 ses=2 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=USER_START msg=audit(1398700632.319:46): user pid=4447 uid=0 auid=0 ses=2 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700632.320:47): user pid=4486 uid=0 auid=0 ses=2 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=4486 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700632.321:48): user pid=4486 uid=0 auid=0 ses=2 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=4486 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=CRED_REFR msg=audit(1398700632.322:49): user pid=4486 uid=0 auid=0 ses=2 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=USER_END msg=audit(1398700632.377:50): user pid=4447 uid=0 auid=0 ses=2 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=USER_LOGOUT msg=audit(1398700632.377:51): user pid=4447 uid=0 auid=0 ses=2 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=USER_END msg=audit(1398700632.483:52): user pid=4447 uid=0 auid=0 ses=2 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=CRED_DISP msg=audit(1398700632.486:53): user pid=4447 uid=0 auid=0 ses=2 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700632.486:54): user pid=4447 uid=0 auid=0 ses=2 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=4447 suid=0 rport=38103 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700632.486:55): user pid=4447 uid=0 auid=0 ses=2 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=4447 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700632.486:56): user pid=4447 uid=0 auid=0 ses=2 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=4447 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700632.492:57): user pid=4533 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=4533 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700632.493:58): user pid=4533 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=4533 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=CRYPTO_SESSION msg=audit(1398700632.499:59): user pid=4530 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 spid=4533 suid=74 rport=38104 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=CRYPTO_SESSION msg=audit(1398700632.499:60): user pid=4530 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 spid=4533 suid=74 rport=38104 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=USER_AUTH msg=audit(1398700632.696:61): user pid=4530 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=38104 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=USER_AUTH msg=audit(1398700632.696:62): user pid=4530 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=e7:e2:3d:94:48:cf:f5:8c:5e:54:98:bd:89:a5:29:a9 rport=38104 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=USER_ACCT msg=audit(1398700632.706:63): user pid=4530 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700632.708:64): user pid=4530 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=4533 suid=74 rport=38104 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=USER_AUTH msg=audit(1398700632.709:65): user pid=4530 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=ssh res=success'
>type=CRED_ACQ msg=audit(1398700632.710:66): user pid=4530 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=LOGIN msg=audit(1398700632.710:67): pid=4530 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=3
>type=USER_ROLE_CHANGE msg=audit(1398700632.886:68): user pid=4530 uid=0 auid=0 ses=3 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=USER_START msg=audit(1398700632.889:69): user pid=4530 uid=0 auid=0 ses=3 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=USER_LOGIN msg=audit(1398700632.902:70): user pid=4530 uid=0 auid=0 ses=3 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=USER_START msg=audit(1398700632.903:71): user pid=4530 uid=0 auid=0 ses=3 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700632.911:72): user pid=4571 uid=0 auid=0 ses=3 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=4571 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700632.911:73): user pid=4571 uid=0 auid=0 ses=3 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=4571 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=CRED_REFR msg=audit(1398700632.917:74): user pid=4571 uid=0 auid=0 ses=3 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=USER_END msg=audit(1398700632.975:75): user pid=4530 uid=0 auid=0 ses=3 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=USER_LOGOUT msg=audit(1398700632.975:76): user pid=4530 uid=0 auid=0 ses=3 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=USER_END msg=audit(1398700633.093:77): user pid=4530 uid=0 auid=0 ses=3 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=CRED_DISP msg=audit(1398700633.094:78): user pid=4530 uid=0 auid=0 ses=3 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700633.094:79): user pid=4530 uid=0 auid=0 ses=3 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=4530 suid=0 rport=38104 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700633.094:80): user pid=4530 uid=0 auid=0 ses=3 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=4530 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700633.094:81): user pid=4530 uid=0 auid=0 ses=3 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=4530 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700633.122:82): user pid=4591 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=4591 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700633.122:83): user pid=4591 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=4591 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=CRYPTO_SESSION msg=audit(1398700633.124:84): user pid=4587 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 spid=4591 suid=74 rport=38105 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=CRYPTO_SESSION msg=audit(1398700633.124:85): user pid=4587 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 spid=4591 suid=74 rport=38105 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=USER_AUTH msg=audit(1398700633.351:86): user pid=4587 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=38105 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=USER_AUTH msg=audit(1398700633.359:87): user pid=4587 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=e7:e2:3d:94:48:cf:f5:8c:5e:54:98:bd:89:a5:29:a9 rport=38105 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=USER_ACCT msg=audit(1398700633.382:88): user pid=4587 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700633.387:89): user pid=4587 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=4591 suid=74 rport=38105 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=USER_AUTH msg=audit(1398700633.388:90): user pid=4587 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=ssh res=success'
>type=CRED_ACQ msg=audit(1398700633.390:91): user pid=4587 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=LOGIN msg=audit(1398700633.390:92): pid=4587 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=4
>type=USER_ROLE_CHANGE msg=audit(1398700633.527:93): user pid=4587 uid=0 auid=0 ses=4 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=USER_START msg=audit(1398700633.530:94): user pid=4587 uid=0 auid=0 ses=4 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=USER_LOGIN msg=audit(1398700633.562:95): user pid=4587 uid=0 auid=0 ses=4 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=USER_START msg=audit(1398700633.562:96): user pid=4587 uid=0 auid=0 ses=4 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700633.568:97): user pid=4608 uid=0 auid=0 ses=4 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=4608 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700633.568:98): user pid=4608 uid=0 auid=0 ses=4 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=4608 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=CRED_REFR msg=audit(1398700633.574:99): user pid=4608 uid=0 auid=0 ses=4 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=USER_END msg=audit(1398700634.336:100): user pid=4587 uid=0 auid=0 ses=4 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=USER_LOGOUT msg=audit(1398700634.337:101): user pid=4587 uid=0 auid=0 ses=4 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=USER_END msg=audit(1398700634.431:102): user pid=4587 uid=0 auid=0 ses=4 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=CRED_DISP msg=audit(1398700634.432:103): user pid=4587 uid=0 auid=0 ses=4 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700634.432:104): user pid=4587 uid=0 auid=0 ses=4 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=4587 suid=0 rport=38105 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700634.432:105): user pid=4587 uid=0 auid=0 ses=4 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=4587 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700634.434:106): user pid=4587 uid=0 auid=0 ses=4 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=4587 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700634.436:107): user pid=4640 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=4640 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700634.437:108): user pid=4640 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=4640 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=CRYPTO_SESSION msg=audit(1398700634.437:109): user pid=4639 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 spid=4640 suid=74 rport=38106 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=CRYPTO_SESSION msg=audit(1398700634.438:110): user pid=4639 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 spid=4640 suid=74 rport=38106 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=USER_AUTH msg=audit(1398700634.639:111): user pid=4639 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=38106 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=USER_AUTH msg=audit(1398700634.639:112): user pid=4639 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=e7:e2:3d:94:48:cf:f5:8c:5e:54:98:bd:89:a5:29:a9 rport=38106 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=USER_ACCT msg=audit(1398700634.653:113): user pid=4639 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700634.654:114): user pid=4639 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=4640 suid=74 rport=38106 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=USER_AUTH msg=audit(1398700634.655:115): user pid=4639 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=ssh res=success'
>type=CRED_ACQ msg=audit(1398700634.656:116): user pid=4639 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=LOGIN msg=audit(1398700634.656:117): pid=4639 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=5
>type=USER_ROLE_CHANGE msg=audit(1398700634.876:118): user pid=4639 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=USER_START msg=audit(1398700634.888:119): user pid=4639 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=USER_LOGIN msg=audit(1398700634.896:120): user pid=4639 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=USER_START msg=audit(1398700634.896:121): user pid=4639 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700634.898:122): user pid=4642 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=4642 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700634.898:123): user pid=4642 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=4642 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=CRED_REFR msg=audit(1398700634.899:124): user pid=4642 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=USER_END msg=audit(1398700634.960:125): user pid=4639 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=USER_LOGOUT msg=audit(1398700634.960:126): user pid=4639 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=USER_END msg=audit(1398700634.961:127): user pid=4639 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=CRED_DISP msg=audit(1398700634.962:128): user pid=4639 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700634.963:129): user pid=4639 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=4639 suid=0 rport=38106 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700634.963:130): user pid=4639 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=4639 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700634.963:131): user pid=4639 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=4639 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700634.971:132): user pid=4648 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=4648 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700634.971:133): user pid=4648 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=4648 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=CRYPTO_SESSION msg=audit(1398700634.971:134): user pid=4647 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 spid=4648 suid=74 rport=38107 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=CRYPTO_SESSION msg=audit(1398700634.972:135): user pid=4647 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 spid=4648 suid=74 rport=38107 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=USER_AUTH msg=audit(1398700635.162:136): user pid=4647 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=38107 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=USER_AUTH msg=audit(1398700635.162:137): user pid=4647 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=e7:e2:3d:94:48:cf:f5:8c:5e:54:98:bd:89:a5:29:a9 rport=38107 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=USER_ACCT msg=audit(1398700635.171:138): user pid=4647 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700635.172:139): user pid=4647 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=4648 suid=74 rport=38107 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=USER_AUTH msg=audit(1398700635.173:140): user pid=4647 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=ssh res=success'
>type=CRED_ACQ msg=audit(1398700635.174:141): user pid=4647 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=LOGIN msg=audit(1398700635.174:142): pid=4647 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=6
>type=USER_ROLE_CHANGE msg=audit(1398700635.272:143): user pid=4647 uid=0 auid=0 ses=6 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=USER_START msg=audit(1398700635.275:144): user pid=4647 uid=0 auid=0 ses=6 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=USER_LOGIN msg=audit(1398700635.307:145): user pid=4647 uid=0 auid=0 ses=6 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=USER_START msg=audit(1398700635.307:146): user pid=4647 uid=0 auid=0 ses=6 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700635.308:147): user pid=4650 uid=0 auid=0 ses=6 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=4650 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700635.308:148): user pid=4650 uid=0 auid=0 ses=6 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=4650 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=CRED_REFR msg=audit(1398700635.309:149): user pid=4650 uid=0 auid=0 ses=6 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=USER_END msg=audit(1398700635.354:150): user pid=4647 uid=0 auid=0 ses=6 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=USER_LOGOUT msg=audit(1398700635.354:151): user pid=4647 uid=0 auid=0 ses=6 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=USER_END msg=audit(1398700635.455:152): user pid=4647 uid=0 auid=0 ses=6 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=CRED_DISP msg=audit(1398700635.455:153): user pid=4647 uid=0 auid=0 ses=6 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700635.455:154): user pid=4647 uid=0 auid=0 ses=6 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=4647 suid=0 rport=38107 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700635.455:155): user pid=4647 uid=0 auid=0 ses=6 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=4647 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700635.455:156): user pid=4647 uid=0 auid=0 ses=6 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=4647 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700635.464:157): user pid=4656 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=4656 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700635.464:158): user pid=4656 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=4656 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=CRYPTO_SESSION msg=audit(1398700635.464:159): user pid=4655 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 spid=4656 suid=74 rport=38108 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=CRYPTO_SESSION msg=audit(1398700635.464:160): user pid=4655 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 spid=4656 suid=74 rport=38108 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=USER_AUTH msg=audit(1398700635.653:161): user pid=4655 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=38108 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=USER_AUTH msg=audit(1398700635.653:162): user pid=4655 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=e7:e2:3d:94:48:cf:f5:8c:5e:54:98:bd:89:a5:29:a9 rport=38108 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=USER_ACCT msg=audit(1398700635.660:163): user pid=4655 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700635.660:164): user pid=4655 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=4656 suid=74 rport=38108 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=USER_AUTH msg=audit(1398700635.661:165): user pid=4655 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=ssh res=success'
>type=CRED_ACQ msg=audit(1398700635.661:166): user pid=4655 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=LOGIN msg=audit(1398700635.661:167): pid=4655 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=7
>type=USER_ROLE_CHANGE msg=audit(1398700635.758:168): user pid=4655 uid=0 auid=0 ses=7 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=USER_START msg=audit(1398700635.762:169): user pid=4655 uid=0 auid=0 ses=7 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=USER_LOGIN msg=audit(1398700635.767:170): user pid=4655 uid=0 auid=0 ses=7 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=USER_START msg=audit(1398700635.767:171): user pid=4655 uid=0 auid=0 ses=7 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700635.768:172): user pid=4658 uid=0 auid=0 ses=7 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=4658 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700635.768:173): user pid=4658 uid=0 auid=0 ses=7 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=4658 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=CRED_REFR msg=audit(1398700635.770:174): user pid=4658 uid=0 auid=0 ses=7 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=USER_END msg=audit(1398700635.813:175): user pid=4655 uid=0 auid=0 ses=7 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=USER_LOGOUT msg=audit(1398700635.814:176): user pid=4655 uid=0 auid=0 ses=7 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=USER_END msg=audit(1398700635.814:177): user pid=4655 uid=0 auid=0 ses=7 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=CRED_DISP msg=audit(1398700635.814:178): user pid=4655 uid=0 auid=0 ses=7 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700635.815:179): user pid=4655 uid=0 auid=0 ses=7 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=4655 suid=0 rport=38108 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700635.815:180): user pid=4655 uid=0 auid=0 ses=7 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=4655 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700635.815:181): user pid=4655 uid=0 auid=0 ses=7 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=4655 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700635.822:182): user pid=4664 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=4664 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700635.822:183): user pid=4664 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=4664 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=CRYPTO_SESSION msg=audit(1398700635.823:184): user pid=4663 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 spid=4664 suid=74 rport=38109 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=CRYPTO_SESSION msg=audit(1398700635.823:185): user pid=4663 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 spid=4664 suid=74 rport=38109 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=USER_AUTH msg=audit(1398700636.016:186): user pid=4663 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=38109 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=USER_AUTH msg=audit(1398700636.016:187): user pid=4663 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=e7:e2:3d:94:48:cf:f5:8c:5e:54:98:bd:89:a5:29:a9 rport=38109 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=USER_ACCT msg=audit(1398700636.025:188): user pid=4663 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700636.025:189): user pid=4663 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=4664 suid=74 rport=38109 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=USER_AUTH msg=audit(1398700636.025:190): user pid=4663 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=ssh res=success'
>type=CRED_ACQ msg=audit(1398700636.026:191): user pid=4663 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=LOGIN msg=audit(1398700636.026:192): pid=4663 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=8
>type=USER_ROLE_CHANGE msg=audit(1398700636.118:193): user pid=4663 uid=0 auid=0 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=USER_START msg=audit(1398700636.122:194): user pid=4663 uid=0 auid=0 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=USER_LOGIN msg=audit(1398700636.129:195): user pid=4663 uid=0 auid=0 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=USER_START msg=audit(1398700636.129:196): user pid=4663 uid=0 auid=0 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700636.130:197): user pid=4666 uid=0 auid=0 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=4666 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700636.131:198): user pid=4666 uid=0 auid=0 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=4666 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=CRED_REFR msg=audit(1398700636.132:199): user pid=4666 uid=0 auid=0 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=USER_END msg=audit(1398700636.171:200): user pid=4663 uid=0 auid=0 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=USER_LOGOUT msg=audit(1398700636.172:201): user pid=4663 uid=0 auid=0 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=USER_END msg=audit(1398700636.272:202): user pid=4663 uid=0 auid=0 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=CRED_DISP msg=audit(1398700636.273:203): user pid=4663 uid=0 auid=0 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700636.273:204): user pid=4663 uid=0 auid=0 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=4663 suid=0 rport=38109 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700636.273:205): user pid=4663 uid=0 auid=0 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=4663 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700636.274:206): user pid=4663 uid=0 auid=0 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=4663 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700636.286:207): user pid=4672 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=4672 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700636.286:208): user pid=4672 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=4672 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=CRYPTO_SESSION msg=audit(1398700636.287:209): user pid=4671 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 spid=4672 suid=74 rport=38110 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=CRYPTO_SESSION msg=audit(1398700636.287:210): user pid=4671 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 spid=4672 suid=74 rport=38110 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=USER_AUTH msg=audit(1398700636.487:211): user pid=4671 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=38110 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=USER_AUTH msg=audit(1398700636.487:212): user pid=4671 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=e7:e2:3d:94:48:cf:f5:8c:5e:54:98:bd:89:a5:29:a9 rport=38110 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=USER_ACCT msg=audit(1398700636.500:213): user pid=4671 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700636.501:214): user pid=4671 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=4672 suid=74 rport=38110 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=USER_AUTH msg=audit(1398700636.502:215): user pid=4671 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=ssh res=success'
>type=CRED_ACQ msg=audit(1398700636.503:216): user pid=4671 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=LOGIN msg=audit(1398700636.503:217): pid=4671 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=9
>type=USER_ROLE_CHANGE msg=audit(1398700636.693:218): user pid=4671 uid=0 auid=0 ses=9 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=USER_START msg=audit(1398700636.698:219): user pid=4671 uid=0 auid=0 ses=9 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=USER_LOGIN msg=audit(1398700636.730:220): user pid=4671 uid=0 auid=0 ses=9 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=USER_START msg=audit(1398700636.731:221): user pid=4671 uid=0 auid=0 ses=9 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700636.732:222): user pid=4674 uid=0 auid=0 ses=9 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=4674 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700636.732:223): user pid=4674 uid=0 auid=0 ses=9 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=4674 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=CRED_REFR msg=audit(1398700636.735:224): user pid=4674 uid=0 auid=0 ses=9 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=USER_END msg=audit(1398700636.776:225): user pid=4671 uid=0 auid=0 ses=9 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=USER_LOGOUT msg=audit(1398700636.777:226): user pid=4671 uid=0 auid=0 ses=9 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=USER_END msg=audit(1398700636.876:227): user pid=4671 uid=0 auid=0 ses=9 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=CRED_DISP msg=audit(1398700636.877:228): user pid=4671 uid=0 auid=0 ses=9 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700636.877:229): user pid=4671 uid=0 auid=0 ses=9 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=4671 suid=0 rport=38110 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700636.877:230): user pid=4671 uid=0 auid=0 ses=9 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=4671 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700636.877:231): user pid=4671 uid=0 auid=0 ses=9 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=4671 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700636.886:232): user pid=4681 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=4681 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700636.886:233): user pid=4681 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=4681 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=CRYPTO_SESSION msg=audit(1398700636.887:234): user pid=4680 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 spid=4681 suid=74 rport=38111 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=CRYPTO_SESSION msg=audit(1398700636.887:235): user pid=4680 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 spid=4681 suid=74 rport=38111 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=USER_AUTH msg=audit(1398700637.077:236): user pid=4680 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=38111 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=USER_AUTH msg=audit(1398700637.077:237): user pid=4680 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=e7:e2:3d:94:48:cf:f5:8c:5e:54:98:bd:89:a5:29:a9 rport=38111 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=USER_ACCT msg=audit(1398700637.083:238): user pid=4680 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700637.084:239): user pid=4680 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=4681 suid=74 rport=38111 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=USER_AUTH msg=audit(1398700637.084:240): user pid=4680 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=ssh res=success'
>type=CRED_ACQ msg=audit(1398700637.085:241): user pid=4680 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=LOGIN msg=audit(1398700637.085:242): pid=4680 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=10
>type=USER_ROLE_CHANGE msg=audit(1398700637.180:243): user pid=4680 uid=0 auid=0 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=USER_START msg=audit(1398700637.186:244): user pid=4680 uid=0 auid=0 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=USER_LOGIN msg=audit(1398700637.223:245): user pid=4680 uid=0 auid=0 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=USER_START msg=audit(1398700637.223:246): user pid=4680 uid=0 auid=0 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700637.225:247): user pid=4683 uid=0 auid=0 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=4683 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700637.225:248): user pid=4683 uid=0 auid=0 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=4683 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=CRED_REFR msg=audit(1398700637.228:249): user pid=4683 uid=0 auid=0 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=USER_END msg=audit(1398700637.298:250): user pid=4680 uid=0 auid=0 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=USER_LOGOUT msg=audit(1398700637.299:251): user pid=4680 uid=0 auid=0 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=USER_END msg=audit(1398700637.299:252): user pid=4680 uid=0 auid=0 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=CRED_DISP msg=audit(1398700637.300:253): user pid=4680 uid=0 auid=0 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700637.300:254): user pid=4680 uid=0 auid=0 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=4680 suid=0 rport=38111 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700637.301:255): user pid=4680 uid=0 auid=0 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=4680 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700637.301:256): user pid=4680 uid=0 auid=0 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=4680 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700637.315:257): user pid=4689 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=4689 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700637.315:258): user pid=4689 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=4689 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=CRYPTO_SESSION msg=audit(1398700637.316:259): user pid=4688 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 spid=4689 suid=74 rport=38112 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=CRYPTO_SESSION msg=audit(1398700637.316:260): user pid=4688 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 spid=4689 suid=74 rport=38112 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=USER_AUTH msg=audit(1398700637.508:261): user pid=4688 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=38112 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=USER_AUTH msg=audit(1398700637.508:262): user pid=4688 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=e7:e2:3d:94:48:cf:f5:8c:5e:54:98:bd:89:a5:29:a9 rport=38112 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=USER_ACCT msg=audit(1398700637.522:263): user pid=4688 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700637.523:264): user pid=4688 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=4689 suid=74 rport=38112 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=USER_AUTH msg=audit(1398700637.524:265): user pid=4688 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=ssh res=success'
>type=CRED_ACQ msg=audit(1398700637.525:266): user pid=4688 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=LOGIN msg=audit(1398700637.525:267): pid=4688 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=11
>type=USER_ROLE_CHANGE msg=audit(1398700637.719:268): user pid=4688 uid=0 auid=0 ses=11 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=USER_START msg=audit(1398700637.725:269): user pid=4688 uid=0 auid=0 ses=11 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=USER_LOGIN msg=audit(1398700637.752:270): user pid=4688 uid=0 auid=0 ses=11 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=USER_START msg=audit(1398700637.752:271): user pid=4688 uid=0 auid=0 ses=11 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700637.755:272): user pid=4691 uid=0 auid=0 ses=11 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=4691 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700637.755:273): user pid=4691 uid=0 auid=0 ses=11 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=4691 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=CRED_REFR msg=audit(1398700637.757:274): user pid=4691 uid=0 auid=0 ses=11 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=USER_END msg=audit(1398700637.822:275): user pid=4688 uid=0 auid=0 ses=11 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=USER_LOGOUT msg=audit(1398700637.822:276): user pid=4688 uid=0 auid=0 ses=11 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=USER_END msg=audit(1398700637.921:277): user pid=4688 uid=0 auid=0 ses=11 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=CRED_DISP msg=audit(1398700637.921:278): user pid=4688 uid=0 auid=0 ses=11 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700637.923:279): user pid=4688 uid=0 auid=0 ses=11 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=4688 suid=0 rport=38112 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700637.923:280): user pid=4688 uid=0 auid=0 ses=11 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=4688 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700637.923:281): user pid=4688 uid=0 auid=0 ses=11 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=4688 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700637.935:282): user pid=4697 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=4697 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700637.935:283): user pid=4697 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=4697 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=CRYPTO_SESSION msg=audit(1398700637.936:284): user pid=4696 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 spid=4697 suid=74 rport=38113 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=CRYPTO_SESSION msg=audit(1398700637.938:285): user pid=4696 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 spid=4697 suid=74 rport=38113 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=USER_AUTH msg=audit(1398700638.135:286): user pid=4696 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=38113 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=USER_AUTH msg=audit(1398700638.135:287): user pid=4696 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=e7:e2:3d:94:48:cf:f5:8c:5e:54:98:bd:89:a5:29:a9 rport=38113 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=USER_ACCT msg=audit(1398700638.146:288): user pid=4696 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700638.147:289): user pid=4696 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=4697 suid=74 rport=38113 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=USER_AUTH msg=audit(1398700638.148:290): user pid=4696 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=ssh res=success'
>type=CRED_ACQ msg=audit(1398700638.149:291): user pid=4696 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=LOGIN msg=audit(1398700638.149:292): pid=4696 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=12
>type=USER_ROLE_CHANGE msg=audit(1398700638.337:293): user pid=4696 uid=0 auid=0 ses=12 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=USER_START msg=audit(1398700638.343:294): user pid=4696 uid=0 auid=0 ses=12 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=USER_LOGIN msg=audit(1398700638.378:295): user pid=4696 uid=0 auid=0 ses=12 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=USER_START msg=audit(1398700638.379:296): user pid=4696 uid=0 auid=0 ses=12 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700638.381:297): user pid=4699 uid=0 auid=0 ses=12 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=4699 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700638.381:298): user pid=4699 uid=0 auid=0 ses=12 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=4699 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=CRED_REFR msg=audit(1398700638.384:299): user pid=4699 uid=0 auid=0 ses=12 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=USER_END msg=audit(1398700638.446:300): user pid=4696 uid=0 auid=0 ses=12 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=USER_LOGOUT msg=audit(1398700638.446:301): user pid=4696 uid=0 auid=0 ses=12 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=USER_END msg=audit(1398700638.544:302): user pid=4696 uid=0 auid=0 ses=12 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=CRED_DISP msg=audit(1398700638.544:303): user pid=4696 uid=0 auid=0 ses=12 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700638.546:304): user pid=4696 uid=0 auid=0 ses=12 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=4696 suid=0 rport=38113 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700638.546:305): user pid=4696 uid=0 auid=0 ses=12 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=4696 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700638.546:306): user pid=4696 uid=0 auid=0 ses=12 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=4696 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700638.559:307): user pid=4706 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=4706 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700638.559:308): user pid=4706 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=4706 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=CRYPTO_SESSION msg=audit(1398700638.560:309): user pid=4705 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 spid=4706 suid=74 rport=38114 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=CRYPTO_SESSION msg=audit(1398700638.560:310): user pid=4705 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 spid=4706 suid=74 rport=38114 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=USER_AUTH msg=audit(1398700638.758:311): user pid=4705 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=38114 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=USER_AUTH msg=audit(1398700638.758:312): user pid=4705 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=e7:e2:3d:94:48:cf:f5:8c:5e:54:98:bd:89:a5:29:a9 rport=38114 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=USER_ACCT msg=audit(1398700638.768:313): user pid=4705 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700638.770:314): user pid=4705 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=4706 suid=74 rport=38114 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=USER_AUTH msg=audit(1398700638.771:315): user pid=4705 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=ssh res=success'
>type=CRED_ACQ msg=audit(1398700638.771:316): user pid=4705 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=LOGIN msg=audit(1398700638.773:317): pid=4705 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=13
>type=USER_ROLE_CHANGE msg=audit(1398700638.962:318): user pid=4705 uid=0 auid=0 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=USER_START msg=audit(1398700638.966:319): user pid=4705 uid=0 auid=0 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=USER_LOGIN msg=audit(1398700639.003:320): user pid=4705 uid=0 auid=0 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=USER_START msg=audit(1398700639.004:321): user pid=4705 uid=0 auid=0 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700639.005:322): user pid=4708 uid=0 auid=0 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=4708 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700639.006:323): user pid=4708 uid=0 auid=0 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=4708 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=CRED_REFR msg=audit(1398700639.008:324): user pid=4708 uid=0 auid=0 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=USER_END msg=audit(1398700639.073:325): user pid=4705 uid=0 auid=0 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=USER_LOGOUT msg=audit(1398700639.074:326): user pid=4705 uid=0 auid=0 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=USER_END msg=audit(1398700639.171:327): user pid=4705 uid=0 auid=0 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=CRED_DISP msg=audit(1398700639.172:328): user pid=4705 uid=0 auid=0 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700639.172:329): user pid=4705 uid=0 auid=0 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=4705 suid=0 rport=38114 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700639.173:330): user pid=4705 uid=0 auid=0 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=4705 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700639.173:331): user pid=4705 uid=0 auid=0 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=4705 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700639.185:332): user pid=4716 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=4716 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700639.185:333): user pid=4716 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=4716 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=CRYPTO_SESSION msg=audit(1398700639.187:334): user pid=4715 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 spid=4716 suid=74 rport=38115 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=CRYPTO_SESSION msg=audit(1398700639.187:335): user pid=4715 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 spid=4716 suid=74 rport=38115 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=USER_AUTH msg=audit(1398700639.380:336): user pid=4715 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=38115 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=USER_AUTH msg=audit(1398700639.380:337): user pid=4715 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=e7:e2:3d:94:48:cf:f5:8c:5e:54:98:bd:89:a5:29:a9 rport=38115 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=USER_ACCT msg=audit(1398700639.389:338): user pid=4715 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700639.392:339): user pid=4715 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=4716 suid=74 rport=38115 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=USER_AUTH msg=audit(1398700639.393:340): user pid=4715 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=ssh res=success'
>type=CRED_ACQ msg=audit(1398700639.393:341): user pid=4715 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=LOGIN msg=audit(1398700639.394:342): pid=4715 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=14
>type=USER_ROLE_CHANGE msg=audit(1398700639.579:343): user pid=4715 uid=0 auid=0 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=USER_START msg=audit(1398700639.584:344): user pid=4715 uid=0 auid=0 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=USER_LOGIN msg=audit(1398700639.589:345): user pid=4715 uid=0 auid=0 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=USER_START msg=audit(1398700639.590:346): user pid=4715 uid=0 auid=0 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700639.591:347): user pid=4718 uid=0 auid=0 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=4718 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700639.591:348): user pid=4718 uid=0 auid=0 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=4718 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=CRED_REFR msg=audit(1398700639.593:349): user pid=4718 uid=0 auid=0 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=USER_END msg=audit(1398700639.653:350): user pid=4715 uid=0 auid=0 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=USER_LOGOUT msg=audit(1398700639.654:351): user pid=4715 uid=0 auid=0 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=USER_END msg=audit(1398700639.655:352): user pid=4715 uid=0 auid=0 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=CRED_DISP msg=audit(1398700639.655:353): user pid=4715 uid=0 auid=0 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700639.656:354): user pid=4715 uid=0 auid=0 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=4715 suid=0 rport=38115 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700639.656:355): user pid=4715 uid=0 auid=0 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=4715 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700639.656:356): user pid=4715 uid=0 auid=0 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=4715 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700639.665:357): user pid=4724 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=4724 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700639.665:358): user pid=4724 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=4724 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=CRYPTO_SESSION msg=audit(1398700639.666:359): user pid=4723 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 spid=4724 suid=74 rport=38116 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=CRYPTO_SESSION msg=audit(1398700639.666:360): user pid=4723 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 spid=4724 suid=74 rport=38116 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=USER_AUTH msg=audit(1398700639.860:361): user pid=4723 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=38116 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=USER_AUTH msg=audit(1398700639.860:362): user pid=4723 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=e7:e2:3d:94:48:cf:f5:8c:5e:54:98:bd:89:a5:29:a9 rport=38116 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=USER_ACCT msg=audit(1398700639.872:363): user pid=4723 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700639.873:364): user pid=4723 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=4724 suid=74 rport=38116 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=USER_AUTH msg=audit(1398700639.874:365): user pid=4723 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=ssh res=success'
>type=CRED_ACQ msg=audit(1398700639.875:366): user pid=4723 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=LOGIN msg=audit(1398700639.875:367): pid=4723 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=15
>type=USER_ROLE_CHANGE msg=audit(1398700640.082:368): user pid=4723 uid=0 auid=0 ses=15 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=USER_START msg=audit(1398700640.091:369): user pid=4723 uid=0 auid=0 ses=15 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=USER_LOGIN msg=audit(1398700640.102:370): user pid=4723 uid=0 auid=0 ses=15 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=USER_START msg=audit(1398700640.103:371): user pid=4723 uid=0 auid=0 ses=15 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700640.106:372): user pid=4726 uid=0 auid=0 ses=15 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=4726 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700640.106:373): user pid=4726 uid=0 auid=0 ses=15 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=4726 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=CRED_REFR msg=audit(1398700640.108:374): user pid=4726 uid=0 auid=0 ses=15 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=USER_END msg=audit(1398700640.173:375): user pid=4723 uid=0 auid=0 ses=15 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=USER_LOGOUT msg=audit(1398700640.174:376): user pid=4723 uid=0 auid=0 ses=15 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=USER_END msg=audit(1398700640.274:377): user pid=4723 uid=0 auid=0 ses=15 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=CRED_DISP msg=audit(1398700640.275:378): user pid=4723 uid=0 auid=0 ses=15 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700640.276:379): user pid=4723 uid=0 auid=0 ses=15 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=4723 suid=0 rport=38116 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700640.276:380): user pid=4723 uid=0 auid=0 ses=15 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=4723 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700640.276:381): user pid=4723 uid=0 auid=0 ses=15 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=4723 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700640.292:382): user pid=4732 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=4732 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700640.292:383): user pid=4732 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=4732 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=CRYPTO_SESSION msg=audit(1398700640.292:384): user pid=4731 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 spid=4732 suid=74 rport=38117 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=CRYPTO_SESSION msg=audit(1398700640.293:385): user pid=4731 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 spid=4732 suid=74 rport=38117 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=USER_AUTH msg=audit(1398700640.497:386): user pid=4731 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=38117 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=USER_AUTH msg=audit(1398700640.497:387): user pid=4731 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=e7:e2:3d:94:48:cf:f5:8c:5e:54:98:bd:89:a5:29:a9 rport=38117 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=USER_ACCT msg=audit(1398700640.509:388): user pid=4731 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700640.509:389): user pid=4731 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=4732 suid=74 rport=38117 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=USER_AUTH msg=audit(1398700640.511:390): user pid=4731 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=ssh res=success'
>type=CRED_ACQ msg=audit(1398700640.511:391): user pid=4731 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=LOGIN msg=audit(1398700640.511:392): pid=4731 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=16
>type=USER_ROLE_CHANGE msg=audit(1398700640.698:393): user pid=4731 uid=0 auid=0 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=USER_START msg=audit(1398700640.702:394): user pid=4731 uid=0 auid=0 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=USER_LOGIN msg=audit(1398700640.739:395): user pid=4731 uid=0 auid=0 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=USER_START msg=audit(1398700640.740:396): user pid=4731 uid=0 auid=0 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700640.741:397): user pid=4734 uid=0 auid=0 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=4734 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700640.741:398): user pid=4734 uid=0 auid=0 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=4734 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=CRED_REFR msg=audit(1398700640.742:399): user pid=4734 uid=0 auid=0 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700640.811:400): user pid=4741 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=4741 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700640.811:401): user pid=4741 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=4741 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_SESSION msg=audit(1398700640.812:402): user pid=4740 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 spid=4741 suid=74 rport=36359 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_SESSION msg=audit(1398700640.812:403): user pid=4740 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 spid=4741 suid=74 rport=36359 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=USER_AUTH msg=audit(1398700640.874:404): user pid=4740 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=36359 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=USER_AUTH msg=audit(1398700640.874:405): user pid=4740 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=8b:2d:a5:06:3e:34:8a:e0:bf:ca:69:94:eb:59:f0:19 rport=36359 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=USER_ACCT msg=audit(1398700640.902:406): user pid=4740 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700640.902:407): user pid=4740 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=4741 suid=74 rport=36359 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=USER_AUTH msg=audit(1398700640.903:408): user pid=4740 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=ssh res=success'
>type=CRED_ACQ msg=audit(1398700640.904:409): user pid=4740 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=LOGIN msg=audit(1398700640.904:410): pid=4740 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=17
>type=USER_ROLE_CHANGE msg=audit(1398700641.006:411): user pid=4740 uid=0 auid=0 ses=17 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_START msg=audit(1398700641.011:412): user pid=4740 uid=0 auid=0 ses=17 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_LOGIN msg=audit(1398700641.013:413): user pid=4740 uid=0 auid=0 ses=17 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_START msg=audit(1398700641.013:414): user pid=4740 uid=0 auid=0 ses=17 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700641.014:415): user pid=4743 uid=0 auid=0 ses=17 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=4743 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700641.014:416): user pid=4743 uid=0 auid=0 ses=17 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=4743 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRED_REFR msg=audit(1398700641.015:417): user pid=4743 uid=0 auid=0 ses=17 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_END msg=audit(1398700650.447:418): user pid=4740 uid=0 auid=0 ses=17 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=CRED_DISP msg=audit(1398700650.448:419): user pid=4740 uid=0 auid=0 ses=17 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_END msg=audit(1398700650.448:420): user pid=4731 uid=0 auid=0 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=USER_LOGOUT msg=audit(1398700650.448:421): user pid=4731 uid=0 auid=0 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=USER_END msg=audit(1398700650.449:422): user pid=4740 uid=0 auid=0 ses=17 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_LOGOUT msg=audit(1398700650.450:423): user pid=4740 uid=0 auid=0 ses=17 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700650.450:424): user pid=4740 uid=0 auid=0 ses=17 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=4740 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700650.450:425): user pid=4740 uid=0 auid=0 ses=17 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=4740 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700650.450:426): user pid=4740 uid=0 auid=0 ses=17 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=4740 suid=0 rport=36359 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=USER_END msg=audit(1398700650.548:427): user pid=4731 uid=0 auid=0 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=CRED_DISP msg=audit(1398700650.548:428): user pid=4731 uid=0 auid=0 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700650.549:429): user pid=4731 uid=0 auid=0 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=4731 suid=0 rport=38117 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700650.549:430): user pid=4731 uid=0 auid=0 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=4731 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700650.549:431): user pid=4731 uid=0 auid=0 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=4731 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700650.565:432): user pid=4791 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=4791 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700650.565:433): user pid=4791 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=4791 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=CRYPTO_SESSION msg=audit(1398700650.565:434): user pid=4790 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 spid=4791 suid=74 rport=38118 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=CRYPTO_SESSION msg=audit(1398700650.565:435): user pid=4790 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 spid=4791 suid=74 rport=38118 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=USER_AUTH msg=audit(1398700650.760:436): user pid=4790 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=38118 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=USER_AUTH msg=audit(1398700650.760:437): user pid=4790 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=e7:e2:3d:94:48:cf:f5:8c:5e:54:98:bd:89:a5:29:a9 rport=38118 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=USER_ACCT msg=audit(1398700650.769:438): user pid=4790 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700650.770:439): user pid=4790 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=4791 suid=74 rport=38118 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=USER_AUTH msg=audit(1398700650.771:440): user pid=4790 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=ssh res=success'
>type=CRED_ACQ msg=audit(1398700650.771:441): user pid=4790 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=LOGIN msg=audit(1398700650.771:442): pid=4790 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=18
>type=USER_ROLE_CHANGE msg=audit(1398700650.905:443): user pid=4790 uid=0 auid=0 ses=18 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=USER_START msg=audit(1398700650.912:444): user pid=4790 uid=0 auid=0 ses=18 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=USER_LOGIN msg=audit(1398700650.922:445): user pid=4790 uid=0 auid=0 ses=18 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=USER_START msg=audit(1398700650.922:446): user pid=4790 uid=0 auid=0 ses=18 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700650.924:447): user pid=4793 uid=0 auid=0 ses=18 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=4793 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700650.924:448): user pid=4793 uid=0 auid=0 ses=18 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=4793 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=CRED_REFR msg=audit(1398700650.925:449): user pid=4793 uid=0 auid=0 ses=18 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=USER_END msg=audit(1398700652.097:450): user pid=4790 uid=0 auid=0 ses=18 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=USER_LOGOUT msg=audit(1398700652.098:451): user pid=4790 uid=0 auid=0 ses=18 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=USER_END msg=audit(1398700652.198:452): user pid=4790 uid=0 auid=0 ses=18 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=CRED_DISP msg=audit(1398700652.198:453): user pid=4790 uid=0 auid=0 ses=18 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700652.199:454): user pid=4790 uid=0 auid=0 ses=18 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=4790 suid=0 rport=38118 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700652.199:455): user pid=4790 uid=0 auid=0 ses=18 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=4790 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700652.199:456): user pid=4790 uid=0 auid=0 ses=18 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=4790 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700652.206:457): user pid=4799 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=4799 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700652.207:458): user pid=4799 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=4799 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=CRYPTO_SESSION msg=audit(1398700652.207:459): user pid=4798 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 spid=4799 suid=74 rport=38119 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=CRYPTO_SESSION msg=audit(1398700652.208:460): user pid=4798 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 spid=4799 suid=74 rport=38119 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=USER_AUTH msg=audit(1398700652.400:461): user pid=4798 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=38119 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=USER_AUTH msg=audit(1398700652.400:462): user pid=4798 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=e7:e2:3d:94:48:cf:f5:8c:5e:54:98:bd:89:a5:29:a9 rport=38119 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=USER_ACCT msg=audit(1398700652.414:463): user pid=4798 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700652.415:464): user pid=4798 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=4799 suid=74 rport=38119 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=USER_AUTH msg=audit(1398700652.416:465): user pid=4798 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=ssh res=success'
>type=CRED_ACQ msg=audit(1398700652.417:466): user pid=4798 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=LOGIN msg=audit(1398700652.417:467): pid=4798 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=19
>type=USER_ROLE_CHANGE msg=audit(1398700652.551:468): user pid=4798 uid=0 auid=0 ses=19 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=USER_START msg=audit(1398700652.558:469): user pid=4798 uid=0 auid=0 ses=19 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=USER_LOGIN msg=audit(1398700652.579:470): user pid=4798 uid=0 auid=0 ses=19 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=USER_START msg=audit(1398700652.579:471): user pid=4798 uid=0 auid=0 ses=19 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700652.582:472): user pid=4801 uid=0 auid=0 ses=19 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=4801 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700652.582:473): user pid=4801 uid=0 auid=0 ses=19 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=4801 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=CRED_REFR msg=audit(1398700652.584:474): user pid=4801 uid=0 auid=0 ses=19 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=USER_END msg=audit(1398700652.762:475): user pid=4798 uid=0 auid=0 ses=19 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=USER_LOGOUT msg=audit(1398700652.763:476): user pid=4798 uid=0 auid=0 ses=19 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=USER_END msg=audit(1398700652.764:477): user pid=4798 uid=0 auid=0 ses=19 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=CRED_DISP msg=audit(1398700652.764:478): user pid=4798 uid=0 auid=0 ses=19 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700652.765:479): user pid=4798 uid=0 auid=0 ses=19 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=4798 suid=0 rport=38119 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700652.765:480): user pid=4798 uid=0 auid=0 ses=19 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=4798 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700652.765:481): user pid=4798 uid=0 auid=0 ses=19 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=4798 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700652.782:482): user pid=4807 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=4807 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700652.783:483): user pid=4807 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=4807 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=CRYPTO_SESSION msg=audit(1398700652.783:484): user pid=4806 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 spid=4807 suid=74 rport=38120 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=CRYPTO_SESSION msg=audit(1398700652.783:485): user pid=4806 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 spid=4807 suid=74 rport=38120 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=USER_AUTH msg=audit(1398700652.977:486): user pid=4806 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=38120 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=USER_AUTH msg=audit(1398700652.977:487): user pid=4806 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=e7:e2:3d:94:48:cf:f5:8c:5e:54:98:bd:89:a5:29:a9 rport=38120 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=USER_ACCT msg=audit(1398700652.987:488): user pid=4806 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700652.987:489): user pid=4806 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=4807 suid=74 rport=38120 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=USER_AUTH msg=audit(1398700652.989:490): user pid=4806 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=ssh res=success'
>type=CRED_ACQ msg=audit(1398700652.990:491): user pid=4806 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=LOGIN msg=audit(1398700652.990:492): pid=4806 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=20
>type=USER_ROLE_CHANGE msg=audit(1398700653.124:493): user pid=4806 uid=0 auid=0 ses=20 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=USER_START msg=audit(1398700653.130:494): user pid=4806 uid=0 auid=0 ses=20 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=USER_LOGIN msg=audit(1398700653.139:495): user pid=4806 uid=0 auid=0 ses=20 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=USER_START msg=audit(1398700653.140:496): user pid=4806 uid=0 auid=0 ses=20 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700653.141:497): user pid=4809 uid=0 auid=0 ses=20 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=4809 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700653.141:498): user pid=4809 uid=0 auid=0 ses=20 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=4809 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=CRED_REFR msg=audit(1398700653.143:499): user pid=4809 uid=0 auid=0 ses=20 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=USER_END msg=audit(1398700653.216:500): user pid=4806 uid=0 auid=0 ses=20 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=USER_LOGOUT msg=audit(1398700653.217:501): user pid=4806 uid=0 auid=0 ses=20 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=USER_END msg=audit(1398700653.313:502): user pid=4806 uid=0 auid=0 ses=20 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=CRED_DISP msg=audit(1398700653.313:503): user pid=4806 uid=0 auid=0 ses=20 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700653.314:504): user pid=4806 uid=0 auid=0 ses=20 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=4806 suid=0 rport=38120 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700653.314:505): user pid=4806 uid=0 auid=0 ses=20 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=4806 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700653.314:506): user pid=4806 uid=0 auid=0 ses=20 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=4806 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700653.323:507): user pid=4820 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=4820 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700653.323:508): user pid=4820 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=4820 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=CRYPTO_SESSION msg=audit(1398700653.325:509): user pid=4819 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 spid=4820 suid=74 rport=38121 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=CRYPTO_SESSION msg=audit(1398700653.325:510): user pid=4819 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 spid=4820 suid=74 rport=38121 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=USER_AUTH msg=audit(1398700653.517:511): user pid=4819 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=38121 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=USER_AUTH msg=audit(1398700653.518:512): user pid=4819 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=e7:e2:3d:94:48:cf:f5:8c:5e:54:98:bd:89:a5:29:a9 rport=38121 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=USER_ACCT msg=audit(1398700653.528:513): user pid=4819 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700653.528:514): user pid=4819 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=4820 suid=74 rport=38121 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=USER_AUTH msg=audit(1398700653.529:515): user pid=4819 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=ssh res=success'
>type=CRED_ACQ msg=audit(1398700653.530:516): user pid=4819 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=LOGIN msg=audit(1398700653.530:517): pid=4819 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=21
>type=USER_ROLE_CHANGE msg=audit(1398700653.667:518): user pid=4819 uid=0 auid=0 ses=21 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=USER_START msg=audit(1398700653.674:519): user pid=4819 uid=0 auid=0 ses=21 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=USER_LOGIN msg=audit(1398700653.679:520): user pid=4819 uid=0 auid=0 ses=21 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=USER_START msg=audit(1398700653.679:521): user pid=4819 uid=0 auid=0 ses=21 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700653.681:522): user pid=4822 uid=0 auid=0 ses=21 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=4822 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700653.681:523): user pid=4822 uid=0 auid=0 ses=21 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=4822 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=CRED_REFR msg=audit(1398700653.683:524): user pid=4822 uid=0 auid=0 ses=21 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=USER_END msg=audit(1398700653.742:525): user pid=4819 uid=0 auid=0 ses=21 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=USER_LOGOUT msg=audit(1398700653.743:526): user pid=4819 uid=0 auid=0 ses=21 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=USER_END msg=audit(1398700653.744:527): user pid=4819 uid=0 auid=0 ses=21 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=CRED_DISP msg=audit(1398700653.744:528): user pid=4819 uid=0 auid=0 ses=21 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700653.745:529): user pid=4819 uid=0 auid=0 ses=21 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=4819 suid=0 rport=38121 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700653.745:530): user pid=4819 uid=0 auid=0 ses=21 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=4819 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700653.745:531): user pid=4819 uid=0 auid=0 ses=21 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=4819 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700653.753:532): user pid=4828 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=4828 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700653.753:533): user pid=4828 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=4828 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=CRYPTO_SESSION msg=audit(1398700653.753:534): user pid=4827 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 spid=4828 suid=74 rport=38122 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=CRYPTO_SESSION msg=audit(1398700653.754:535): user pid=4827 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 spid=4828 suid=74 rport=38122 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=USER_AUTH msg=audit(1398700653.949:536): user pid=4827 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=38122 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=USER_AUTH msg=audit(1398700653.949:537): user pid=4827 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=e7:e2:3d:94:48:cf:f5:8c:5e:54:98:bd:89:a5:29:a9 rport=38122 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=USER_ACCT msg=audit(1398700653.961:538): user pid=4827 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700653.961:539): user pid=4827 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=4828 suid=74 rport=38122 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=USER_AUTH msg=audit(1398700653.963:540): user pid=4827 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=ssh res=success'
>type=CRED_ACQ msg=audit(1398700653.963:541): user pid=4827 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=LOGIN msg=audit(1398700653.964:542): pid=4827 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=22
>type=USER_ROLE_CHANGE msg=audit(1398700654.107:543): user pid=4827 uid=0 auid=0 ses=22 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=USER_START msg=audit(1398700654.113:544): user pid=4827 uid=0 auid=0 ses=22 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=USER_LOGIN msg=audit(1398700654.129:545): user pid=4827 uid=0 auid=0 ses=22 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=USER_START msg=audit(1398700654.131:546): user pid=4827 uid=0 auid=0 ses=22 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700654.132:547): user pid=4830 uid=0 auid=0 ses=22 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=4830 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700654.132:548): user pid=4830 uid=0 auid=0 ses=22 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=4830 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=CRED_REFR msg=audit(1398700654.133:549): user pid=4830 uid=0 auid=0 ses=22 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=USER_END msg=audit(1398700654.198:550): user pid=4827 uid=0 auid=0 ses=22 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=USER_LOGOUT msg=audit(1398700654.199:551): user pid=4827 uid=0 auid=0 ses=22 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=USER_END msg=audit(1398700654.300:552): user pid=4827 uid=0 auid=0 ses=22 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=CRED_DISP msg=audit(1398700654.300:553): user pid=4827 uid=0 auid=0 ses=22 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700654.301:554): user pid=4827 uid=0 auid=0 ses=22 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=4827 suid=0 rport=38122 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700654.301:555): user pid=4827 uid=0 auid=0 ses=22 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=4827 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700654.301:556): user pid=4827 uid=0 auid=0 ses=22 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=4827 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700654.309:557): user pid=4836 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=4836 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700654.309:558): user pid=4836 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=4836 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=CRYPTO_SESSION msg=audit(1398700654.310:559): user pid=4835 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 spid=4836 suid=74 rport=38123 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=CRYPTO_SESSION msg=audit(1398700654.310:560): user pid=4835 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 spid=4836 suid=74 rport=38123 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=USER_AUTH msg=audit(1398700654.503:561): user pid=4835 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=38123 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=USER_AUTH msg=audit(1398700654.503:562): user pid=4835 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=e7:e2:3d:94:48:cf:f5:8c:5e:54:98:bd:89:a5:29:a9 rport=38123 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=USER_ACCT msg=audit(1398700654.514:563): user pid=4835 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700654.514:564): user pid=4835 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=4836 suid=74 rport=38123 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=USER_AUTH msg=audit(1398700654.515:565): user pid=4835 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=ssh res=success'
>type=CRED_ACQ msg=audit(1398700654.516:566): user pid=4835 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=LOGIN msg=audit(1398700654.516:567): pid=4835 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=23
>type=USER_ROLE_CHANGE msg=audit(1398700654.654:568): user pid=4835 uid=0 auid=0 ses=23 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=USER_START msg=audit(1398700654.661:569): user pid=4835 uid=0 auid=0 ses=23 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=USER_LOGIN msg=audit(1398700654.679:570): user pid=4835 uid=0 auid=0 ses=23 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=USER_START msg=audit(1398700654.679:571): user pid=4835 uid=0 auid=0 ses=23 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700654.681:572): user pid=4838 uid=0 auid=0 ses=23 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=4838 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700654.682:573): user pid=4838 uid=0 auid=0 ses=23 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=4838 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=CRED_REFR msg=audit(1398700654.683:574): user pid=4838 uid=0 auid=0 ses=23 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=USER_END msg=audit(1398700655.310:575): user pid=4835 uid=0 auid=0 ses=23 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=USER_LOGOUT msg=audit(1398700655.311:576): user pid=4835 uid=0 auid=0 ses=23 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=USER_END msg=audit(1398700655.412:577): user pid=4835 uid=0 auid=0 ses=23 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=CRED_DISP msg=audit(1398700655.412:578): user pid=4835 uid=0 auid=0 ses=23 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700655.413:579): user pid=4835 uid=0 auid=0 ses=23 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=4835 suid=0 rport=38123 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700655.413:580): user pid=4835 uid=0 auid=0 ses=23 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=4835 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700655.413:581): user pid=4835 uid=0 auid=0 ses=23 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=4835 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700655.422:582): user pid=4845 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=4845 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700655.422:583): user pid=4845 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=4845 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=CRYPTO_SESSION msg=audit(1398700655.429:584): user pid=4844 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 spid=4845 suid=74 rport=38124 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=CRYPTO_SESSION msg=audit(1398700655.429:585): user pid=4844 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 spid=4845 suid=74 rport=38124 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=USER_AUTH msg=audit(1398700655.617:586): user pid=4844 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=38124 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=USER_AUTH msg=audit(1398700655.617:587): user pid=4844 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=e7:e2:3d:94:48:cf:f5:8c:5e:54:98:bd:89:a5:29:a9 rport=38124 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=USER_ACCT msg=audit(1398700655.628:588): user pid=4844 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700655.628:589): user pid=4844 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=4845 suid=74 rport=38124 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=USER_AUTH msg=audit(1398700655.629:590): user pid=4844 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=ssh res=success'
>type=CRED_ACQ msg=audit(1398700655.630:591): user pid=4844 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=LOGIN msg=audit(1398700655.630:592): pid=4844 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=24
>type=USER_ROLE_CHANGE msg=audit(1398700655.762:593): user pid=4844 uid=0 auid=0 ses=24 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=USER_START msg=audit(1398700655.767:594): user pid=4844 uid=0 auid=0 ses=24 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=USER_LOGIN msg=audit(1398700655.773:595): user pid=4844 uid=0 auid=0 ses=24 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=USER_START msg=audit(1398700655.774:596): user pid=4844 uid=0 auid=0 ses=24 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700655.774:597): user pid=4847 uid=0 auid=0 ses=24 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=4847 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700655.775:598): user pid=4847 uid=0 auid=0 ses=24 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=4847 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=CRED_REFR msg=audit(1398700655.776:599): user pid=4847 uid=0 auid=0 ses=24 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=USER_END msg=audit(1398700657.074:600): user pid=4844 uid=0 auid=0 ses=24 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=USER_LOGOUT msg=audit(1398700657.075:601): user pid=4844 uid=0 auid=0 ses=24 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=USER_END msg=audit(1398700657.175:602): user pid=4844 uid=0 auid=0 ses=24 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=CRED_DISP msg=audit(1398700657.176:603): user pid=4844 uid=0 auid=0 ses=24 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700657.177:604): user pid=4844 uid=0 auid=0 ses=24 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=4844 suid=0 rport=38124 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700657.177:605): user pid=4844 uid=0 auid=0 ses=24 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=4844 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700657.177:606): user pid=4844 uid=0 auid=0 ses=24 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=4844 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700657.185:607): user pid=4854 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=4854 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700657.185:608): user pid=4854 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=4854 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=CRYPTO_SESSION msg=audit(1398700657.186:609): user pid=4853 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 spid=4854 suid=74 rport=38125 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=CRYPTO_SESSION msg=audit(1398700657.186:610): user pid=4853 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 spid=4854 suid=74 rport=38125 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=USER_AUTH msg=audit(1398700657.379:611): user pid=4853 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=38125 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=USER_AUTH msg=audit(1398700657.379:612): user pid=4853 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=e7:e2:3d:94:48:cf:f5:8c:5e:54:98:bd:89:a5:29:a9 rport=38125 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=USER_ACCT msg=audit(1398700657.389:613): user pid=4853 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700657.390:614): user pid=4853 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=4854 suid=74 rport=38125 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=USER_AUTH msg=audit(1398700657.391:615): user pid=4853 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=ssh res=success'
>type=CRED_ACQ msg=audit(1398700657.391:616): user pid=4853 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=LOGIN msg=audit(1398700657.391:617): pid=4853 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=25
>type=USER_ROLE_CHANGE msg=audit(1398700657.525:618): user pid=4853 uid=0 auid=0 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=USER_START msg=audit(1398700657.531:619): user pid=4853 uid=0 auid=0 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=USER_LOGIN msg=audit(1398700657.536:620): user pid=4853 uid=0 auid=0 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=USER_START msg=audit(1398700657.536:621): user pid=4853 uid=0 auid=0 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700657.538:622): user pid=4856 uid=0 auid=0 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=4856 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700657.538:623): user pid=4856 uid=0 auid=0 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=4856 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=CRED_REFR msg=audit(1398700657.539:624): user pid=4856 uid=0 auid=0 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=USER_END msg=audit(1398700657.602:625): user pid=4853 uid=0 auid=0 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=USER_LOGOUT msg=audit(1398700657.602:626): user pid=4853 uid=0 auid=0 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=USER_END msg=audit(1398700657.702:627): user pid=4853 uid=0 auid=0 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=CRED_DISP msg=audit(1398700657.704:628): user pid=4853 uid=0 auid=0 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700657.704:629): user pid=4853 uid=0 auid=0 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=4853 suid=0 rport=38125 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700657.704:630): user pid=4853 uid=0 auid=0 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=4853 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700657.704:631): user pid=4853 uid=0 auid=0 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=4853 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700657.712:632): user pid=4862 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=4862 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700657.712:633): user pid=4862 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=4862 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=CRYPTO_SESSION msg=audit(1398700657.713:634): user pid=4861 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 spid=4862 suid=74 rport=38126 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=CRYPTO_SESSION msg=audit(1398700657.713:635): user pid=4861 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 spid=4862 suid=74 rport=38126 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=USER_AUTH msg=audit(1398700657.900:636): user pid=4861 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=38126 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=USER_AUTH msg=audit(1398700657.900:637): user pid=4861 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=e7:e2:3d:94:48:cf:f5:8c:5e:54:98:bd:89:a5:29:a9 rport=38126 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=USER_ACCT msg=audit(1398700657.910:638): user pid=4861 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700657.911:639): user pid=4861 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=4862 suid=74 rport=38126 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=USER_AUTH msg=audit(1398700657.911:640): user pid=4861 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=ssh res=success'
>type=CRED_ACQ msg=audit(1398700657.912:641): user pid=4861 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=LOGIN msg=audit(1398700657.912:642): pid=4861 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=26
>type=USER_ROLE_CHANGE msg=audit(1398700658.056:643): user pid=4861 uid=0 auid=0 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=USER_START msg=audit(1398700658.064:644): user pid=4861 uid=0 auid=0 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=USER_LOGIN msg=audit(1398700658.079:645): user pid=4861 uid=0 auid=0 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=USER_START msg=audit(1398700658.079:646): user pid=4861 uid=0 auid=0 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700658.081:647): user pid=4864 uid=0 auid=0 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=4864 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700658.081:648): user pid=4864 uid=0 auid=0 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=4864 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=CRED_REFR msg=audit(1398700658.082:649): user pid=4864 uid=0 auid=0 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=USER_END msg=audit(1398700660.389:650): user pid=4861 uid=0 auid=0 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=USER_LOGOUT msg=audit(1398700660.389:651): user pid=4861 uid=0 auid=0 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=USER_END msg=audit(1398700660.490:652): user pid=4861 uid=0 auid=0 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=CRED_DISP msg=audit(1398700660.491:653): user pid=4861 uid=0 auid=0 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700660.491:654): user pid=4861 uid=0 auid=0 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=4861 suid=0 rport=38126 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700660.491:655): user pid=4861 uid=0 auid=0 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=4861 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700660.491:656): user pid=4861 uid=0 auid=0 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=4861 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700660.501:657): user pid=5088 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=5088 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700660.501:658): user pid=5088 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=5088 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=CRYPTO_SESSION msg=audit(1398700660.502:659): user pid=5087 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 spid=5088 suid=74 rport=38127 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=CRYPTO_SESSION msg=audit(1398700660.502:660): user pid=5087 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 spid=5088 suid=74 rport=38127 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=USER_AUTH msg=audit(1398700660.693:661): user pid=5087 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=38127 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=USER_AUTH msg=audit(1398700660.693:662): user pid=5087 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=e7:e2:3d:94:48:cf:f5:8c:5e:54:98:bd:89:a5:29:a9 rport=38127 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=USER_ACCT msg=audit(1398700660.705:663): user pid=5087 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700660.705:664): user pid=5087 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=5088 suid=74 rport=38127 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=USER_AUTH msg=audit(1398700660.706:665): user pid=5087 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=ssh res=success'
>type=CRED_ACQ msg=audit(1398700660.707:666): user pid=5087 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=LOGIN msg=audit(1398700660.707:667): pid=5087 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=27
>type=USER_ROLE_CHANGE msg=audit(1398700660.865:668): user pid=5087 uid=0 auid=0 ses=27 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=USER_START msg=audit(1398700660.876:669): user pid=5087 uid=0 auid=0 ses=27 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=USER_LOGIN msg=audit(1398700660.902:670): user pid=5087 uid=0 auid=0 ses=27 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=USER_START msg=audit(1398700660.902:671): user pid=5087 uid=0 auid=0 ses=27 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700660.903:672): user pid=5090 uid=0 auid=0 ses=27 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=5090 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700660.905:673): user pid=5090 uid=0 auid=0 ses=27 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=5090 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=CRED_REFR msg=audit(1398700660.906:674): user pid=5090 uid=0 auid=0 ses=27 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700661.006:675): user pid=5097 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=5097 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700661.006:676): user pid=5097 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=5097 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_SESSION msg=audit(1398700661.006:677): user pid=5096 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 spid=5097 suid=74 rport=36409 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_SESSION msg=audit(1398700661.006:678): user pid=5096 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 spid=5097 suid=74 rport=36409 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=USER_AUTH msg=audit(1398700661.072:679): user pid=5096 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=36409 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=USER_AUTH msg=audit(1398700661.072:680): user pid=5096 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=8b:2d:a5:06:3e:34:8a:e0:bf:ca:69:94:eb:59:f0:19 rport=36409 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=USER_ACCT msg=audit(1398700661.082:681): user pid=5096 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700661.083:682): user pid=5096 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=5097 suid=74 rport=36409 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=USER_AUTH msg=audit(1398700661.084:683): user pid=5096 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=ssh res=success'
>type=CRED_ACQ msg=audit(1398700661.084:684): user pid=5096 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=LOGIN msg=audit(1398700661.084:685): pid=5096 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=28
>type=USER_ROLE_CHANGE msg=audit(1398700661.223:686): user pid=5096 uid=0 auid=0 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_START msg=audit(1398700661.230:687): user pid=5096 uid=0 auid=0 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_LOGIN msg=audit(1398700661.243:688): user pid=5096 uid=0 auid=0 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_START msg=audit(1398700661.243:689): user pid=5096 uid=0 auid=0 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700661.244:690): user pid=5099 uid=0 auid=0 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=5099 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700661.245:691): user pid=5099 uid=0 auid=0 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=5099 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRED_REFR msg=audit(1398700661.246:692): user pid=5099 uid=0 auid=0 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_END msg=audit(1398700661.432:693): user pid=5096 uid=0 auid=0 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=CRED_DISP msg=audit(1398700661.432:694): user pid=5096 uid=0 auid=0 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_END msg=audit(1398700661.433:695): user pid=5096 uid=0 auid=0 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_LOGOUT msg=audit(1398700661.433:696): user pid=5096 uid=0 auid=0 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700661.433:697): user pid=5096 uid=0 auid=0 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=5096 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700661.433:698): user pid=5096 uid=0 auid=0 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=5096 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700661.433:699): user pid=5096 uid=0 auid=0 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=5096 suid=0 rport=36409 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=USER_END msg=audit(1398700661.454:700): user pid=5087 uid=0 auid=0 ses=27 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=USER_LOGOUT msg=audit(1398700661.454:701): user pid=5087 uid=0 auid=0 ses=27 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=USER_END msg=audit(1398700661.555:702): user pid=5087 uid=0 auid=0 ses=27 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=CRED_DISP msg=audit(1398700661.556:703): user pid=5087 uid=0 auid=0 ses=27 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700661.557:704): user pid=5087 uid=0 auid=0 ses=27 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=5087 suid=0 rport=38127 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700661.557:705): user pid=5087 uid=0 auid=0 ses=27 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=5087 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700661.557:706): user pid=5087 uid=0 auid=0 ses=27 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=5087 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700661.564:707): user pid=5103 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=5103 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700661.566:708): user pid=5103 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=5103 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=CRYPTO_SESSION msg=audit(1398700661.566:709): user pid=5102 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 spid=5103 suid=74 rport=38128 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=CRYPTO_SESSION msg=audit(1398700661.566:710): user pid=5102 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 spid=5103 suid=74 rport=38128 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=USER_AUTH msg=audit(1398700661.753:711): user pid=5102 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=38128 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=USER_AUTH msg=audit(1398700661.753:712): user pid=5102 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=e7:e2:3d:94:48:cf:f5:8c:5e:54:98:bd:89:a5:29:a9 rport=38128 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=USER_ACCT msg=audit(1398700661.765:713): user pid=5102 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700661.766:714): user pid=5102 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=5103 suid=74 rport=38128 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=USER_AUTH msg=audit(1398700661.767:715): user pid=5102 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=ssh res=success'
>type=CRED_ACQ msg=audit(1398700661.767:716): user pid=5102 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=LOGIN msg=audit(1398700661.768:717): pid=5102 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=29
>type=USER_ROLE_CHANGE msg=audit(1398700661.897:718): user pid=5102 uid=0 auid=0 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=USER_START msg=audit(1398700661.904:719): user pid=5102 uid=0 auid=0 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=USER_LOGIN msg=audit(1398700661.916:720): user pid=5102 uid=0 auid=0 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=USER_START msg=audit(1398700661.916:721): user pid=5102 uid=0 auid=0 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700661.918:722): user pid=5105 uid=0 auid=0 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=5105 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700661.918:723): user pid=5105 uid=0 auid=0 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=5105 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=CRED_REFR msg=audit(1398700661.919:724): user pid=5105 uid=0 auid=0 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700662.007:725): user pid=5112 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=5112 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700662.007:726): user pid=5112 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=5112 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_SESSION msg=audit(1398700662.008:727): user pid=5111 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 spid=5112 suid=74 rport=36411 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_SESSION msg=audit(1398700662.008:728): user pid=5111 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 spid=5112 suid=74 rport=36411 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=USER_AUTH msg=audit(1398700662.071:729): user pid=5111 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=36411 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=USER_AUTH msg=audit(1398700662.072:730): user pid=5111 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=8b:2d:a5:06:3e:34:8a:e0:bf:ca:69:94:eb:59:f0:19 rport=36411 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=USER_ACCT msg=audit(1398700662.082:731): user pid=5111 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700662.084:732): user pid=5111 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=5112 suid=74 rport=36411 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=USER_AUTH msg=audit(1398700662.085:733): user pid=5111 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=ssh res=success'
>type=CRED_ACQ msg=audit(1398700662.085:734): user pid=5111 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=LOGIN msg=audit(1398700662.085:735): pid=5111 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=30
>type=USER_ROLE_CHANGE msg=audit(1398700662.226:736): user pid=5111 uid=0 auid=0 ses=30 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_START msg=audit(1398700662.231:737): user pid=5111 uid=0 auid=0 ses=30 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_LOGIN msg=audit(1398700662.243:738): user pid=5111 uid=0 auid=0 ses=30 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_START msg=audit(1398700662.243:739): user pid=5111 uid=0 auid=0 ses=30 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700662.244:740): user pid=5114 uid=0 auid=0 ses=30 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=5114 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700662.244:741): user pid=5114 uid=0 auid=0 ses=30 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=5114 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRED_REFR msg=audit(1398700662.248:742): user pid=5114 uid=0 auid=0 ses=30 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_END msg=audit(1398700662.415:743): user pid=5111 uid=0 auid=0 ses=30 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=CRED_DISP msg=audit(1398700662.415:744): user pid=5111 uid=0 auid=0 ses=30 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_END msg=audit(1398700662.417:745): user pid=5111 uid=0 auid=0 ses=30 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_LOGOUT msg=audit(1398700662.417:746): user pid=5111 uid=0 auid=0 ses=30 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700662.418:747): user pid=5111 uid=0 auid=0 ses=30 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=5111 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700662.418:748): user pid=5111 uid=0 auid=0 ses=30 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=5111 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700662.418:749): user pid=5111 uid=0 auid=0 ses=30 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=5111 suid=0 rport=36411 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=USER_END msg=audit(1398700662.427:750): user pid=5102 uid=0 auid=0 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=USER_LOGOUT msg=audit(1398700662.428:751): user pid=5102 uid=0 auid=0 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=USER_END msg=audit(1398700662.528:752): user pid=5102 uid=0 auid=0 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=CRED_DISP msg=audit(1398700662.528:753): user pid=5102 uid=0 auid=0 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700662.529:754): user pid=5102 uid=0 auid=0 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=5102 suid=0 rport=38128 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700662.529:755): user pid=5102 uid=0 auid=0 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=5102 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700662.529:756): user pid=5102 uid=0 auid=0 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=5102 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700662.538:757): user pid=5118 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=5118 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700662.538:758): user pid=5118 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=5118 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=CRYPTO_SESSION msg=audit(1398700662.539:759): user pid=5117 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 spid=5118 suid=74 rport=38129 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=CRYPTO_SESSION msg=audit(1398700662.539:760): user pid=5117 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 spid=5118 suid=74 rport=38129 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=USER_AUTH msg=audit(1398700662.734:761): user pid=5117 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=38129 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=USER_AUTH msg=audit(1398700662.734:762): user pid=5117 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=e7:e2:3d:94:48:cf:f5:8c:5e:54:98:bd:89:a5:29:a9 rport=38129 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=USER_ACCT msg=audit(1398700662.743:763): user pid=5117 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700662.745:764): user pid=5117 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=5118 suid=74 rport=38129 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=USER_AUTH msg=audit(1398700662.745:765): user pid=5117 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=ssh res=success'
>type=CRED_ACQ msg=audit(1398700662.746:766): user pid=5117 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=LOGIN msg=audit(1398700662.746:767): pid=5117 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=31
>type=USER_ROLE_CHANGE msg=audit(1398700662.878:768): user pid=5117 uid=0 auid=0 ses=31 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=USER_START msg=audit(1398700662.886:769): user pid=5117 uid=0 auid=0 ses=31 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=USER_LOGIN msg=audit(1398700662.897:770): user pid=5117 uid=0 auid=0 ses=31 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=USER_START msg=audit(1398700662.897:771): user pid=5117 uid=0 auid=0 ses=31 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700662.898:772): user pid=5120 uid=0 auid=0 ses=31 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=5120 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700662.898:773): user pid=5120 uid=0 auid=0 ses=31 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=5120 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=CRED_REFR msg=audit(1398700662.899:774): user pid=5120 uid=0 auid=0 ses=31 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=USER_END msg=audit(1398700662.957:775): user pid=5117 uid=0 auid=0 ses=31 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=USER_LOGOUT msg=audit(1398700662.957:776): user pid=5117 uid=0 auid=0 ses=31 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=USER_END msg=audit(1398700663.056:777): user pid=5117 uid=0 auid=0 ses=31 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=CRED_DISP msg=audit(1398700663.057:778): user pid=5117 uid=0 auid=0 ses=31 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700663.057:779): user pid=5117 uid=0 auid=0 ses=31 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=5117 suid=0 rport=38129 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700663.057:780): user pid=5117 uid=0 auid=0 ses=31 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=5117 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700663.058:781): user pid=5117 uid=0 auid=0 ses=31 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=5117 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700663.067:782): user pid=5126 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=5126 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700663.067:783): user pid=5126 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=5126 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=CRYPTO_SESSION msg=audit(1398700663.068:784): user pid=5125 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 spid=5126 suid=74 rport=38130 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=CRYPTO_SESSION msg=audit(1398700663.068:785): user pid=5125 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 spid=5126 suid=74 rport=38130 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=USER_AUTH msg=audit(1398700663.258:786): user pid=5125 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=38130 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=USER_AUTH msg=audit(1398700663.258:787): user pid=5125 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=e7:e2:3d:94:48:cf:f5:8c:5e:54:98:bd:89:a5:29:a9 rport=38130 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=USER_ACCT msg=audit(1398700663.268:788): user pid=5125 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700663.268:789): user pid=5125 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=5126 suid=74 rport=38130 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=USER_AUTH msg=audit(1398700663.269:790): user pid=5125 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=ssh res=success'
>type=CRED_ACQ msg=audit(1398700663.269:791): user pid=5125 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=LOGIN msg=audit(1398700663.269:792): pid=5125 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=32
>type=USER_ROLE_CHANGE msg=audit(1398700663.399:793): user pid=5125 uid=0 auid=0 ses=32 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=USER_START msg=audit(1398700663.406:794): user pid=5125 uid=0 auid=0 ses=32 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=USER_LOGIN msg=audit(1398700663.414:795): user pid=5125 uid=0 auid=0 ses=32 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=USER_START msg=audit(1398700663.415:796): user pid=5125 uid=0 auid=0 ses=32 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700663.416:797): user pid=5128 uid=0 auid=0 ses=32 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=5128 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700663.416:798): user pid=5128 uid=0 auid=0 ses=32 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=5128 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=CRED_REFR msg=audit(1398700663.417:799): user pid=5128 uid=0 auid=0 ses=32 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700663.511:800): user pid=5135 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=5135 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700663.511:801): user pid=5135 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=5135 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_SESSION msg=audit(1398700663.512:802): user pid=5134 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 spid=5135 suid=74 rport=36413 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_SESSION msg=audit(1398700663.512:803): user pid=5134 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 spid=5135 suid=74 rport=36413 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=USER_AUTH msg=audit(1398700663.578:804): user pid=5134 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=36413 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=USER_AUTH msg=audit(1398700663.578:805): user pid=5134 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=8b:2d:a5:06:3e:34:8a:e0:bf:ca:69:94:eb:59:f0:19 rport=36413 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=USER_ACCT msg=audit(1398700663.588:806): user pid=5134 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700663.591:807): user pid=5134 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=5135 suid=74 rport=36413 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=USER_AUTH msg=audit(1398700663.592:808): user pid=5134 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=ssh res=success'
>type=CRED_ACQ msg=audit(1398700663.592:809): user pid=5134 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=LOGIN msg=audit(1398700663.592:810): pid=5134 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=33
>type=USER_ROLE_CHANGE msg=audit(1398700663.729:811): user pid=5134 uid=0 auid=0 ses=33 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_START msg=audit(1398700663.736:812): user pid=5134 uid=0 auid=0 ses=33 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_LOGIN msg=audit(1398700663.746:813): user pid=5134 uid=0 auid=0 ses=33 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_START msg=audit(1398700663.746:814): user pid=5134 uid=0 auid=0 ses=33 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700663.747:815): user pid=5137 uid=0 auid=0 ses=33 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=5137 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700663.747:816): user pid=5137 uid=0 auid=0 ses=33 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=5137 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRED_REFR msg=audit(1398700663.748:817): user pid=5137 uid=0 auid=0 ses=33 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_END msg=audit(1398700663.819:818): user pid=5134 uid=0 auid=0 ses=33 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=CRED_DISP msg=audit(1398700663.819:819): user pid=5134 uid=0 auid=0 ses=33 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_END msg=audit(1398700663.820:820): user pid=5134 uid=0 auid=0 ses=33 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_LOGOUT msg=audit(1398700663.820:821): user pid=5134 uid=0 auid=0 ses=33 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700663.820:822): user pid=5134 uid=0 auid=0 ses=33 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=5134 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700663.820:823): user pid=5134 uid=0 auid=0 ses=33 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=5134 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700663.820:824): user pid=5134 uid=0 auid=0 ses=33 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=5134 suid=0 rport=36413 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=USER_END msg=audit(1398700663.821:825): user pid=5125 uid=0 auid=0 ses=32 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=USER_LOGOUT msg=audit(1398700663.822:826): user pid=5125 uid=0 auid=0 ses=32 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=USER_END msg=audit(1398700663.922:827): user pid=5125 uid=0 auid=0 ses=32 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=CRED_DISP msg=audit(1398700663.922:828): user pid=5125 uid=0 auid=0 ses=32 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700663.923:829): user pid=5125 uid=0 auid=0 ses=32 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=5125 suid=0 rport=38130 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700663.923:830): user pid=5125 uid=0 auid=0 ses=32 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=5125 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700663.923:831): user pid=5125 uid=0 auid=0 ses=32 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=5125 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700663.936:832): user pid=5148 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=5148 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700663.936:833): user pid=5148 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=5148 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=CRYPTO_SESSION msg=audit(1398700663.937:834): user pid=5147 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 spid=5148 suid=74 rport=38131 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=CRYPTO_SESSION msg=audit(1398700663.937:835): user pid=5147 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 spid=5148 suid=74 rport=38131 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=USER_AUTH msg=audit(1398700664.134:836): user pid=5147 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=38131 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=USER_AUTH msg=audit(1398700664.134:837): user pid=5147 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=e7:e2:3d:94:48:cf:f5:8c:5e:54:98:bd:89:a5:29:a9 rport=38131 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=USER_ACCT msg=audit(1398700664.147:838): user pid=5147 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700664.148:839): user pid=5147 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=5148 suid=74 rport=38131 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=USER_AUTH msg=audit(1398700664.149:840): user pid=5147 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=ssh res=success'
>type=CRED_ACQ msg=audit(1398700664.149:841): user pid=5147 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=LOGIN msg=audit(1398700664.149:842): pid=5147 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=34
>type=USER_ROLE_CHANGE msg=audit(1398700664.292:843): user pid=5147 uid=0 auid=0 ses=34 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=USER_START msg=audit(1398700664.300:844): user pid=5147 uid=0 auid=0 ses=34 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=USER_LOGIN msg=audit(1398700664.313:845): user pid=5147 uid=0 auid=0 ses=34 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=USER_START msg=audit(1398700664.314:846): user pid=5147 uid=0 auid=0 ses=34 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700664.314:847): user pid=5150 uid=0 auid=0 ses=34 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=5150 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700664.314:848): user pid=5150 uid=0 auid=0 ses=34 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=5150 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=CRED_REFR msg=audit(1398700664.317:849): user pid=5150 uid=0 auid=0 ses=34 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=USER_ACCT msg=audit(1398700682.293:850): user pid=5169 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=CRED_ACQ msg=audit(1398700682.293:851): user pid=5169 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=LOGIN msg=audit(1398700682.296:852): pid=5169 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=35
>type=USER_START msg=audit(1398700682.306:853): user pid=5169 uid=0 auid=0 ses=35 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=CRED_DISP msg=audit(1398700682.371:854): user pid=5169 uid=0 auid=0 ses=35 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=USER_END msg=audit(1398700682.371:855): user pid=5169 uid=0 auid=0 ses=35 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=USER_ACCT msg=audit(1398700741.415:856): user pid=5260 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=CRED_ACQ msg=audit(1398700741.415:857): user pid=5260 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=LOGIN msg=audit(1398700741.426:858): pid=5260 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=36
>type=USER_START msg=audit(1398700741.432:859): user pid=5260 uid=0 auid=0 ses=36 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=CRED_DISP msg=audit(1398700741.481:860): user pid=5260 uid=0 auid=0 ses=36 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=USER_END msg=audit(1398700741.481:861): user pid=5260 uid=0 auid=0 ses=36 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=ADD_USER msg=audit(1398700746.852:862): user pid=5298 uid=0 auid=0 ses=34 subj=unconfined_u:system_r:useradd_t:s0-s0:c0.c1023 msg='op=adding user acct="postfix" exe="/usr/sbin/useradd" hostname=? addr=? terminal=? res=failed'
>type=ADD_USER msg=audit(1398700746.852:863): user pid=5298 uid=0 auid=0 ses=34 subj=unconfined_u:system_r:useradd_t:s0-s0:c0.c1023 msg='op=adding user acct="postfix" exe="/usr/sbin/useradd" hostname=? addr=? terminal=? res=failed'
>type=MAC_POLICY_LOAD msg=audit(1398700771.373:864): policy loaded auid=0 ses=34
>type=SYSCALL msg=audit(1398700771.373:864): arch=c000003e syscall=1 success=yes exit=7292749 a0=4 a1=7f345f34b000 a2=6f474d a3=7fff73d858e0 items=0 ppid=5739 pid=5746 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=34 comm="load_policy" exe="/sbin/load_policy" subj=unconfined_u:system_r:load_policy_t:s0-s0:c0.c1023 key=(null)
>type=USER_ACCT msg=audit(1398700801.504:865): user pid=15136 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=CRED_ACQ msg=audit(1398700801.504:866): user pid=15136 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=LOGIN msg=audit(1398700801.509:867): pid=15136 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=37
>type=USER_START msg=audit(1398700801.514:868): user pid=15136 uid=0 auid=0 ses=37 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=CRED_DISP msg=audit(1398700801.687:869): user pid=15136 uid=0 auid=0 ses=37 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=USER_END msg=audit(1398700801.689:870): user pid=15136 uid=0 auid=0 ses=37 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=USER_END msg=audit(1398700820.380:871): user pid=5147 uid=0 auid=0 ses=34 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=USER_LOGOUT msg=audit(1398700820.381:872): user pid=5147 uid=0 auid=0 ses=34 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=USER_END msg=audit(1398700820.474:873): user pid=5147 uid=0 auid=0 ses=34 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=CRED_DISP msg=audit(1398700820.475:874): user pid=5147 uid=0 auid=0 ses=34 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700820.476:875): user pid=5147 uid=0 auid=0 ses=34 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=5147 suid=0 rport=38131 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700820.476:876): user pid=5147 uid=0 auid=0 ses=34 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=5147 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700820.476:877): user pid=5147 uid=0 auid=0 ses=34 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=5147 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700820.489:878): user pid=15169 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=15169 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700820.489:879): user pid=15169 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=15169 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=CRYPTO_SESSION msg=audit(1398700820.490:880): user pid=15168 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 spid=15169 suid=74 rport=38188 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=CRYPTO_SESSION msg=audit(1398700820.490:881): user pid=15168 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 spid=15169 suid=74 rport=38188 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=USER_AUTH msg=audit(1398700820.683:882): user pid=15168 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=38188 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=USER_AUTH msg=audit(1398700820.683:883): user pid=15168 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=e7:e2:3d:94:48:cf:f5:8c:5e:54:98:bd:89:a5:29:a9 rport=38188 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=USER_ACCT msg=audit(1398700820.691:884): user pid=15168 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700820.691:885): user pid=15168 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=15169 suid=74 rport=38188 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=USER_AUTH msg=audit(1398700820.692:886): user pid=15168 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=ssh res=success'
>type=CRED_ACQ msg=audit(1398700820.693:887): user pid=15168 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=LOGIN msg=audit(1398700820.693:888): pid=15168 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=38
>type=USER_ROLE_CHANGE msg=audit(1398700820.848:889): user pid=15168 uid=0 auid=0 ses=38 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=USER_START msg=audit(1398700820.854:890): user pid=15168 uid=0 auid=0 ses=38 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=USER_LOGIN msg=audit(1398700820.886:891): user pid=15168 uid=0 auid=0 ses=38 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=USER_START msg=audit(1398700820.886:892): user pid=15168 uid=0 auid=0 ses=38 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700820.889:893): user pid=15171 uid=0 auid=0 ses=38 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=15171 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700820.889:894): user pid=15171 uid=0 auid=0 ses=38 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=15171 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=CRED_REFR msg=audit(1398700820.890:895): user pid=15171 uid=0 auid=0 ses=38 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=USER_END msg=audit(1398700820.930:896): user pid=15168 uid=0 auid=0 ses=38 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=USER_LOGOUT msg=audit(1398700820.931:897): user pid=15168 uid=0 auid=0 ses=38 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=USER_END msg=audit(1398700820.932:898): user pid=15168 uid=0 auid=0 ses=38 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=CRED_DISP msg=audit(1398700820.932:899): user pid=15168 uid=0 auid=0 ses=38 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700820.933:900): user pid=15168 uid=0 auid=0 ses=38 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=15168 suid=0 rport=38188 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700820.933:901): user pid=15168 uid=0 auid=0 ses=38 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=15168 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700820.933:902): user pid=15168 uid=0 auid=0 ses=38 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=15168 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700820.941:903): user pid=15177 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=15177 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700820.941:904): user pid=15177 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=15177 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=CRYPTO_SESSION msg=audit(1398700820.941:905): user pid=15176 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 spid=15177 suid=74 rport=38190 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=CRYPTO_SESSION msg=audit(1398700820.942:906): user pid=15176 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 spid=15177 suid=74 rport=38190 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=USER_AUTH msg=audit(1398700821.129:907): user pid=15176 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=38190 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=USER_AUTH msg=audit(1398700821.129:908): user pid=15176 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=e7:e2:3d:94:48:cf:f5:8c:5e:54:98:bd:89:a5:29:a9 rport=38190 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=USER_ACCT msg=audit(1398700821.138:909): user pid=15176 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700821.139:910): user pid=15176 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=15177 suid=74 rport=38190 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=USER_AUTH msg=audit(1398700821.140:911): user pid=15176 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=ssh res=success'
>type=CRED_ACQ msg=audit(1398700821.140:912): user pid=15176 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=LOGIN msg=audit(1398700821.140:913): pid=15176 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=39
>type=USER_ROLE_CHANGE msg=audit(1398700821.276:914): user pid=15176 uid=0 auid=0 ses=39 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=USER_START msg=audit(1398700821.285:915): user pid=15176 uid=0 auid=0 ses=39 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=USER_LOGIN msg=audit(1398700821.292:916): user pid=15176 uid=0 auid=0 ses=39 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=USER_START msg=audit(1398700821.292:917): user pid=15176 uid=0 auid=0 ses=39 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700821.293:918): user pid=15179 uid=0 auid=0 ses=39 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=15179 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700821.293:919): user pid=15179 uid=0 auid=0 ses=39 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=15179 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=CRED_REFR msg=audit(1398700821.294:920): user pid=15179 uid=0 auid=0 ses=39 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=USER_END msg=audit(1398700821.484:921): user pid=15176 uid=0 auid=0 ses=39 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=USER_LOGOUT msg=audit(1398700821.484:922): user pid=15176 uid=0 auid=0 ses=39 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=USER_END msg=audit(1398700821.487:923): user pid=15176 uid=0 auid=0 ses=39 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=CRED_DISP msg=audit(1398700821.488:924): user pid=15176 uid=0 auid=0 ses=39 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700821.488:925): user pid=15176 uid=0 auid=0 ses=39 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=15176 suid=0 rport=38190 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700821.488:926): user pid=15176 uid=0 auid=0 ses=39 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=15176 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700821.488:927): user pid=15176 uid=0 auid=0 ses=39 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=15176 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700821.493:928): user pid=15189 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=15189 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700821.493:929): user pid=15189 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=15189 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=CRYPTO_SESSION msg=audit(1398700821.494:930): user pid=15188 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 spid=15189 suid=74 rport=38191 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=CRYPTO_SESSION msg=audit(1398700821.494:931): user pid=15188 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 spid=15189 suid=74 rport=38191 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=USER_AUTH msg=audit(1398700821.697:932): user pid=15188 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=38191 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=USER_AUTH msg=audit(1398700821.697:933): user pid=15188 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=e7:e2:3d:94:48:cf:f5:8c:5e:54:98:bd:89:a5:29:a9 rport=38191 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=USER_ACCT msg=audit(1398700821.711:934): user pid=15188 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700821.712:935): user pid=15188 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=15189 suid=74 rport=38191 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=USER_AUTH msg=audit(1398700821.713:936): user pid=15188 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=ssh res=success'
>type=CRED_ACQ msg=audit(1398700821.714:937): user pid=15188 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=LOGIN msg=audit(1398700821.714:938): pid=15188 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=40
>type=USER_ROLE_CHANGE msg=audit(1398700821.851:939): user pid=15188 uid=0 auid=0 ses=40 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=USER_START msg=audit(1398700821.858:940): user pid=15188 uid=0 auid=0 ses=40 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=USER_LOGIN msg=audit(1398700821.868:941): user pid=15188 uid=0 auid=0 ses=40 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=USER_START msg=audit(1398700821.869:942): user pid=15188 uid=0 auid=0 ses=40 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700821.870:943): user pid=15191 uid=0 auid=0 ses=40 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=15191 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700821.870:944): user pid=15191 uid=0 auid=0 ses=40 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=15191 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=CRED_REFR msg=audit(1398700821.872:945): user pid=15191 uid=0 auid=0 ses=40 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=USER_END msg=audit(1398700821.930:946): user pid=15188 uid=0 auid=0 ses=40 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=USER_LOGOUT msg=audit(1398700821.931:947): user pid=15188 uid=0 auid=0 ses=40 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=USER_END msg=audit(1398700822.030:948): user pid=15188 uid=0 auid=0 ses=40 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=CRED_DISP msg=audit(1398700822.030:949): user pid=15188 uid=0 auid=0 ses=40 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700822.030:950): user pid=15188 uid=0 auid=0 ses=40 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=15188 suid=0 rport=38191 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700822.031:951): user pid=15188 uid=0 auid=0 ses=40 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=15188 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700822.031:952): user pid=15188 uid=0 auid=0 ses=40 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=15188 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700822.041:953): user pid=15201 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=15201 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700822.041:954): user pid=15201 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=15201 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=CRYPTO_SESSION msg=audit(1398700822.042:955): user pid=15200 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 spid=15201 suid=74 rport=38192 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=CRYPTO_SESSION msg=audit(1398700822.042:956): user pid=15200 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 spid=15201 suid=74 rport=38192 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=USER_AUTH msg=audit(1398700822.230:957): user pid=15200 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=38192 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=USER_AUTH msg=audit(1398700822.230:958): user pid=15200 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=e7:e2:3d:94:48:cf:f5:8c:5e:54:98:bd:89:a5:29:a9 rport=38192 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=USER_ACCT msg=audit(1398700822.243:959): user pid=15200 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700822.243:960): user pid=15200 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=15201 suid=74 rport=38192 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=USER_AUTH msg=audit(1398700822.244:961): user pid=15200 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=ssh res=success'
>type=CRED_ACQ msg=audit(1398700822.245:962): user pid=15200 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=LOGIN msg=audit(1398700822.245:963): pid=15200 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=41
>type=USER_ROLE_CHANGE msg=audit(1398700822.385:964): user pid=15200 uid=0 auid=0 ses=41 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=USER_START msg=audit(1398700822.392:965): user pid=15200 uid=0 auid=0 ses=41 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=USER_LOGIN msg=audit(1398700822.412:966): user pid=15200 uid=0 auid=0 ses=41 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=USER_START msg=audit(1398700822.412:967): user pid=15200 uid=0 auid=0 ses=41 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700822.415:968): user pid=15203 uid=0 auid=0 ses=41 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=15203 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700822.415:969): user pid=15203 uid=0 auid=0 ses=41 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=15203 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=CRED_REFR msg=audit(1398700822.416:970): user pid=15203 uid=0 auid=0 ses=41 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=SYSTEM_RUNLEVEL msg=audit(1398700822.489:971): user pid=15203 uid=0 auid=0 ses=41 subj=unconfined_u:unconfined_r:shutdown_t:s0-s0:c0.c1023 msg='old-level=3 new-level=6 exe="/sbin/shutdown" hostname=? addr=? terminal=? res=success'
>type=SYSTEM_SHUTDOWN msg=audit(1398700822.489:972): user pid=15203 uid=0 auid=0 ses=41 subj=unconfined_u:unconfined_r:shutdown_t:s0-s0:c0.c1023 msg='init exe="/sbin/shutdown" hostname=? addr=? terminal=? res=success'
>type=USER_END msg=audit(1398700822.516:973): user pid=15200 uid=0 auid=0 ses=41 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=USER_LOGOUT msg=audit(1398700822.517:974): user pid=15200 uid=0 auid=0 ses=41 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=USER_END msg=audit(1398700822.620:975): user pid=15200 uid=0 auid=0 ses=41 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=CRED_DISP msg=audit(1398700822.621:976): user pid=15200 uid=0 auid=0 ses=41 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700822.622:977): user pid=15200 uid=0 auid=0 ses=41 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=15200 suid=0 rport=38192 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700822.622:978): user pid=15200 uid=0 auid=0 ses=41 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=15200 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700822.622:979): user pid=15200 uid=0 auid=0 ses=41 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=15200 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700823.269:980): user pid=4411 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=4411 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700823.269:981): user pid=4411 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=4411 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
>type=DAEMON_END msg=audit(1398700823.793:4064): auditd normal halt, sending auid=0 pid=15335 subj=system_u:system_r:initrc_t:s0 res=success
>type=DAEMON_START msg=audit(1398700853.520:6141): auditd start, ver=2.2 format=raw kernel=2.6.32-431.11.2.el6.x86_64 auid=4294967295 pid=933 subj=system_u:system_r:auditd_t:s0 res=success
>type=CONFIG_CHANGE msg=audit(1398700853.641:4): audit_backlog_limit=320 old=64 auid=4294967295 ses=4294967295 subj=system_u:system_r:auditctl_t:s0 res=1
>type=CRYPTO_KEY_USER msg=audit(1398700867.742:5): user pid=4594 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=4594 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700867.742:6): user pid=4594 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=4594 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700867.743:7): user pid=4598 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=4598 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700867.743:8): user pid=4598 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=4598 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=CRYPTO_SESSION msg=audit(1398700867.743:9): user pid=4596 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 spid=4598 suid=74 rport=38218 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=CRYPTO_SESSION msg=audit(1398700867.743:10): user pid=4596 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 spid=4598 suid=74 rport=38218 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=USER_AUTH msg=audit(1398700867.988:11): user pid=4596 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=38218 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=USER_AUTH msg=audit(1398700867.988:12): user pid=4596 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=e7:e2:3d:94:48:cf:f5:8c:5e:54:98:bd:89:a5:29:a9 rport=38218 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=USER_ACCT msg=audit(1398700868.000:13): user pid=4596 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700868.002:14): user pid=4596 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=4598 suid=74 rport=38218 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=USER_AUTH msg=audit(1398700868.003:15): user pid=4596 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=ssh res=success'
>type=CRED_ACQ msg=audit(1398700868.005:16): user pid=4596 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=LOGIN msg=audit(1398700868.005:17): pid=4596 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=1
>type=USER_ROLE_CHANGE msg=audit(1398700868.170:18): user pid=4596 uid=0 auid=0 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=USER_START msg=audit(1398700868.178:19): user pid=4596 uid=0 auid=0 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=USER_LOGIN msg=audit(1398700868.218:20): user pid=4596 uid=0 auid=0 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=USER_START msg=audit(1398700868.223:21): user pid=4596 uid=0 auid=0 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700868.229:22): user pid=4635 uid=0 auid=0 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=4635 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700868.229:23): user pid=4635 uid=0 auid=0 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=4635 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=CRED_REFR msg=audit(1398700868.231:24): user pid=4635 uid=0 auid=0 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=USER_END msg=audit(1398700868.391:25): user pid=4596 uid=0 auid=0 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=USER_LOGOUT msg=audit(1398700868.397:26): user pid=4596 uid=0 auid=0 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=USER_END msg=audit(1398700868.504:27): user pid=4596 uid=0 auid=0 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=CRED_DISP msg=audit(1398700868.505:28): user pid=4596 uid=0 auid=0 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700868.505:29): user pid=4596 uid=0 auid=0 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=4596 suid=0 rport=38218 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700868.505:30): user pid=4596 uid=0 auid=0 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=4596 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700868.505:31): user pid=4596 uid=0 auid=0 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=4596 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700868.514:32): user pid=4651 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=4651 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700868.514:33): user pid=4651 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=4651 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=CRYPTO_SESSION msg=audit(1398700868.520:34): user pid=4649 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 spid=4651 suid=74 rport=38219 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=CRYPTO_SESSION msg=audit(1398700868.520:35): user pid=4649 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 spid=4651 suid=74 rport=38219 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=USER_AUTH msg=audit(1398700868.719:36): user pid=4649 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=38219 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=USER_AUTH msg=audit(1398700868.719:37): user pid=4649 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=e7:e2:3d:94:48:cf:f5:8c:5e:54:98:bd:89:a5:29:a9 rport=38219 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=USER_ACCT msg=audit(1398700868.726:38): user pid=4649 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700868.730:39): user pid=4649 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=4651 suid=74 rport=38219 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=USER_AUTH msg=audit(1398700868.731:40): user pid=4649 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=ssh res=success'
>type=CRED_ACQ msg=audit(1398700868.732:41): user pid=4649 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=LOGIN msg=audit(1398700868.732:42): pid=4649 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=2
>type=USER_ROLE_CHANGE msg=audit(1398700868.849:43): user pid=4649 uid=0 auid=0 ses=2 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=USER_START msg=audit(1398700868.855:44): user pid=4649 uid=0 auid=0 ses=2 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=USER_LOGIN msg=audit(1398700868.857:45): user pid=4649 uid=0 auid=0 ses=2 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=USER_START msg=audit(1398700868.858:46): user pid=4649 uid=0 auid=0 ses=2 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700868.858:47): user pid=4671 uid=0 auid=0 ses=2 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=4671 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700868.859:48): user pid=4671 uid=0 auid=0 ses=2 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=4671 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=CRED_REFR msg=audit(1398700868.860:49): user pid=4671 uid=0 auid=0 ses=2 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=USER_END msg=audit(1398700868.913:50): user pid=4649 uid=0 auid=0 ses=2 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=USER_LOGOUT msg=audit(1398700868.914:51): user pid=4649 uid=0 auid=0 ses=2 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=USER_END msg=audit(1398700869.014:52): user pid=4649 uid=0 auid=0 ses=2 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=CRED_DISP msg=audit(1398700869.015:53): user pid=4649 uid=0 auid=0 ses=2 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700869.016:54): user pid=4649 uid=0 auid=0 ses=2 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=4649 suid=0 rport=38219 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700869.016:55): user pid=4649 uid=0 auid=0 ses=2 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=4649 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700869.016:56): user pid=4649 uid=0 auid=0 ses=2 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=4649 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700869.023:57): user pid=4681 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=4681 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700869.023:58): user pid=4681 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=4681 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=CRYPTO_SESSION msg=audit(1398700869.024:59): user pid=4680 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 spid=4681 suid=74 rport=38220 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=CRYPTO_SESSION msg=audit(1398700869.024:60): user pid=4680 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 spid=4681 suid=74 rport=38220 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=USER_AUTH msg=audit(1398700869.211:61): user pid=4680 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=38220 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=USER_AUTH msg=audit(1398700869.212:62): user pid=4680 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=e7:e2:3d:94:48:cf:f5:8c:5e:54:98:bd:89:a5:29:a9 rport=38220 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=USER_ACCT msg=audit(1398700869.219:63): user pid=4680 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700869.219:64): user pid=4680 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=4681 suid=74 rport=38220 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=USER_AUTH msg=audit(1398700869.220:65): user pid=4680 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=ssh res=success'
>type=CRED_ACQ msg=audit(1398700869.220:66): user pid=4680 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=LOGIN msg=audit(1398700869.220:67): pid=4680 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=3
>type=USER_ROLE_CHANGE msg=audit(1398700869.326:68): user pid=4680 uid=0 auid=0 ses=3 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=USER_START msg=audit(1398700869.333:69): user pid=4680 uid=0 auid=0 ses=3 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=USER_LOGIN msg=audit(1398700869.358:70): user pid=4680 uid=0 auid=0 ses=3 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=USER_START msg=audit(1398700869.358:71): user pid=4680 uid=0 auid=0 ses=3 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700869.359:72): user pid=4683 uid=0 auid=0 ses=3 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=4683 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700869.359:73): user pid=4683 uid=0 auid=0 ses=3 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=4683 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=CRED_REFR msg=audit(1398700869.361:74): user pid=4683 uid=0 auid=0 ses=3 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=USER_END msg=audit(1398700869.408:75): user pid=4680 uid=0 auid=0 ses=3 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=USER_LOGOUT msg=audit(1398700869.408:76): user pid=4680 uid=0 auid=0 ses=3 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=USER_END msg=audit(1398700869.508:77): user pid=4680 uid=0 auid=0 ses=3 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=CRED_DISP msg=audit(1398700869.509:78): user pid=4680 uid=0 auid=0 ses=3 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700869.509:79): user pid=4680 uid=0 auid=0 ses=3 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=4680 suid=0 rport=38220 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700869.510:80): user pid=4680 uid=0 auid=0 ses=3 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=4680 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700869.510:81): user pid=4680 uid=0 auid=0 ses=3 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=4680 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700869.517:82): user pid=4689 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=4689 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700869.517:83): user pid=4689 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=4689 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=CRYPTO_SESSION msg=audit(1398700869.517:84): user pid=4688 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 spid=4689 suid=74 rport=38221 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=CRYPTO_SESSION msg=audit(1398700869.518:85): user pid=4688 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 spid=4689 suid=74 rport=38221 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=USER_AUTH msg=audit(1398700869.706:86): user pid=4688 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=38221 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=USER_AUTH msg=audit(1398700869.706:87): user pid=4688 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=e7:e2:3d:94:48:cf:f5:8c:5e:54:98:bd:89:a5:29:a9 rport=38221 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=USER_ACCT msg=audit(1398700869.715:88): user pid=4688 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700869.716:89): user pid=4688 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=4689 suid=74 rport=38221 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=USER_AUTH msg=audit(1398700869.716:90): user pid=4688 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=ssh res=success'
>type=CRED_ACQ msg=audit(1398700869.716:91): user pid=4688 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=LOGIN msg=audit(1398700869.716:92): pid=4688 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=4
>type=USER_ROLE_CHANGE msg=audit(1398700869.814:93): user pid=4688 uid=0 auid=0 ses=4 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=USER_START msg=audit(1398700869.819:94): user pid=4688 uid=0 auid=0 ses=4 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=USER_LOGIN msg=audit(1398700869.823:95): user pid=4688 uid=0 auid=0 ses=4 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=USER_START msg=audit(1398700869.823:96): user pid=4688 uid=0 auid=0 ses=4 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700869.825:97): user pid=4691 uid=0 auid=0 ses=4 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=4691 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700869.826:98): user pid=4691 uid=0 auid=0 ses=4 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=4691 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=CRED_REFR msg=audit(1398700869.828:99): user pid=4691 uid=0 auid=0 ses=4 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=USER_END msg=audit(1398700869.907:100): user pid=4688 uid=0 auid=0 ses=4 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=USER_LOGOUT msg=audit(1398700869.908:101): user pid=4688 uid=0 auid=0 ses=4 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=USER_END msg=audit(1398700870.007:102): user pid=4688 uid=0 auid=0 ses=4 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=CRED_DISP msg=audit(1398700870.007:103): user pid=4688 uid=0 auid=0 ses=4 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700870.008:104): user pid=4688 uid=0 auid=0 ses=4 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=4688 suid=0 rport=38221 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700870.008:105): user pid=4688 uid=0 auid=0 ses=4 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=4688 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700870.008:106): user pid=4688 uid=0 auid=0 ses=4 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=4688 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700870.024:107): user pid=4702 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=4702 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700870.024:108): user pid=4702 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=4702 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=CRYPTO_SESSION msg=audit(1398700870.025:109): user pid=4701 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 spid=4702 suid=74 rport=38222 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=CRYPTO_SESSION msg=audit(1398700870.025:110): user pid=4701 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 spid=4702 suid=74 rport=38222 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=USER_AUTH msg=audit(1398700870.262:111): user pid=4701 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=38222 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=USER_AUTH msg=audit(1398700870.262:112): user pid=4701 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=e7:e2:3d:94:48:cf:f5:8c:5e:54:98:bd:89:a5:29:a9 rport=38222 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=USER_ACCT msg=audit(1398700870.271:113): user pid=4701 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700870.272:114): user pid=4701 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=4702 suid=74 rport=38222 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=USER_AUTH msg=audit(1398700870.272:115): user pid=4701 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=ssh res=success'
>type=CRED_ACQ msg=audit(1398700870.273:116): user pid=4701 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=LOGIN msg=audit(1398700870.273:117): pid=4701 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=5
>type=USER_ROLE_CHANGE msg=audit(1398700870.368:118): user pid=4701 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=USER_START msg=audit(1398700870.373:119): user pid=4701 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=USER_LOGIN msg=audit(1398700870.391:120): user pid=4701 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=USER_START msg=audit(1398700870.391:121): user pid=4701 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700870.393:122): user pid=4704 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=4704 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700870.393:123): user pid=4704 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=4704 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=CRED_REFR msg=audit(1398700870.394:124): user pid=4704 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=USER_END msg=audit(1398700870.440:125): user pid=4701 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=USER_LOGOUT msg=audit(1398700870.440:126): user pid=4701 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=USER_END msg=audit(1398700870.540:127): user pid=4701 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=CRED_DISP msg=audit(1398700870.541:128): user pid=4701 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700870.541:129): user pid=4701 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=4701 suid=0 rport=38222 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700870.541:130): user pid=4701 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=4701 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700870.542:131): user pid=4701 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=4701 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700870.550:132): user pid=4711 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=4711 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700870.551:133): user pid=4711 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=4711 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=CRYPTO_SESSION msg=audit(1398700870.551:134): user pid=4710 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 spid=4711 suid=74 rport=38223 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=CRYPTO_SESSION msg=audit(1398700870.551:135): user pid=4710 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 spid=4711 suid=74 rport=38223 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=USER_AUTH msg=audit(1398700870.748:136): user pid=4710 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=38223 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=USER_AUTH msg=audit(1398700870.748:137): user pid=4710 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=e7:e2:3d:94:48:cf:f5:8c:5e:54:98:bd:89:a5:29:a9 rport=38223 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=USER_ACCT msg=audit(1398700870.756:138): user pid=4710 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700870.757:139): user pid=4710 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=4711 suid=74 rport=38223 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=USER_AUTH msg=audit(1398700870.758:140): user pid=4710 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=ssh res=success'
>type=CRED_ACQ msg=audit(1398700870.758:141): user pid=4710 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=LOGIN msg=audit(1398700870.758:142): pid=4710 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=6
>type=USER_ROLE_CHANGE msg=audit(1398700870.864:143): user pid=4710 uid=0 auid=0 ses=6 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=USER_START msg=audit(1398700870.869:144): user pid=4710 uid=0 auid=0 ses=6 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=USER_LOGIN msg=audit(1398700870.894:145): user pid=4710 uid=0 auid=0 ses=6 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=USER_START msg=audit(1398700870.895:146): user pid=4710 uid=0 auid=0 ses=6 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700870.896:147): user pid=4713 uid=0 auid=0 ses=6 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=4713 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700870.896:148): user pid=4713 uid=0 auid=0 ses=6 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=4713 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=CRED_REFR msg=audit(1398700870.898:149): user pid=4713 uid=0 auid=0 ses=6 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=USER_END msg=audit(1398700870.943:150): user pid=4710 uid=0 auid=0 ses=6 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=USER_LOGOUT msg=audit(1398700870.943:151): user pid=4710 uid=0 auid=0 ses=6 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=USER_END msg=audit(1398700871.043:152): user pid=4710 uid=0 auid=0 ses=6 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=CRED_DISP msg=audit(1398700871.044:153): user pid=4710 uid=0 auid=0 ses=6 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700871.044:154): user pid=4710 uid=0 auid=0 ses=6 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=4710 suid=0 rport=38223 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700871.044:155): user pid=4710 uid=0 auid=0 ses=6 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=4710 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700871.044:156): user pid=4710 uid=0 auid=0 ses=6 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=4710 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700871.051:157): user pid=4719 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=4719 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700871.052:158): user pid=4719 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=4719 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=CRYPTO_SESSION msg=audit(1398700871.052:159): user pid=4718 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 spid=4719 suid=74 rport=38224 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=CRYPTO_SESSION msg=audit(1398700871.052:160): user pid=4718 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 spid=4719 suid=74 rport=38224 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=USER_AUTH msg=audit(1398700871.245:161): user pid=4718 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=38224 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=USER_AUTH msg=audit(1398700871.245:162): user pid=4718 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=e7:e2:3d:94:48:cf:f5:8c:5e:54:98:bd:89:a5:29:a9 rport=38224 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=USER_ACCT msg=audit(1398700871.254:163): user pid=4718 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700871.257:164): user pid=4718 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=4719 suid=74 rport=38224 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=USER_AUTH msg=audit(1398700871.259:165): user pid=4718 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=ssh res=success'
>type=CRED_ACQ msg=audit(1398700871.259:166): user pid=4718 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=LOGIN msg=audit(1398700871.260:167): pid=4718 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=7
>type=USER_ROLE_CHANGE msg=audit(1398700871.461:168): user pid=4718 uid=0 auid=0 ses=7 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=USER_START msg=audit(1398700871.469:169): user pid=4718 uid=0 auid=0 ses=7 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=USER_LOGIN msg=audit(1398700871.492:170): user pid=4718 uid=0 auid=0 ses=7 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=USER_START msg=audit(1398700871.492:171): user pid=4718 uid=0 auid=0 ses=7 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700871.494:172): user pid=4721 uid=0 auid=0 ses=7 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=4721 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700871.494:173): user pid=4721 uid=0 auid=0 ses=7 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=4721 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=CRED_REFR msg=audit(1398700871.495:174): user pid=4721 uid=0 auid=0 ses=7 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=USER_END msg=audit(1398700871.541:175): user pid=4718 uid=0 auid=0 ses=7 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=USER_LOGOUT msg=audit(1398700871.541:176): user pid=4718 uid=0 auid=0 ses=7 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=USER_END msg=audit(1398700871.642:177): user pid=4718 uid=0 auid=0 ses=7 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=CRED_DISP msg=audit(1398700871.642:178): user pid=4718 uid=0 auid=0 ses=7 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700871.644:179): user pid=4718 uid=0 auid=0 ses=7 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=4718 suid=0 rport=38224 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700871.644:180): user pid=4718 uid=0 auid=0 ses=7 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=4718 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700871.644:181): user pid=4718 uid=0 auid=0 ses=7 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=4718 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700871.659:182): user pid=4728 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=4728 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700871.660:183): user pid=4728 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=4728 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=CRYPTO_SESSION msg=audit(1398700871.660:184): user pid=4727 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 spid=4728 suid=74 rport=38226 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=CRYPTO_SESSION msg=audit(1398700871.661:185): user pid=4727 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 spid=4728 suid=74 rport=38226 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=USER_AUTH msg=audit(1398700871.855:186): user pid=4727 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=38226 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=USER_AUTH msg=audit(1398700871.855:187): user pid=4727 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=e7:e2:3d:94:48:cf:f5:8c:5e:54:98:bd:89:a5:29:a9 rport=38226 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=USER_ACCT msg=audit(1398700871.866:188): user pid=4727 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700871.867:189): user pid=4727 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=4728 suid=74 rport=38226 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=USER_AUTH msg=audit(1398700871.868:190): user pid=4727 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=ssh res=success'
>type=CRED_ACQ msg=audit(1398700871.869:191): user pid=4727 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=LOGIN msg=audit(1398700871.869:192): pid=4727 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=8
>type=USER_ROLE_CHANGE msg=audit(1398700872.057:193): user pid=4727 uid=0 auid=0 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=USER_START msg=audit(1398700872.064:194): user pid=4727 uid=0 auid=0 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=USER_LOGIN msg=audit(1398700872.098:195): user pid=4727 uid=0 auid=0 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=USER_START msg=audit(1398700872.099:196): user pid=4727 uid=0 auid=0 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700872.102:197): user pid=4730 uid=0 auid=0 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=4730 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700872.102:198): user pid=4730 uid=0 auid=0 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=4730 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=CRED_REFR msg=audit(1398700872.103:199): user pid=4730 uid=0 auid=0 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=USER_END msg=audit(1398700883.010:200): user pid=4727 uid=0 auid=0 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=USER_LOGOUT msg=audit(1398700883.010:201): user pid=4727 uid=0 auid=0 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=USER_END msg=audit(1398700883.111:202): user pid=4727 uid=0 auid=0 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=CRED_DISP msg=audit(1398700883.112:203): user pid=4727 uid=0 auid=0 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700883.112:204): user pid=4727 uid=0 auid=0 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=4727 suid=0 rport=38226 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700883.113:205): user pid=4727 uid=0 auid=0 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=4727 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700883.113:206): user pid=4727 uid=0 auid=0 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=4727 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700883.118:207): user pid=4738 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=4738 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700883.119:208): user pid=4738 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=4738 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=CRYPTO_SESSION msg=audit(1398700883.120:209): user pid=4737 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 spid=4738 suid=74 rport=38229 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=CRYPTO_SESSION msg=audit(1398700883.120:210): user pid=4737 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 spid=4738 suid=74 rport=38229 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=USER_AUTH msg=audit(1398700883.321:211): user pid=4737 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=38229 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=USER_AUTH msg=audit(1398700883.321:212): user pid=4737 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=e7:e2:3d:94:48:cf:f5:8c:5e:54:98:bd:89:a5:29:a9 rport=38229 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=USER_ACCT msg=audit(1398700883.329:213): user pid=4737 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700883.331:214): user pid=4737 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=4738 suid=74 rport=38229 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=USER_AUTH msg=audit(1398700883.332:215): user pid=4737 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=ssh res=success'
>type=CRED_ACQ msg=audit(1398700883.333:216): user pid=4737 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=LOGIN msg=audit(1398700883.333:217): pid=4737 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=9
>type=USER_ROLE_CHANGE msg=audit(1398700883.437:218): user pid=4737 uid=0 auid=0 ses=9 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=USER_START msg=audit(1398700883.441:219): user pid=4737 uid=0 auid=0 ses=9 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=USER_LOGIN msg=audit(1398700883.465:220): user pid=4737 uid=0 auid=0 ses=9 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=USER_START msg=audit(1398700883.465:221): user pid=4737 uid=0 auid=0 ses=9 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700883.467:222): user pid=4740 uid=0 auid=0 ses=9 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=4740 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700883.467:223): user pid=4740 uid=0 auid=0 ses=9 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=4740 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=CRED_REFR msg=audit(1398700883.469:224): user pid=4740 uid=0 auid=0 ses=9 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=USER_END msg=audit(1398700883.782:225): user pid=4737 uid=0 auid=0 ses=9 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=USER_LOGOUT msg=audit(1398700883.783:226): user pid=4737 uid=0 auid=0 ses=9 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=USER_END msg=audit(1398700883.786:227): user pid=4737 uid=0 auid=0 ses=9 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=CRED_DISP msg=audit(1398700883.788:228): user pid=4737 uid=0 auid=0 ses=9 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700883.788:229): user pid=4737 uid=0 auid=0 ses=9 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=4737 suid=0 rport=38229 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700883.788:230): user pid=4737 uid=0 auid=0 ses=9 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=4737 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700883.788:231): user pid=4737 uid=0 auid=0 ses=9 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=4737 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700883.792:232): user pid=4825 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=4825 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700883.792:233): user pid=4825 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=4825 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=CRYPTO_SESSION msg=audit(1398700883.793:234): user pid=4824 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 spid=4825 suid=74 rport=38230 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=CRYPTO_SESSION msg=audit(1398700883.793:235): user pid=4824 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 spid=4825 suid=74 rport=38230 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=USER_AUTH msg=audit(1398700883.982:236): user pid=4824 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=38230 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=USER_AUTH msg=audit(1398700883.982:237): user pid=4824 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=e7:e2:3d:94:48:cf:f5:8c:5e:54:98:bd:89:a5:29:a9 rport=38230 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=USER_ACCT msg=audit(1398700883.991:238): user pid=4824 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700883.992:239): user pid=4824 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=4825 suid=74 rport=38230 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=USER_AUTH msg=audit(1398700883.992:240): user pid=4824 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=ssh res=success'
>type=CRED_ACQ msg=audit(1398700883.993:241): user pid=4824 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=LOGIN msg=audit(1398700883.993:242): pid=4824 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=10
>type=USER_ROLE_CHANGE msg=audit(1398700884.093:243): user pid=4824 uid=0 auid=0 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=USER_START msg=audit(1398700884.099:244): user pid=4824 uid=0 auid=0 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=USER_LOGIN msg=audit(1398700884.128:245): user pid=4824 uid=0 auid=0 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=USER_START msg=audit(1398700884.129:246): user pid=4824 uid=0 auid=0 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700884.131:247): user pid=4827 uid=0 auid=0 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=4827 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700884.131:248): user pid=4827 uid=0 auid=0 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=4827 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=CRED_REFR msg=audit(1398700884.132:249): user pid=4827 uid=0 auid=0 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=USER_END msg=audit(1398700884.180:250): user pid=4824 uid=0 auid=0 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=USER_LOGOUT msg=audit(1398700884.180:251): user pid=4824 uid=0 auid=0 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=USER_END msg=audit(1398700884.278:252): user pid=4824 uid=0 auid=0 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=CRED_DISP msg=audit(1398700884.279:253): user pid=4824 uid=0 auid=0 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700884.280:254): user pid=4824 uid=0 auid=0 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=4824 suid=0 rport=38230 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700884.280:255): user pid=4824 uid=0 auid=0 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=4824 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700884.280:256): user pid=4824 uid=0 auid=0 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=4824 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700884.287:257): user pid=4833 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=4833 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700884.288:258): user pid=4833 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=4833 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=CRYPTO_SESSION msg=audit(1398700884.288:259): user pid=4832 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 spid=4833 suid=74 rport=38231 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=CRYPTO_SESSION msg=audit(1398700884.288:260): user pid=4832 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 spid=4833 suid=74 rport=38231 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=USER_AUTH msg=audit(1398700884.481:261): user pid=4832 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=38231 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=USER_AUTH msg=audit(1398700884.481:262): user pid=4832 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=e7:e2:3d:94:48:cf:f5:8c:5e:54:98:bd:89:a5:29:a9 rport=38231 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=USER_ACCT msg=audit(1398700884.493:263): user pid=4832 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700884.493:264): user pid=4832 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=4833 suid=74 rport=38231 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=USER_AUTH msg=audit(1398700884.494:265): user pid=4832 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=ssh res=success'
>type=CRED_ACQ msg=audit(1398700884.495:266): user pid=4832 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=LOGIN msg=audit(1398700884.495:267): pid=4832 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=11
>type=USER_ROLE_CHANGE msg=audit(1398700884.591:268): user pid=4832 uid=0 auid=0 ses=11 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=USER_START msg=audit(1398700884.595:269): user pid=4832 uid=0 auid=0 ses=11 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=USER_LOGIN msg=audit(1398700884.627:270): user pid=4832 uid=0 auid=0 ses=11 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=USER_START msg=audit(1398700884.627:271): user pid=4832 uid=0 auid=0 ses=11 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700884.628:272): user pid=4835 uid=0 auid=0 ses=11 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=4835 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700884.628:273): user pid=4835 uid=0 auid=0 ses=11 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=4835 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=CRED_REFR msg=audit(1398700884.631:274): user pid=4835 uid=0 auid=0 ses=11 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=USER_END msg=audit(1398700884.684:275): user pid=4832 uid=0 auid=0 ses=11 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=USER_LOGOUT msg=audit(1398700884.684:276): user pid=4832 uid=0 auid=0 ses=11 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=USER_END msg=audit(1398700884.785:277): user pid=4832 uid=0 auid=0 ses=11 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=CRED_DISP msg=audit(1398700884.786:278): user pid=4832 uid=0 auid=0 ses=11 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700884.786:279): user pid=4832 uid=0 auid=0 ses=11 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=4832 suid=0 rport=38231 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700884.786:280): user pid=4832 uid=0 auid=0 ses=11 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=4832 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700884.786:281): user pid=4832 uid=0 auid=0 ses=11 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=4832 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700884.793:282): user pid=4841 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=4841 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700884.793:283): user pid=4841 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=4841 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=CRYPTO_SESSION msg=audit(1398700884.794:284): user pid=4840 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 spid=4841 suid=74 rport=38232 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=CRYPTO_SESSION msg=audit(1398700884.794:285): user pid=4840 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 spid=4841 suid=74 rport=38232 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=USER_AUTH msg=audit(1398700884.982:286): user pid=4840 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=38232 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=USER_AUTH msg=audit(1398700884.982:287): user pid=4840 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=e7:e2:3d:94:48:cf:f5:8c:5e:54:98:bd:89:a5:29:a9 rport=38232 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=USER_ACCT msg=audit(1398700884.989:288): user pid=4840 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700884.989:289): user pid=4840 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=4841 suid=74 rport=38232 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=USER_AUTH msg=audit(1398700884.990:290): user pid=4840 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=ssh res=success'
>type=CRED_ACQ msg=audit(1398700884.990:291): user pid=4840 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=LOGIN msg=audit(1398700884.990:292): pid=4840 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=12
>type=USER_ROLE_CHANGE msg=audit(1398700885.081:293): user pid=4840 uid=0 auid=0 ses=12 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=USER_START msg=audit(1398700885.086:294): user pid=4840 uid=0 auid=0 ses=12 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=USER_LOGIN msg=audit(1398700885.092:295): user pid=4840 uid=0 auid=0 ses=12 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=USER_START msg=audit(1398700885.092:296): user pid=4840 uid=0 auid=0 ses=12 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700885.093:297): user pid=4843 uid=0 auid=0 ses=12 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=4843 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700885.093:298): user pid=4843 uid=0 auid=0 ses=12 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=4843 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=CRED_REFR msg=audit(1398700885.094:299): user pid=4843 uid=0 auid=0 ses=12 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=USER_END msg=audit(1398700885.335:300): user pid=4840 uid=0 auid=0 ses=12 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=USER_LOGOUT msg=audit(1398700885.335:301): user pid=4840 uid=0 auid=0 ses=12 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=USER_END msg=audit(1398700885.336:302): user pid=4840 uid=0 auid=0 ses=12 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=CRED_DISP msg=audit(1398700885.337:303): user pid=4840 uid=0 auid=0 ses=12 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700885.337:304): user pid=4840 uid=0 auid=0 ses=12 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=4840 suid=0 rport=38232 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700885.337:305): user pid=4840 uid=0 auid=0 ses=12 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=4840 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700885.338:306): user pid=4840 uid=0 auid=0 ses=12 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=4840 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700885.342:307): user pid=4854 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=4854 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700885.342:308): user pid=4854 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=4854 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=CRYPTO_SESSION msg=audit(1398700885.343:309): user pid=4853 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 spid=4854 suid=74 rport=38233 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=CRYPTO_SESSION msg=audit(1398700885.343:310): user pid=4853 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 spid=4854 suid=74 rport=38233 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=USER_AUTH msg=audit(1398700885.531:311): user pid=4853 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=38233 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=USER_AUTH msg=audit(1398700885.531:312): user pid=4853 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=e7:e2:3d:94:48:cf:f5:8c:5e:54:98:bd:89:a5:29:a9 rport=38233 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=USER_ACCT msg=audit(1398700885.538:313): user pid=4853 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700885.538:314): user pid=4853 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=4854 suid=74 rport=38233 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=USER_AUTH msg=audit(1398700885.539:315): user pid=4853 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=ssh res=success'
>type=CRED_ACQ msg=audit(1398700885.539:316): user pid=4853 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=LOGIN msg=audit(1398700885.539:317): pid=4853 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=13
>type=USER_ROLE_CHANGE msg=audit(1398700885.635:318): user pid=4853 uid=0 auid=0 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=USER_START msg=audit(1398700885.641:319): user pid=4853 uid=0 auid=0 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=USER_LOGIN msg=audit(1398700885.677:320): user pid=4853 uid=0 auid=0 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=USER_START msg=audit(1398700885.677:321): user pid=4853 uid=0 auid=0 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700885.679:322): user pid=4856 uid=0 auid=0 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=4856 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700885.680:323): user pid=4856 uid=0 auid=0 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=4856 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=CRED_REFR msg=audit(1398700885.681:324): user pid=4856 uid=0 auid=0 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=USER_END msg=audit(1398700885.726:325): user pid=4853 uid=0 auid=0 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=USER_LOGOUT msg=audit(1398700885.726:326): user pid=4853 uid=0 auid=0 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=USER_END msg=audit(1398700885.727:327): user pid=4853 uid=0 auid=0 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=CRED_DISP msg=audit(1398700885.727:328): user pid=4853 uid=0 auid=0 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700885.728:329): user pid=4853 uid=0 auid=0 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=4853 suid=0 rport=38233 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700885.728:330): user pid=4853 uid=0 auid=0 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=4853 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700885.728:331): user pid=4853 uid=0 auid=0 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=4853 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700885.733:332): user pid=4867 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=4867 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700885.733:333): user pid=4867 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=4867 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=CRYPTO_SESSION msg=audit(1398700885.734:334): user pid=4866 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 spid=4867 suid=74 rport=38234 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=CRYPTO_SESSION msg=audit(1398700885.734:335): user pid=4866 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 spid=4867 suid=74 rport=38234 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=USER_AUTH msg=audit(1398700885.934:336): user pid=4866 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=38234 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=USER_AUTH msg=audit(1398700885.934:337): user pid=4866 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=e7:e2:3d:94:48:cf:f5:8c:5e:54:98:bd:89:a5:29:a9 rport=38234 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=USER_ACCT msg=audit(1398700885.942:338): user pid=4866 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700885.942:339): user pid=4866 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=4867 suid=74 rport=38234 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=USER_AUTH msg=audit(1398700885.944:340): user pid=4866 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=ssh res=success'
>type=CRED_ACQ msg=audit(1398700885.945:341): user pid=4866 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=LOGIN msg=audit(1398700885.945:342): pid=4866 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=14
>type=USER_ROLE_CHANGE msg=audit(1398700886.029:343): user pid=4866 uid=0 auid=0 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=USER_START msg=audit(1398700886.034:344): user pid=4866 uid=0 auid=0 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=USER_LOGIN msg=audit(1398700886.044:345): user pid=4866 uid=0 auid=0 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=USER_START msg=audit(1398700886.044:346): user pid=4866 uid=0 auid=0 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700886.045:347): user pid=4869 uid=0 auid=0 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=4869 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700886.045:348): user pid=4869 uid=0 auid=0 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=4869 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=CRED_REFR msg=audit(1398700886.046:349): user pid=4869 uid=0 auid=0 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=USER_END msg=audit(1398700886.086:350): user pid=4866 uid=0 auid=0 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=USER_LOGOUT msg=audit(1398700886.086:351): user pid=4866 uid=0 auid=0 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=USER_END msg=audit(1398700886.186:352): user pid=4866 uid=0 auid=0 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=CRED_DISP msg=audit(1398700886.187:353): user pid=4866 uid=0 auid=0 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700886.187:354): user pid=4866 uid=0 auid=0 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=4866 suid=0 rport=38234 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700886.187:355): user pid=4866 uid=0 auid=0 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=4866 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700886.187:356): user pid=4866 uid=0 auid=0 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=4866 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700886.195:357): user pid=4878 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=4878 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700886.195:358): user pid=4878 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=4878 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=CRYPTO_SESSION msg=audit(1398700886.196:359): user pid=4877 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 spid=4878 suid=74 rport=38235 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=CRYPTO_SESSION msg=audit(1398700886.196:360): user pid=4877 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 spid=4878 suid=74 rport=38235 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=USER_AUTH msg=audit(1398700886.399:361): user pid=4877 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=38235 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=USER_AUTH msg=audit(1398700886.399:362): user pid=4877 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=e7:e2:3d:94:48:cf:f5:8c:5e:54:98:bd:89:a5:29:a9 rport=38235 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=USER_ACCT msg=audit(1398700886.407:363): user pid=4877 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700886.407:364): user pid=4877 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=4878 suid=74 rport=38235 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=USER_AUTH msg=audit(1398700886.408:365): user pid=4877 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=ssh res=success'
>type=CRED_ACQ msg=audit(1398700886.408:366): user pid=4877 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=LOGIN msg=audit(1398700886.408:367): pid=4877 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=15
>type=USER_ROLE_CHANGE msg=audit(1398700886.504:368): user pid=4877 uid=0 auid=0 ses=15 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=USER_START msg=audit(1398700886.509:369): user pid=4877 uid=0 auid=0 ses=15 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=USER_LOGIN msg=audit(1398700886.535:370): user pid=4877 uid=0 auid=0 ses=15 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=USER_START msg=audit(1398700886.535:371): user pid=4877 uid=0 auid=0 ses=15 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700886.536:372): user pid=4880 uid=0 auid=0 ses=15 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=4880 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700886.538:373): user pid=4880 uid=0 auid=0 ses=15 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=4880 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=CRED_REFR msg=audit(1398700886.539:374): user pid=4880 uid=0 auid=0 ses=15 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=USER_END msg=audit(1398700886.591:375): user pid=4877 uid=0 auid=0 ses=15 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=USER_LOGOUT msg=audit(1398700886.591:376): user pid=4877 uid=0 auid=0 ses=15 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=USER_END msg=audit(1398700886.692:377): user pid=4877 uid=0 auid=0 ses=15 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=CRED_DISP msg=audit(1398700886.692:378): user pid=4877 uid=0 auid=0 ses=15 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700886.693:379): user pid=4877 uid=0 auid=0 ses=15 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=4877 suid=0 rport=38235 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700886.693:380): user pid=4877 uid=0 auid=0 ses=15 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=4877 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700886.693:381): user pid=4877 uid=0 auid=0 ses=15 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=4877 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700886.701:382): user pid=4891 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=4891 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700886.701:383): user pid=4891 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=4891 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=CRYPTO_SESSION msg=audit(1398700886.702:384): user pid=4890 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 spid=4891 suid=74 rport=38238 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=CRYPTO_SESSION msg=audit(1398700886.702:385): user pid=4890 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 spid=4891 suid=74 rport=38238 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=USER_AUTH msg=audit(1398700886.899:386): user pid=4890 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=38238 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=USER_AUTH msg=audit(1398700886.899:387): user pid=4890 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=e7:e2:3d:94:48:cf:f5:8c:5e:54:98:bd:89:a5:29:a9 rport=38238 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=USER_ACCT msg=audit(1398700886.908:388): user pid=4890 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700886.909:389): user pid=4890 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=4891 suid=74 rport=38238 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=USER_AUTH msg=audit(1398700886.909:390): user pid=4890 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=ssh res=success'
>type=CRED_ACQ msg=audit(1398700886.910:391): user pid=4890 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=LOGIN msg=audit(1398700886.910:392): pid=4890 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=16
>type=USER_ROLE_CHANGE msg=audit(1398700887.011:393): user pid=4890 uid=0 auid=0 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=USER_START msg=audit(1398700887.016:394): user pid=4890 uid=0 auid=0 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=USER_LOGIN msg=audit(1398700887.027:395): user pid=4890 uid=0 auid=0 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=USER_START msg=audit(1398700887.028:396): user pid=4890 uid=0 auid=0 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700887.029:397): user pid=4893 uid=0 auid=0 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=4893 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700887.029:398): user pid=4893 uid=0 auid=0 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=4893 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=CRED_REFR msg=audit(1398700887.030:399): user pid=4893 uid=0 auid=0 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=USER_END msg=audit(1398700887.081:400): user pid=4890 uid=0 auid=0 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=USER_LOGOUT msg=audit(1398700887.081:401): user pid=4890 uid=0 auid=0 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=USER_END msg=audit(1398700887.182:402): user pid=4890 uid=0 auid=0 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=CRED_DISP msg=audit(1398700887.182:403): user pid=4890 uid=0 auid=0 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700887.183:404): user pid=4890 uid=0 auid=0 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=4890 suid=0 rport=38238 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700887.183:405): user pid=4890 uid=0 auid=0 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=4890 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700887.183:406): user pid=4890 uid=0 auid=0 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=4890 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700887.192:407): user pid=4902 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=4902 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700887.192:408): user pid=4902 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=4902 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=CRYPTO_SESSION msg=audit(1398700887.193:409): user pid=4901 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 spid=4902 suid=74 rport=38240 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=CRYPTO_SESSION msg=audit(1398700887.193:410): user pid=4901 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 spid=4902 suid=74 rport=38240 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=USER_AUTH msg=audit(1398700887.436:411): user pid=4901 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=38240 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=USER_AUTH msg=audit(1398700887.436:412): user pid=4901 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=e7:e2:3d:94:48:cf:f5:8c:5e:54:98:bd:89:a5:29:a9 rport=38240 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=USER_ACCT msg=audit(1398700887.443:413): user pid=4901 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700887.444:414): user pid=4901 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=4902 suid=74 rport=38240 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=USER_AUTH msg=audit(1398700887.445:415): user pid=4901 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=ssh res=success'
>type=CRED_ACQ msg=audit(1398700887.445:416): user pid=4901 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=LOGIN msg=audit(1398700887.445:417): pid=4901 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=17
>type=USER_ROLE_CHANGE msg=audit(1398700887.554:418): user pid=4901 uid=0 auid=0 ses=17 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=USER_START msg=audit(1398700887.559:419): user pid=4901 uid=0 auid=0 ses=17 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=USER_LOGIN msg=audit(1398700887.567:420): user pid=4901 uid=0 auid=0 ses=17 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=USER_START msg=audit(1398700887.568:421): user pid=4901 uid=0 auid=0 ses=17 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700887.569:422): user pid=4904 uid=0 auid=0 ses=17 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=4904 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700887.569:423): user pid=4904 uid=0 auid=0 ses=17 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=4904 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=CRED_REFR msg=audit(1398700887.570:424): user pid=4904 uid=0 auid=0 ses=17 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=USER_END msg=audit(1398700887.717:425): user pid=4901 uid=0 auid=0 ses=17 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=USER_LOGOUT msg=audit(1398700887.717:426): user pid=4901 uid=0 auid=0 ses=17 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=USER_END msg=audit(1398700887.718:427): user pid=4901 uid=0 auid=0 ses=17 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=CRED_DISP msg=audit(1398700887.719:428): user pid=4901 uid=0 auid=0 ses=17 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700887.719:429): user pid=4901 uid=0 auid=0 ses=17 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=4901 suid=0 rport=38240 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700887.719:430): user pid=4901 uid=0 auid=0 ses=17 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=4901 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700887.719:431): user pid=4901 uid=0 auid=0 ses=17 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=4901 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700887.726:432): user pid=4910 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=4910 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700887.726:433): user pid=4910 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=4910 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=CRYPTO_SESSION msg=audit(1398700887.726:434): user pid=4909 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 spid=4910 suid=74 rport=38241 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=CRYPTO_SESSION msg=audit(1398700887.727:435): user pid=4909 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 spid=4910 suid=74 rport=38241 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=USER_AUTH msg=audit(1398700887.921:436): user pid=4909 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=38241 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=USER_AUTH msg=audit(1398700887.921:437): user pid=4909 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=e7:e2:3d:94:48:cf:f5:8c:5e:54:98:bd:89:a5:29:a9 rport=38241 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=USER_ACCT msg=audit(1398700887.930:438): user pid=4909 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700887.931:439): user pid=4909 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=4910 suid=74 rport=38241 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=USER_AUTH msg=audit(1398700887.931:440): user pid=4909 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=ssh res=success'
>type=CRED_ACQ msg=audit(1398700887.932:441): user pid=4909 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=LOGIN msg=audit(1398700887.932:442): pid=4909 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=18
>type=USER_ROLE_CHANGE msg=audit(1398700888.032:443): user pid=4909 uid=0 auid=0 ses=18 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=USER_START msg=audit(1398700888.036:444): user pid=4909 uid=0 auid=0 ses=18 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=USER_LOGIN msg=audit(1398700888.071:445): user pid=4909 uid=0 auid=0 ses=18 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=USER_START msg=audit(1398700888.072:446): user pid=4909 uid=0 auid=0 ses=18 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=USER_START msg=audit(1398700888.074:447): user pid=4912 uid=0 auid=0 ses=18 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=/dev/pts/0 res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700888.075:448): user pid=4912 uid=0 auid=0 ses=18 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=4912 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=pts/0 res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700888.075:449): user pid=4912 uid=0 auid=0 ses=18 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=4912 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=pts/0 res=success'
>type=CRED_REFR msg=audit(1398700888.076:450): user pid=4912 uid=0 auid=0 ses=18 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700888.365:451): user pid=4997 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=4997 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700888.365:452): user pid=4997 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=4997 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700888.408:453): user pid=5002 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=5002 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700888.408:454): user pid=5002 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=5002 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_SESSION msg=audit(1398700888.408:455): user pid=5001 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 spid=5002 suid=74 rport=42123 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_SESSION msg=audit(1398700888.408:456): user pid=5001 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 spid=5002 suid=74 rport=42123 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=USER_AUTH msg=audit(1398700888.467:457): user pid=5001 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=42123 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=USER_AUTH msg=audit(1398700888.467:458): user pid=5001 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=8b:2d:a5:06:3e:34:8a:e0:bf:ca:69:94:eb:59:f0:19 rport=42123 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=USER_ACCT msg=audit(1398700888.476:459): user pid=5001 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700888.476:460): user pid=5001 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=5002 suid=74 rport=42123 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=USER_AUTH msg=audit(1398700888.479:461): user pid=5001 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=ssh res=success'
>type=CRED_ACQ msg=audit(1398700888.479:462): user pid=5001 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=LOGIN msg=audit(1398700888.479:463): pid=5001 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=19
>type=USER_ROLE_CHANGE msg=audit(1398700888.584:464): user pid=5001 uid=0 auid=0 ses=19 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_START msg=audit(1398700888.589:465): user pid=5001 uid=0 auid=0 ses=19 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_LOGIN msg=audit(1398700888.590:466): user pid=5001 uid=0 auid=0 ses=19 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_START msg=audit(1398700888.591:467): user pid=5001 uid=0 auid=0 ses=19 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700888.592:468): user pid=5004 uid=0 auid=0 ses=19 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=5004 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700888.592:469): user pid=5004 uid=0 auid=0 ses=19 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=5004 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRED_REFR msg=audit(1398700888.594:470): user pid=5004 uid=0 auid=0 ses=19 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_END msg=audit(1398700888.747:471): user pid=5001 uid=0 auid=0 ses=19 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=CRED_DISP msg=audit(1398700888.747:472): user pid=5001 uid=0 auid=0 ses=19 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_END msg=audit(1398700888.748:473): user pid=5001 uid=0 auid=0 ses=19 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_LOGOUT msg=audit(1398700888.748:474): user pid=5001 uid=0 auid=0 ses=19 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700888.749:475): user pid=5001 uid=0 auid=0 ses=19 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=5001 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700888.749:476): user pid=5001 uid=0 auid=0 ses=19 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=5001 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700888.749:477): user pid=5001 uid=0 auid=0 ses=19 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=5001 suid=0 rport=42123 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700888.769:478): user pid=5014 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=5014 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700888.769:479): user pid=5014 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=5014 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_SESSION msg=audit(1398700888.770:480): user pid=5013 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 spid=5014 suid=74 rport=42124 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_SESSION msg=audit(1398700888.770:481): user pid=5013 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 spid=5014 suid=74 rport=42124 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=USER_AUTH msg=audit(1398700888.829:482): user pid=5013 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=42124 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=USER_AUTH msg=audit(1398700888.829:483): user pid=5013 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=8b:2d:a5:06:3e:34:8a:e0:bf:ca:69:94:eb:59:f0:19 rport=42124 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=USER_ACCT msg=audit(1398700888.837:484): user pid=5013 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700888.838:485): user pid=5013 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=5014 suid=74 rport=42124 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=USER_AUTH msg=audit(1398700888.838:486): user pid=5013 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=ssh res=success'
>type=CRED_ACQ msg=audit(1398700888.839:487): user pid=5013 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=LOGIN msg=audit(1398700888.839:488): pid=5013 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=20
>type=USER_ROLE_CHANGE msg=audit(1398700888.944:489): user pid=5013 uid=0 auid=0 ses=20 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_START msg=audit(1398700888.949:490): user pid=5013 uid=0 auid=0 ses=20 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_LOGIN msg=audit(1398700888.950:491): user pid=5013 uid=0 auid=0 ses=20 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_START msg=audit(1398700888.951:492): user pid=5013 uid=0 auid=0 ses=20 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700888.952:493): user pid=5016 uid=0 auid=0 ses=20 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=5016 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700888.952:494): user pid=5016 uid=0 auid=0 ses=20 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=5016 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRED_REFR msg=audit(1398700888.954:495): user pid=5016 uid=0 auid=0 ses=20 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_END msg=audit(1398700889.000:496): user pid=5013 uid=0 auid=0 ses=20 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_LOGOUT msg=audit(1398700889.003:497): user pid=5013 uid=0 auid=0 ses=20 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_END msg=audit(1398700889.003:498): user pid=5013 uid=0 auid=0 ses=20 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=CRED_DISP msg=audit(1398700889.004:499): user pid=5013 uid=0 auid=0 ses=20 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700889.004:500): user pid=5013 uid=0 auid=0 ses=20 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=5013 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700889.004:501): user pid=5013 uid=0 auid=0 ses=20 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=5013 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700889.004:502): user pid=5013 uid=0 auid=0 ses=20 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=5013 suid=0 rport=42124 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700889.024:503): user pid=5022 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=5022 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700889.024:504): user pid=5022 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=5022 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_SESSION msg=audit(1398700889.024:505): user pid=5021 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 spid=5022 suid=74 rport=42125 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_SESSION msg=audit(1398700889.024:506): user pid=5021 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 spid=5022 suid=74 rport=42125 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=USER_AUTH msg=audit(1398700889.088:507): user pid=5021 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=42125 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=USER_AUTH msg=audit(1398700889.088:508): user pid=5021 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=8b:2d:a5:06:3e:34:8a:e0:bf:ca:69:94:eb:59:f0:19 rport=42125 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=USER_ACCT msg=audit(1398700889.097:509): user pid=5021 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700889.097:510): user pid=5021 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=5022 suid=74 rport=42125 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=USER_AUTH msg=audit(1398700889.098:511): user pid=5021 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=ssh res=success'
>type=CRED_ACQ msg=audit(1398700889.099:512): user pid=5021 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=LOGIN msg=audit(1398700889.099:513): pid=5021 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=21
>type=USER_ROLE_CHANGE msg=audit(1398700889.213:514): user pid=5021 uid=0 auid=0 ses=21 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_START msg=audit(1398700889.216:515): user pid=5021 uid=0 auid=0 ses=21 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_LOGIN msg=audit(1398700889.221:516): user pid=5021 uid=0 auid=0 ses=21 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_START msg=audit(1398700889.222:517): user pid=5021 uid=0 auid=0 ses=21 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700889.223:518): user pid=5024 uid=0 auid=0 ses=21 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=5024 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700889.223:519): user pid=5024 uid=0 auid=0 ses=21 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=5024 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRED_REFR msg=audit(1398700889.224:520): user pid=5024 uid=0 auid=0 ses=21 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_END msg=audit(1398700889.278:521): user pid=5021 uid=0 auid=0 ses=21 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=CRED_DISP msg=audit(1398700889.278:522): user pid=5021 uid=0 auid=0 ses=21 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_END msg=audit(1398700889.279:523): user pid=5021 uid=0 auid=0 ses=21 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_LOGOUT msg=audit(1398700889.280:524): user pid=5021 uid=0 auid=0 ses=21 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700889.280:525): user pid=5021 uid=0 auid=0 ses=21 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=5021 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700889.280:526): user pid=5021 uid=0 auid=0 ses=21 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=5021 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700889.280:527): user pid=5021 uid=0 auid=0 ses=21 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=5021 suid=0 rport=42125 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700889.301:528): user pid=5033 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=5033 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700889.301:529): user pid=5033 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=5033 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_SESSION msg=audit(1398700889.302:530): user pid=5032 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 spid=5033 suid=74 rport=42126 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_SESSION msg=audit(1398700889.302:531): user pid=5032 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 spid=5033 suid=74 rport=42126 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=USER_AUTH msg=audit(1398700889.361:532): user pid=5032 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=42126 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=USER_AUTH msg=audit(1398700889.361:533): user pid=5032 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=8b:2d:a5:06:3e:34:8a:e0:bf:ca:69:94:eb:59:f0:19 rport=42126 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=USER_ACCT msg=audit(1398700889.368:534): user pid=5032 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700889.369:535): user pid=5032 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=5033 suid=74 rport=42126 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=USER_AUTH msg=audit(1398700889.369:536): user pid=5032 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=ssh res=success'
>type=CRED_ACQ msg=audit(1398700889.370:537): user pid=5032 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=LOGIN msg=audit(1398700889.370:538): pid=5032 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=22
>type=USER_ROLE_CHANGE msg=audit(1398700889.475:539): user pid=5032 uid=0 auid=0 ses=22 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_START msg=audit(1398700889.480:540): user pid=5032 uid=0 auid=0 ses=22 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_LOGIN msg=audit(1398700889.486:541): user pid=5032 uid=0 auid=0 ses=22 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_START msg=audit(1398700889.487:542): user pid=5032 uid=0 auid=0 ses=22 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700889.488:543): user pid=5035 uid=0 auid=0 ses=22 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=5035 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700889.488:544): user pid=5035 uid=0 auid=0 ses=22 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=5035 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRED_REFR msg=audit(1398700889.490:545): user pid=5035 uid=0 auid=0 ses=22 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_END msg=audit(1398700889.584:546): user pid=5032 uid=0 auid=0 ses=22 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=CRED_DISP msg=audit(1398700889.584:547): user pid=5032 uid=0 auid=0 ses=22 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_END msg=audit(1398700889.585:548): user pid=5032 uid=0 auid=0 ses=22 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_LOGOUT msg=audit(1398700889.585:549): user pid=5032 uid=0 auid=0 ses=22 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700889.586:550): user pid=5032 uid=0 auid=0 ses=22 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=5032 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700889.586:551): user pid=5032 uid=0 auid=0 ses=22 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=5032 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700889.586:552): user pid=5032 uid=0 auid=0 ses=22 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=5032 suid=0 rport=42126 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700889.603:553): user pid=5041 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=5041 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700889.603:554): user pid=5041 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=5041 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_SESSION msg=audit(1398700889.603:555): user pid=5040 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 spid=5041 suid=74 rport=42127 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_SESSION msg=audit(1398700889.603:556): user pid=5040 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 spid=5041 suid=74 rport=42127 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=USER_AUTH msg=audit(1398700889.665:557): user pid=5040 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=42127 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=USER_AUTH msg=audit(1398700889.665:558): user pid=5040 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=8b:2d:a5:06:3e:34:8a:e0:bf:ca:69:94:eb:59:f0:19 rport=42127 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=USER_ACCT msg=audit(1398700889.672:559): user pid=5040 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700889.672:560): user pid=5040 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=5041 suid=74 rport=42127 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=USER_AUTH msg=audit(1398700889.673:561): user pid=5040 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=ssh res=success'
>type=CRED_ACQ msg=audit(1398700889.674:562): user pid=5040 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=LOGIN msg=audit(1398700889.674:563): pid=5040 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=23
>type=USER_ROLE_CHANGE msg=audit(1398700889.776:564): user pid=5040 uid=0 auid=0 ses=23 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_START msg=audit(1398700889.781:565): user pid=5040 uid=0 auid=0 ses=23 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_LOGIN msg=audit(1398700889.788:566): user pid=5040 uid=0 auid=0 ses=23 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_START msg=audit(1398700889.788:567): user pid=5040 uid=0 auid=0 ses=23 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700889.789:568): user pid=5043 uid=0 auid=0 ses=23 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=5043 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700889.789:569): user pid=5043 uid=0 auid=0 ses=23 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=5043 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRED_REFR msg=audit(1398700889.790:570): user pid=5043 uid=0 auid=0 ses=23 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_END msg=audit(1398700889.961:571): user pid=5040 uid=0 auid=0 ses=23 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=CRED_DISP msg=audit(1398700889.962:572): user pid=5040 uid=0 auid=0 ses=23 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_END msg=audit(1398700889.962:573): user pid=5040 uid=0 auid=0 ses=23 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_LOGOUT msg=audit(1398700889.963:574): user pid=5040 uid=0 auid=0 ses=23 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700889.963:575): user pid=5040 uid=0 auid=0 ses=23 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=5040 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700889.963:576): user pid=5040 uid=0 auid=0 ses=23 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=5040 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700889.963:577): user pid=5040 uid=0 auid=0 ses=23 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=5040 suid=0 rport=42127 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700889.984:578): user pid=5049 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=5049 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700889.984:579): user pid=5049 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=5049 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_SESSION msg=audit(1398700889.984:580): user pid=5048 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 spid=5049 suid=74 rport=42128 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_SESSION msg=audit(1398700889.985:581): user pid=5048 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 spid=5049 suid=74 rport=42128 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=USER_AUTH msg=audit(1398700890.045:582): user pid=5048 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=42128 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=USER_AUTH msg=audit(1398700890.045:583): user pid=5048 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=8b:2d:a5:06:3e:34:8a:e0:bf:ca:69:94:eb:59:f0:19 rport=42128 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=USER_ACCT msg=audit(1398700890.052:584): user pid=5048 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700890.052:585): user pid=5048 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=5049 suid=74 rport=42128 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=USER_AUTH msg=audit(1398700890.053:586): user pid=5048 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=ssh res=success'
>type=CRED_ACQ msg=audit(1398700890.054:587): user pid=5048 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=LOGIN msg=audit(1398700890.054:588): pid=5048 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=24
>type=USER_ROLE_CHANGE msg=audit(1398700890.156:589): user pid=5048 uid=0 auid=0 ses=24 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_START msg=audit(1398700890.161:590): user pid=5048 uid=0 auid=0 ses=24 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_LOGIN msg=audit(1398700890.167:591): user pid=5048 uid=0 auid=0 ses=24 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_START msg=audit(1398700890.167:592): user pid=5048 uid=0 auid=0 ses=24 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700890.168:593): user pid=5051 uid=0 auid=0 ses=24 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=5051 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700890.168:594): user pid=5051 uid=0 auid=0 ses=24 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=5051 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRED_REFR msg=audit(1398700890.170:595): user pid=5051 uid=0 auid=0 ses=24 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_END msg=audit(1398700890.213:596): user pid=5048 uid=0 auid=0 ses=24 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=CRED_DISP msg=audit(1398700890.214:597): user pid=5048 uid=0 auid=0 ses=24 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_END msg=audit(1398700890.214:598): user pid=5048 uid=0 auid=0 ses=24 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_LOGOUT msg=audit(1398700890.215:599): user pid=5048 uid=0 auid=0 ses=24 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700890.215:600): user pid=5048 uid=0 auid=0 ses=24 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=5048 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700890.215:601): user pid=5048 uid=0 auid=0 ses=24 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=5048 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700890.215:602): user pid=5048 uid=0 auid=0 ses=24 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=5048 suid=0 rport=42128 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700890.232:603): user pid=5058 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=5058 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700890.232:604): user pid=5058 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=5058 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_SESSION msg=audit(1398700890.232:605): user pid=5057 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 spid=5058 suid=74 rport=42129 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_SESSION msg=audit(1398700890.232:606): user pid=5057 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 spid=5058 suid=74 rport=42129 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=USER_AUTH msg=audit(1398700890.293:607): user pid=5057 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=42129 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=USER_AUTH msg=audit(1398700890.293:608): user pid=5057 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=8b:2d:a5:06:3e:34:8a:e0:bf:ca:69:94:eb:59:f0:19 rport=42129 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=USER_ACCT msg=audit(1398700890.299:609): user pid=5057 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700890.300:610): user pid=5057 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=5058 suid=74 rport=42129 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=USER_AUTH msg=audit(1398700890.300:611): user pid=5057 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=ssh res=success'
>type=CRED_ACQ msg=audit(1398700890.301:612): user pid=5057 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=LOGIN msg=audit(1398700890.301:613): pid=5057 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=25
>type=USER_ROLE_CHANGE msg=audit(1398700890.394:614): user pid=5057 uid=0 auid=0 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_START msg=audit(1398700890.398:615): user pid=5057 uid=0 auid=0 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_LOGIN msg=audit(1398700890.402:616): user pid=5057 uid=0 auid=0 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_START msg=audit(1398700890.403:617): user pid=5057 uid=0 auid=0 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700890.404:618): user pid=5060 uid=0 auid=0 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=5060 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700890.404:619): user pid=5060 uid=0 auid=0 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=5060 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRED_REFR msg=audit(1398700890.405:620): user pid=5060 uid=0 auid=0 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_END msg=audit(1398700890.448:621): user pid=5057 uid=0 auid=0 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=CRED_DISP msg=audit(1398700890.449:622): user pid=5057 uid=0 auid=0 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_END msg=audit(1398700890.450:623): user pid=5057 uid=0 auid=0 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_LOGOUT msg=audit(1398700890.450:624): user pid=5057 uid=0 auid=0 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700890.451:625): user pid=5057 uid=0 auid=0 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=5057 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700890.451:626): user pid=5057 uid=0 auid=0 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=5057 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700890.451:627): user pid=5057 uid=0 auid=0 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=5057 suid=0 rport=42129 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700890.467:628): user pid=5066 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=5066 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700890.467:629): user pid=5066 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=5066 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_SESSION msg=audit(1398700890.467:630): user pid=5065 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 spid=5066 suid=74 rport=42130 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_SESSION msg=audit(1398700890.467:631): user pid=5065 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 spid=5066 suid=74 rport=42130 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=USER_AUTH msg=audit(1398700890.527:632): user pid=5065 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=42130 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=USER_AUTH msg=audit(1398700890.527:633): user pid=5065 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=8b:2d:a5:06:3e:34:8a:e0:bf:ca:69:94:eb:59:f0:19 rport=42130 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=USER_ACCT msg=audit(1398700890.534:634): user pid=5065 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700890.535:635): user pid=5065 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=5066 suid=74 rport=42130 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=USER_AUTH msg=audit(1398700890.535:636): user pid=5065 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=ssh res=success'
>type=CRED_ACQ msg=audit(1398700890.536:637): user pid=5065 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=LOGIN msg=audit(1398700890.536:638): pid=5065 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=26
>type=USER_ROLE_CHANGE msg=audit(1398700890.648:639): user pid=5065 uid=0 auid=0 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_START msg=audit(1398700890.652:640): user pid=5065 uid=0 auid=0 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_LOGIN msg=audit(1398700890.658:641): user pid=5065 uid=0 auid=0 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_START msg=audit(1398700890.659:642): user pid=5065 uid=0 auid=0 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700890.660:643): user pid=5068 uid=0 auid=0 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=5068 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700890.660:644): user pid=5068 uid=0 auid=0 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=5068 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRED_REFR msg=audit(1398700890.662:645): user pid=5068 uid=0 auid=0 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_END msg=audit(1398700891.166:646): user pid=5065 uid=0 auid=0 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=CRED_DISP msg=audit(1398700891.166:647): user pid=5065 uid=0 auid=0 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_END msg=audit(1398700891.167:648): user pid=5065 uid=0 auid=0 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_LOGOUT msg=audit(1398700891.167:649): user pid=5065 uid=0 auid=0 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700891.167:650): user pid=5065 uid=0 auid=0 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=5065 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700891.167:651): user pid=5065 uid=0 auid=0 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=5065 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700891.168:652): user pid=5065 uid=0 auid=0 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=5065 suid=0 rport=42130 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700891.186:653): user pid=5093 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=5093 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700891.186:654): user pid=5093 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=5093 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_SESSION msg=audit(1398700891.186:655): user pid=5092 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 spid=5093 suid=74 rport=42131 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_SESSION msg=audit(1398700891.186:656): user pid=5092 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 spid=5093 suid=74 rport=42131 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=USER_AUTH msg=audit(1398700891.245:657): user pid=5092 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=42131 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=USER_AUTH msg=audit(1398700891.245:658): user pid=5092 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=8b:2d:a5:06:3e:34:8a:e0:bf:ca:69:94:eb:59:f0:19 rport=42131 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=USER_ACCT msg=audit(1398700891.253:659): user pid=5092 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700891.253:660): user pid=5092 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=5093 suid=74 rport=42131 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=USER_AUTH msg=audit(1398700891.253:661): user pid=5092 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=ssh res=success'
>type=CRED_ACQ msg=audit(1398700891.254:662): user pid=5092 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=LOGIN msg=audit(1398700891.254:663): pid=5092 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=27
>type=USER_ROLE_CHANGE msg=audit(1398700891.358:664): user pid=5092 uid=0 auid=0 ses=27 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_START msg=audit(1398700891.362:665): user pid=5092 uid=0 auid=0 ses=27 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_LOGIN msg=audit(1398700891.368:666): user pid=5092 uid=0 auid=0 ses=27 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_START msg=audit(1398700891.369:667): user pid=5092 uid=0 auid=0 ses=27 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700891.369:668): user pid=5095 uid=0 auid=0 ses=27 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=5095 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700891.370:669): user pid=5095 uid=0 auid=0 ses=27 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=5095 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRED_REFR msg=audit(1398700891.371:670): user pid=5095 uid=0 auid=0 ses=27 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_END msg=audit(1398700891.414:671): user pid=5092 uid=0 auid=0 ses=27 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=CRED_DISP msg=audit(1398700891.414:672): user pid=5092 uid=0 auid=0 ses=27 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_END msg=audit(1398700891.415:673): user pid=5092 uid=0 auid=0 ses=27 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_LOGOUT msg=audit(1398700891.416:674): user pid=5092 uid=0 auid=0 ses=27 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700891.416:675): user pid=5092 uid=0 auid=0 ses=27 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=5092 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700891.416:676): user pid=5092 uid=0 auid=0 ses=27 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=5092 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700891.416:677): user pid=5092 uid=0 auid=0 ses=27 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=5092 suid=0 rport=42131 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700891.428:678): user pid=5101 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=5101 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700891.428:679): user pid=5101 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=5101 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_SESSION msg=audit(1398700891.429:680): user pid=5100 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 spid=5101 suid=74 rport=42132 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_SESSION msg=audit(1398700891.429:681): user pid=5100 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 spid=5101 suid=74 rport=42132 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=USER_AUTH msg=audit(1398700891.489:682): user pid=5100 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=42132 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=USER_AUTH msg=audit(1398700891.489:683): user pid=5100 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=8b:2d:a5:06:3e:34:8a:e0:bf:ca:69:94:eb:59:f0:19 rport=42132 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=USER_ACCT msg=audit(1398700891.496:684): user pid=5100 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700891.497:685): user pid=5100 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=5101 suid=74 rport=42132 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=USER_AUTH msg=audit(1398700891.497:686): user pid=5100 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=ssh res=success'
>type=CRED_ACQ msg=audit(1398700891.498:687): user pid=5100 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=LOGIN msg=audit(1398700891.498:688): pid=5100 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=28
>type=USER_ROLE_CHANGE msg=audit(1398700891.596:689): user pid=5100 uid=0 auid=0 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_START msg=audit(1398700891.601:690): user pid=5100 uid=0 auid=0 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_LOGIN msg=audit(1398700891.605:691): user pid=5100 uid=0 auid=0 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_START msg=audit(1398700891.605:692): user pid=5100 uid=0 auid=0 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700891.606:693): user pid=5103 uid=0 auid=0 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=5103 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700891.606:694): user pid=5103 uid=0 auid=0 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=5103 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRED_REFR msg=audit(1398700891.607:695): user pid=5103 uid=0 auid=0 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_END msg=audit(1398700891.642:696): user pid=5100 uid=0 auid=0 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=CRED_DISP msg=audit(1398700891.643:697): user pid=5100 uid=0 auid=0 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_END msg=audit(1398700891.643:698): user pid=5100 uid=0 auid=0 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_LOGOUT msg=audit(1398700891.644:699): user pid=5100 uid=0 auid=0 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700891.644:700): user pid=5100 uid=0 auid=0 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=5100 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700891.644:701): user pid=5100 uid=0 auid=0 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=5100 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700891.644:702): user pid=5100 uid=0 auid=0 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=5100 suid=0 rport=42132 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700891.655:703): user pid=5110 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=5110 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700891.655:704): user pid=5110 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=5110 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_SESSION msg=audit(1398700891.656:705): user pid=5109 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 spid=5110 suid=74 rport=42133 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_SESSION msg=audit(1398700891.656:706): user pid=5109 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 spid=5110 suid=74 rport=42133 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=USER_AUTH msg=audit(1398700891.713:707): user pid=5109 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=42133 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=USER_AUTH msg=audit(1398700891.713:708): user pid=5109 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=8b:2d:a5:06:3e:34:8a:e0:bf:ca:69:94:eb:59:f0:19 rport=42133 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=USER_ACCT msg=audit(1398700891.718:709): user pid=5109 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700891.718:710): user pid=5109 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=5110 suid=74 rport=42133 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=USER_AUTH msg=audit(1398700891.719:711): user pid=5109 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=ssh res=success'
>type=CRED_ACQ msg=audit(1398700891.719:712): user pid=5109 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=LOGIN msg=audit(1398700891.719:713): pid=5109 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=29
>type=USER_ROLE_CHANGE msg=audit(1398700891.826:714): user pid=5109 uid=0 auid=0 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_START msg=audit(1398700891.831:715): user pid=5109 uid=0 auid=0 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_LOGIN msg=audit(1398700891.836:716): user pid=5109 uid=0 auid=0 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_START msg=audit(1398700891.837:717): user pid=5109 uid=0 auid=0 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700891.838:718): user pid=5112 uid=0 auid=0 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=5112 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700891.838:719): user pid=5112 uid=0 auid=0 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=5112 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRED_REFR msg=audit(1398700891.839:720): user pid=5112 uid=0 auid=0 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_END msg=audit(1398700891.880:721): user pid=5109 uid=0 auid=0 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=CRED_DISP msg=audit(1398700891.881:722): user pid=5109 uid=0 auid=0 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_END msg=audit(1398700891.882:723): user pid=5109 uid=0 auid=0 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_LOGOUT msg=audit(1398700891.883:724): user pid=5109 uid=0 auid=0 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700891.883:725): user pid=5109 uid=0 auid=0 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=5109 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700891.884:726): user pid=5109 uid=0 auid=0 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=5109 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700891.884:727): user pid=5109 uid=0 auid=0 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=5109 suid=0 rport=42133 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700891.898:728): user pid=5118 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=5118 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700891.899:729): user pid=5118 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=5118 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_SESSION msg=audit(1398700891.899:730): user pid=5117 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 spid=5118 suid=74 rport=42134 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_SESSION msg=audit(1398700891.899:731): user pid=5117 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 spid=5118 suid=74 rport=42134 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=USER_AUTH msg=audit(1398700891.960:732): user pid=5117 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=42134 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=USER_AUTH msg=audit(1398700891.960:733): user pid=5117 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=8b:2d:a5:06:3e:34:8a:e0:bf:ca:69:94:eb:59:f0:19 rport=42134 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=USER_ACCT msg=audit(1398700891.966:734): user pid=5117 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700891.966:735): user pid=5117 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=5118 suid=74 rport=42134 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=USER_AUTH msg=audit(1398700891.967:736): user pid=5117 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=ssh res=success'
>type=CRED_ACQ msg=audit(1398700891.968:737): user pid=5117 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=LOGIN msg=audit(1398700891.968:738): pid=5117 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=30
>type=USER_ROLE_CHANGE msg=audit(1398700892.082:739): user pid=5117 uid=0 auid=0 ses=30 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_START msg=audit(1398700892.088:740): user pid=5117 uid=0 auid=0 ses=30 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_LOGIN msg=audit(1398700892.095:741): user pid=5117 uid=0 auid=0 ses=30 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_START msg=audit(1398700892.095:742): user pid=5117 uid=0 auid=0 ses=30 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700892.097:743): user pid=5120 uid=0 auid=0 ses=30 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=5120 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700892.097:744): user pid=5120 uid=0 auid=0 ses=30 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=5120 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRED_REFR msg=audit(1398700892.098:745): user pid=5120 uid=0 auid=0 ses=30 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_END msg=audit(1398700892.146:746): user pid=5117 uid=0 auid=0 ses=30 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=CRED_DISP msg=audit(1398700892.146:747): user pid=5117 uid=0 auid=0 ses=30 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_END msg=audit(1398700892.147:748): user pid=5117 uid=0 auid=0 ses=30 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_LOGOUT msg=audit(1398700892.148:749): user pid=5117 uid=0 auid=0 ses=30 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700892.148:750): user pid=5117 uid=0 auid=0 ses=30 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=5117 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700892.148:751): user pid=5117 uid=0 auid=0 ses=30 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=5117 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700892.148:752): user pid=5117 uid=0 auid=0 ses=30 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=5117 suid=0 rport=42134 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700892.164:753): user pid=5127 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=5127 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700892.164:754): user pid=5127 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=5127 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_SESSION msg=audit(1398700892.165:755): user pid=5126 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 spid=5127 suid=74 rport=42135 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_SESSION msg=audit(1398700892.165:756): user pid=5126 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 spid=5127 suid=74 rport=42135 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=USER_AUTH msg=audit(1398700892.226:757): user pid=5126 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=42135 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=USER_AUTH msg=audit(1398700892.226:758): user pid=5126 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=8b:2d:a5:06:3e:34:8a:e0:bf:ca:69:94:eb:59:f0:19 rport=42135 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=USER_ACCT msg=audit(1398700892.233:759): user pid=5126 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700892.233:760): user pid=5126 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=5127 suid=74 rport=42135 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=USER_AUTH msg=audit(1398700892.234:761): user pid=5126 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=ssh res=success'
>type=CRED_ACQ msg=audit(1398700892.235:762): user pid=5126 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=LOGIN msg=audit(1398700892.235:763): pid=5126 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=31
>type=USER_ROLE_CHANGE msg=audit(1398700892.427:764): user pid=5126 uid=0 auid=0 ses=31 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_START msg=audit(1398700892.435:765): user pid=5126 uid=0 auid=0 ses=31 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_LOGIN msg=audit(1398700892.446:766): user pid=5126 uid=0 auid=0 ses=31 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_START msg=audit(1398700892.447:767): user pid=5126 uid=0 auid=0 ses=31 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700892.448:768): user pid=5129 uid=0 auid=0 ses=31 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=5129 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700892.449:769): user pid=5129 uid=0 auid=0 ses=31 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=5129 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRED_REFR msg=audit(1398700892.452:770): user pid=5129 uid=0 auid=0 ses=31 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_END msg=audit(1398700892.530:771): user pid=5126 uid=0 auid=0 ses=31 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=CRED_DISP msg=audit(1398700892.531:772): user pid=5126 uid=0 auid=0 ses=31 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_END msg=audit(1398700892.532:773): user pid=5126 uid=0 auid=0 ses=31 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_LOGOUT msg=audit(1398700892.533:774): user pid=5126 uid=0 auid=0 ses=31 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700892.533:775): user pid=5126 uid=0 auid=0 ses=31 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=5126 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700892.534:776): user pid=5126 uid=0 auid=0 ses=31 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=5126 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700892.534:777): user pid=5126 uid=0 auid=0 ses=31 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=5126 suid=0 rport=42135 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700892.561:778): user pid=5135 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=5135 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700892.561:779): user pid=5135 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=5135 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_SESSION msg=audit(1398700892.562:780): user pid=5134 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 spid=5135 suid=74 rport=42136 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_SESSION msg=audit(1398700892.562:781): user pid=5134 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 spid=5135 suid=74 rport=42136 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=USER_AUTH msg=audit(1398700892.638:782): user pid=5134 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=42136 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=USER_AUTH msg=audit(1398700892.638:783): user pid=5134 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=8b:2d:a5:06:3e:34:8a:e0:bf:ca:69:94:eb:59:f0:19 rport=42136 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=USER_ACCT msg=audit(1398700892.648:784): user pid=5134 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700892.649:785): user pid=5134 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=5135 suid=74 rport=42136 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=USER_AUTH msg=audit(1398700892.650:786): user pid=5134 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=ssh res=success'
>type=CRED_ACQ msg=audit(1398700892.651:787): user pid=5134 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=LOGIN msg=audit(1398700892.651:788): pid=5134 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=32
>type=USER_ROLE_CHANGE msg=audit(1398700892.831:789): user pid=5134 uid=0 auid=0 ses=32 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_START msg=audit(1398700892.838:790): user pid=5134 uid=0 auid=0 ses=32 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_LOGIN msg=audit(1398700892.847:791): user pid=5134 uid=0 auid=0 ses=32 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_START msg=audit(1398700892.848:792): user pid=5134 uid=0 auid=0 ses=32 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700892.849:793): user pid=5137 uid=0 auid=0 ses=32 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=5137 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700892.850:794): user pid=5137 uid=0 auid=0 ses=32 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=5137 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRED_REFR msg=audit(1398700892.852:795): user pid=5137 uid=0 auid=0 ses=32 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_END msg=audit(1398700892.920:796): user pid=5134 uid=0 auid=0 ses=32 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=CRED_DISP msg=audit(1398700892.921:797): user pid=5134 uid=0 auid=0 ses=32 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_END msg=audit(1398700892.921:798): user pid=5134 uid=0 auid=0 ses=32 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_LOGOUT msg=audit(1398700892.922:799): user pid=5134 uid=0 auid=0 ses=32 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700892.922:800): user pid=5134 uid=0 auid=0 ses=32 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=5134 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700892.922:801): user pid=5134 uid=0 auid=0 ses=32 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=5134 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700892.922:802): user pid=5134 uid=0 auid=0 ses=32 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=5134 suid=0 rport=42136 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700892.944:803): user pid=5144 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=5144 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700892.944:804): user pid=5144 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=5144 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_SESSION msg=audit(1398700892.944:805): user pid=5143 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 spid=5144 suid=74 rport=42137 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_SESSION msg=audit(1398700892.945:806): user pid=5143 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 spid=5144 suid=74 rport=42137 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=USER_AUTH msg=audit(1398700893.014:807): user pid=5143 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=42137 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=USER_AUTH msg=audit(1398700893.014:808): user pid=5143 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=8b:2d:a5:06:3e:34:8a:e0:bf:ca:69:94:eb:59:f0:19 rport=42137 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=USER_ACCT msg=audit(1398700893.022:809): user pid=5143 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700893.022:810): user pid=5143 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=5144 suid=74 rport=42137 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=USER_AUTH msg=audit(1398700893.023:811): user pid=5143 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=ssh res=success'
>type=CRED_ACQ msg=audit(1398700893.024:812): user pid=5143 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=LOGIN msg=audit(1398700893.024:813): pid=5143 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=33
>type=USER_ROLE_CHANGE msg=audit(1398700893.182:814): user pid=5143 uid=0 auid=0 ses=33 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_START msg=audit(1398700893.188:815): user pid=5143 uid=0 auid=0 ses=33 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_LOGIN msg=audit(1398700893.197:816): user pid=5143 uid=0 auid=0 ses=33 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_START msg=audit(1398700893.197:817): user pid=5143 uid=0 auid=0 ses=33 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700893.198:818): user pid=5146 uid=0 auid=0 ses=33 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=5146 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700893.199:819): user pid=5146 uid=0 auid=0 ses=33 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=5146 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRED_REFR msg=audit(1398700893.201:820): user pid=5146 uid=0 auid=0 ses=33 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_END msg=audit(1398700893.255:821): user pid=5143 uid=0 auid=0 ses=33 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=CRED_DISP msg=audit(1398700893.256:822): user pid=5143 uid=0 auid=0 ses=33 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_END msg=audit(1398700893.256:823): user pid=5143 uid=0 auid=0 ses=33 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_LOGOUT msg=audit(1398700893.257:824): user pid=5143 uid=0 auid=0 ses=33 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700893.257:825): user pid=5143 uid=0 auid=0 ses=33 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=5143 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700893.257:826): user pid=5143 uid=0 auid=0 ses=33 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=5143 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700893.257:827): user pid=5143 uid=0 auid=0 ses=33 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=5143 suid=0 rport=42137 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700893.302:828): user pid=5155 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=5155 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700893.302:829): user pid=5155 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=5155 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_SESSION msg=audit(1398700893.303:830): user pid=5154 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 spid=5155 suid=74 rport=42138 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_SESSION msg=audit(1398700893.303:831): user pid=5154 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 spid=5155 suid=74 rport=42138 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=USER_AUTH msg=audit(1398700893.362:832): user pid=5154 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=42138 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=USER_AUTH msg=audit(1398700893.362:833): user pid=5154 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=8b:2d:a5:06:3e:34:8a:e0:bf:ca:69:94:eb:59:f0:19 rport=42138 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=USER_ACCT msg=audit(1398700893.371:834): user pid=5154 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700893.371:835): user pid=5154 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=5155 suid=74 rport=42138 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=USER_AUTH msg=audit(1398700893.372:836): user pid=5154 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=ssh res=success'
>type=CRED_ACQ msg=audit(1398700893.372:837): user pid=5154 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=LOGIN msg=audit(1398700893.373:838): pid=5154 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=34
>type=USER_ROLE_CHANGE msg=audit(1398700893.511:839): user pid=5154 uid=0 auid=0 ses=34 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_START msg=audit(1398700893.518:840): user pid=5154 uid=0 auid=0 ses=34 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_LOGIN msg=audit(1398700893.525:841): user pid=5154 uid=0 auid=0 ses=34 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_START msg=audit(1398700893.525:842): user pid=5154 uid=0 auid=0 ses=34 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700893.527:843): user pid=5157 uid=0 auid=0 ses=34 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=5157 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700893.527:844): user pid=5157 uid=0 auid=0 ses=34 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=5157 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRED_REFR msg=audit(1398700893.528:845): user pid=5157 uid=0 auid=0 ses=34 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_END msg=audit(1398700893.630:846): user pid=5154 uid=0 auid=0 ses=34 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=CRED_DISP msg=audit(1398700893.631:847): user pid=5154 uid=0 auid=0 ses=34 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_END msg=audit(1398700893.632:848): user pid=5154 uid=0 auid=0 ses=34 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_LOGOUT msg=audit(1398700893.632:849): user pid=5154 uid=0 auid=0 ses=34 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700893.632:850): user pid=5154 uid=0 auid=0 ses=34 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=5154 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700893.632:851): user pid=5154 uid=0 auid=0 ses=34 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=5154 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700893.632:852): user pid=5154 uid=0 auid=0 ses=34 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=5154 suid=0 rport=42138 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700893.656:853): user pid=5163 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=5163 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700893.656:854): user pid=5163 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=5163 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_SESSION msg=audit(1398700893.657:855): user pid=5162 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 spid=5163 suid=74 rport=42139 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_SESSION msg=audit(1398700893.657:856): user pid=5162 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 spid=5163 suid=74 rport=42139 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=USER_AUTH msg=audit(1398700893.723:857): user pid=5162 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=42139 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=USER_AUTH msg=audit(1398700893.723:858): user pid=5162 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=8b:2d:a5:06:3e:34:8a:e0:bf:ca:69:94:eb:59:f0:19 rport=42139 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=USER_ACCT msg=audit(1398700893.732:859): user pid=5162 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700893.734:860): user pid=5162 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=5163 suid=74 rport=42139 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=USER_AUTH msg=audit(1398700893.734:861): user pid=5162 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=ssh res=success'
>type=CRED_ACQ msg=audit(1398700893.735:862): user pid=5162 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=LOGIN msg=audit(1398700893.735:863): pid=5162 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=35
>type=USER_ROLE_CHANGE msg=audit(1398700893.831:864): user pid=5162 uid=0 auid=0 ses=35 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_START msg=audit(1398700893.836:865): user pid=5162 uid=0 auid=0 ses=35 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_LOGIN msg=audit(1398700893.843:866): user pid=5162 uid=0 auid=0 ses=35 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_START msg=audit(1398700893.843:867): user pid=5162 uid=0 auid=0 ses=35 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700893.844:868): user pid=5165 uid=0 auid=0 ses=35 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=5165 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700893.844:869): user pid=5165 uid=0 auid=0 ses=35 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=5165 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRED_REFR msg=audit(1398700893.845:870): user pid=5165 uid=0 auid=0 ses=35 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_END msg=audit(1398700894.160:871): user pid=5162 uid=0 auid=0 ses=35 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=CRED_DISP msg=audit(1398700894.161:872): user pid=5162 uid=0 auid=0 ses=35 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_END msg=audit(1398700894.161:873): user pid=5162 uid=0 auid=0 ses=35 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_LOGOUT msg=audit(1398700894.162:874): user pid=5162 uid=0 auid=0 ses=35 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700894.162:875): user pid=5162 uid=0 auid=0 ses=35 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=5162 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700894.162:876): user pid=5162 uid=0 auid=0 ses=35 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=5162 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700894.162:877): user pid=5162 uid=0 auid=0 ses=35 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=5162 suid=0 rport=42139 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700894.216:878): user pid=5172 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=5172 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700894.216:879): user pid=5172 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=5172 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_SESSION msg=audit(1398700894.217:880): user pid=5171 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 spid=5172 suid=74 rport=42140 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_SESSION msg=audit(1398700894.217:881): user pid=5171 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 spid=5172 suid=74 rport=42140 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=USER_AUTH msg=audit(1398700894.276:882): user pid=5171 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=42140 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=USER_AUTH msg=audit(1398700894.277:883): user pid=5171 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=8b:2d:a5:06:3e:34:8a:e0:bf:ca:69:94:eb:59:f0:19 rport=42140 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=USER_ACCT msg=audit(1398700894.286:884): user pid=5171 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700894.286:885): user pid=5171 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=5172 suid=74 rport=42140 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=USER_AUTH msg=audit(1398700894.287:886): user pid=5171 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=ssh res=success'
>type=CRED_ACQ msg=audit(1398700894.287:887): user pid=5171 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=LOGIN msg=audit(1398700894.287:888): pid=5171 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=36
>type=USER_ROLE_CHANGE msg=audit(1398700894.391:889): user pid=5171 uid=0 auid=0 ses=36 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_START msg=audit(1398700894.397:890): user pid=5171 uid=0 auid=0 ses=36 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_LOGIN msg=audit(1398700894.404:891): user pid=5171 uid=0 auid=0 ses=36 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_START msg=audit(1398700894.404:892): user pid=5171 uid=0 auid=0 ses=36 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700894.405:893): user pid=5174 uid=0 auid=0 ses=36 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=5174 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700894.406:894): user pid=5174 uid=0 auid=0 ses=36 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=5174 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRED_REFR msg=audit(1398700894.407:895): user pid=5174 uid=0 auid=0 ses=36 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_END msg=audit(1398700897.960:896): user pid=5171 uid=0 auid=0 ses=36 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=CRED_DISP msg=audit(1398700897.960:897): user pid=5171 uid=0 auid=0 ses=36 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_END msg=audit(1398700897.961:898): user pid=5171 uid=0 auid=0 ses=36 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_LOGOUT msg=audit(1398700897.961:899): user pid=5171 uid=0 auid=0 ses=36 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700897.961:900): user pid=5171 uid=0 auid=0 ses=36 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=5171 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700897.961:901): user pid=5171 uid=0 auid=0 ses=36 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=5171 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700897.962:902): user pid=5171 uid=0 auid=0 ses=36 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=5171 suid=0 rport=42140 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700897.969:903): user pid=5183 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=5183 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700897.969:904): user pid=5183 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=5183 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_SESSION msg=audit(1398700897.970:905): user pid=5182 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 spid=5183 suid=74 rport=42142 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_SESSION msg=audit(1398700897.970:906): user pid=5182 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 spid=5183 suid=74 rport=42142 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=USER_AUTH msg=audit(1398700898.029:907): user pid=5182 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=42142 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=USER_AUTH msg=audit(1398700898.029:908): user pid=5182 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=8b:2d:a5:06:3e:34:8a:e0:bf:ca:69:94:eb:59:f0:19 rport=42142 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=USER_ACCT msg=audit(1398700898.036:909): user pid=5182 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700898.036:910): user pid=5182 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=5183 suid=74 rport=42142 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=USER_AUTH msg=audit(1398700898.036:911): user pid=5182 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=ssh res=success'
>type=CRED_ACQ msg=audit(1398700898.037:912): user pid=5182 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=LOGIN msg=audit(1398700898.037:913): pid=5182 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=37
>type=USER_ROLE_CHANGE msg=audit(1398700898.153:914): user pid=5182 uid=0 auid=0 ses=37 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_START msg=audit(1398700898.160:915): user pid=5182 uid=0 auid=0 ses=37 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_LOGIN msg=audit(1398700898.167:916): user pid=5182 uid=0 auid=0 ses=37 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_START msg=audit(1398700898.167:917): user pid=5182 uid=0 auid=0 ses=37 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700898.168:918): user pid=5198 uid=0 auid=0 ses=37 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=5198 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700898.168:919): user pid=5198 uid=0 auid=0 ses=37 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=5198 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRED_REFR msg=audit(1398700898.170:920): user pid=5198 uid=0 auid=0 ses=37 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=ADD_GROUP msg=audit(1398700909.631:921): user pid=5209 uid=0 auid=0 ses=37 subj=unconfined_u:system_r:groupadd_t:s0-s0:c0.c1023 msg='op=adding group to /etc/group id=52 exe="/usr/sbin/groupadd" hostname=? addr=? terminal=? res=success'
>type=ADD_GROUP msg=audit(1398700909.634:922): user pid=5209 uid=0 auid=0 ses=37 subj=unconfined_u:system_r:groupadd_t:s0-s0:c0.c1023 msg='op=adding group to /etc/gshadow id=52 exe="/usr/sbin/groupadd" hostname=? addr=? terminal=? res=success'
>type=ADD_GROUP msg=audit(1398700909.635:923): user pid=5209 uid=0 auid=0 ses=37 subj=unconfined_u:system_r:groupadd_t:s0-s0:c0.c1023 msg='op= id=52 exe="/usr/sbin/groupadd" hostname=? addr=? terminal=? res=success'
>type=ADD_USER msg=audit(1398700909.685:924): user pid=5214 uid=0 auid=0 ses=37 subj=unconfined_u:system_r:useradd_t:s0-s0:c0.c1023 msg='op=adding user id=52 exe="/usr/sbin/useradd" hostname=? addr=? terminal=? res=success'
>type=USER_END msg=audit(1398700915.397:925): user pid=5182 uid=0 auid=0 ses=37 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=CRED_DISP msg=audit(1398700915.401:926): user pid=5182 uid=0 auid=0 ses=37 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_END msg=audit(1398700915.401:927): user pid=5182 uid=0 auid=0 ses=37 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_LOGOUT msg=audit(1398700915.402:928): user pid=5182 uid=0 auid=0 ses=37 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700915.402:929): user pid=5182 uid=0 auid=0 ses=37 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=5182 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700915.402:930): user pid=5182 uid=0 auid=0 ses=37 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=5182 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700915.402:931): user pid=5182 uid=0 auid=0 ses=37 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=5182 suid=0 rport=42142 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700915.431:932): user pid=5230 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=5230 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700915.431:933): user pid=5230 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=5230 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_SESSION msg=audit(1398700915.432:934): user pid=5229 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 spid=5230 suid=74 rport=42148 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_SESSION msg=audit(1398700915.432:935): user pid=5229 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 spid=5230 suid=74 rport=42148 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=USER_AUTH msg=audit(1398700915.490:936): user pid=5229 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=42148 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=USER_AUTH msg=audit(1398700915.490:937): user pid=5229 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=8b:2d:a5:06:3e:34:8a:e0:bf:ca:69:94:eb:59:f0:19 rport=42148 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=USER_ACCT msg=audit(1398700915.496:938): user pid=5229 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700915.498:939): user pid=5229 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=5230 suid=74 rport=42148 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=USER_AUTH msg=audit(1398700915.498:940): user pid=5229 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=ssh res=success'
>type=CRED_ACQ msg=audit(1398700915.499:941): user pid=5229 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=LOGIN msg=audit(1398700915.499:942): pid=5229 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=38
>type=USER_ROLE_CHANGE msg=audit(1398700915.601:943): user pid=5229 uid=0 auid=0 ses=38 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_START msg=audit(1398700915.605:944): user pid=5229 uid=0 auid=0 ses=38 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_LOGIN msg=audit(1398700915.610:945): user pid=5229 uid=0 auid=0 ses=38 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_START msg=audit(1398700915.611:946): user pid=5229 uid=0 auid=0 ses=38 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700915.612:947): user pid=5232 uid=0 auid=0 ses=38 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=5232 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700915.612:948): user pid=5232 uid=0 auid=0 ses=38 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=5232 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRED_REFR msg=audit(1398700915.613:949): user pid=5232 uid=0 auid=0 ses=38 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_END msg=audit(1398700915.646:950): user pid=5229 uid=0 auid=0 ses=38 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=CRED_DISP msg=audit(1398700915.646:951): user pid=5229 uid=0 auid=0 ses=38 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_END msg=audit(1398700915.647:952): user pid=5229 uid=0 auid=0 ses=38 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_LOGOUT msg=audit(1398700915.647:953): user pid=5229 uid=0 auid=0 ses=38 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700915.648:954): user pid=5229 uid=0 auid=0 ses=38 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=5229 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700915.648:955): user pid=5229 uid=0 auid=0 ses=38 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=5229 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700915.648:956): user pid=5229 uid=0 auid=0 ses=38 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=5229 suid=0 rport=42148 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700915.668:957): user pid=5241 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=5241 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700915.668:958): user pid=5241 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=5241 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_SESSION msg=audit(1398700915.668:959): user pid=5240 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 spid=5241 suid=74 rport=42149 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_SESSION msg=audit(1398700915.668:960): user pid=5240 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 spid=5241 suid=74 rport=42149 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=USER_AUTH msg=audit(1398700915.728:961): user pid=5240 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=42149 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=USER_AUTH msg=audit(1398700915.728:962): user pid=5240 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=8b:2d:a5:06:3e:34:8a:e0:bf:ca:69:94:eb:59:f0:19 rport=42149 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=USER_ACCT msg=audit(1398700915.736:963): user pid=5240 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700915.737:964): user pid=5240 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=5241 suid=74 rport=42149 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=USER_AUTH msg=audit(1398700915.737:965): user pid=5240 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=ssh res=success'
>type=CRED_ACQ msg=audit(1398700915.738:966): user pid=5240 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=LOGIN msg=audit(1398700915.738:967): pid=5240 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=39
>type=USER_ROLE_CHANGE msg=audit(1398700915.847:968): user pid=5240 uid=0 auid=0 ses=39 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_START msg=audit(1398700915.851:969): user pid=5240 uid=0 auid=0 ses=39 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_LOGIN msg=audit(1398700915.858:970): user pid=5240 uid=0 auid=0 ses=39 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_START msg=audit(1398700915.858:971): user pid=5240 uid=0 auid=0 ses=39 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700915.860:972): user pid=5243 uid=0 auid=0 ses=39 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=5243 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700915.860:973): user pid=5243 uid=0 auid=0 ses=39 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=5243 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRED_REFR msg=audit(1398700915.861:974): user pid=5243 uid=0 auid=0 ses=39 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_END msg=audit(1398700916.099:975): user pid=5240 uid=0 auid=0 ses=39 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=CRED_DISP msg=audit(1398700916.101:976): user pid=5240 uid=0 auid=0 ses=39 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_END msg=audit(1398700916.104:977): user pid=5240 uid=0 auid=0 ses=39 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_LOGOUT msg=audit(1398700916.104:978): user pid=5240 uid=0 auid=0 ses=39 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700916.104:979): user pid=5240 uid=0 auid=0 ses=39 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=5240 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700916.104:980): user pid=5240 uid=0 auid=0 ses=39 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=5240 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700916.104:981): user pid=5240 uid=0 auid=0 ses=39 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=5240 suid=0 rport=42149 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700916.112:982): user pid=5250 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=5250 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700916.112:983): user pid=5250 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=5250 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_SESSION msg=audit(1398700916.112:984): user pid=5249 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 spid=5250 suid=74 rport=42150 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_SESSION msg=audit(1398700916.113:985): user pid=5249 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 spid=5250 suid=74 rport=42150 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=USER_AUTH msg=audit(1398700916.173:986): user pid=5249 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=42150 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=USER_AUTH msg=audit(1398700916.173:987): user pid=5249 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=8b:2d:a5:06:3e:34:8a:e0:bf:ca:69:94:eb:59:f0:19 rport=42150 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=USER_ACCT msg=audit(1398700916.179:988): user pid=5249 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700916.180:989): user pid=5249 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=5250 suid=74 rport=42150 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=USER_AUTH msg=audit(1398700916.180:990): user pid=5249 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=ssh res=success'
>type=CRED_ACQ msg=audit(1398700916.181:991): user pid=5249 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=LOGIN msg=audit(1398700916.181:992): pid=5249 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=40
>type=USER_ROLE_CHANGE msg=audit(1398700916.285:993): user pid=5249 uid=0 auid=0 ses=40 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_START msg=audit(1398700916.288:994): user pid=5249 uid=0 auid=0 ses=40 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_LOGIN msg=audit(1398700916.293:995): user pid=5249 uid=0 auid=0 ses=40 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_START msg=audit(1398700916.293:996): user pid=5249 uid=0 auid=0 ses=40 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700916.294:997): user pid=5252 uid=0 auid=0 ses=40 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=5252 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700916.294:998): user pid=5252 uid=0 auid=0 ses=40 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=5252 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRED_REFR msg=audit(1398700916.295:999): user pid=5252 uid=0 auid=0 ses=40 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_END msg=audit(1398700916.342:1000): user pid=5249 uid=0 auid=0 ses=40 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=CRED_DISP msg=audit(1398700916.342:1001): user pid=5249 uid=0 auid=0 ses=40 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_END msg=audit(1398700916.343:1002): user pid=5249 uid=0 auid=0 ses=40 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_LOGOUT msg=audit(1398700916.343:1003): user pid=5249 uid=0 auid=0 ses=40 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700916.343:1004): user pid=5249 uid=0 auid=0 ses=40 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=5249 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700916.343:1005): user pid=5249 uid=0 auid=0 ses=40 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=5249 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700916.343:1006): user pid=5249 uid=0 auid=0 ses=40 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=5249 suid=0 rport=42150 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700916.372:1007): user pid=5264 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=5264 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700916.372:1008): user pid=5264 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=5264 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_SESSION msg=audit(1398700916.372:1009): user pid=5263 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 spid=5264 suid=74 rport=42151 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_SESSION msg=audit(1398700916.372:1010): user pid=5263 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 spid=5264 suid=74 rport=42151 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=USER_AUTH msg=audit(1398700916.432:1011): user pid=5263 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=42151 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=USER_AUTH msg=audit(1398700916.433:1012): user pid=5263 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=8b:2d:a5:06:3e:34:8a:e0:bf:ca:69:94:eb:59:f0:19 rport=42151 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=USER_ACCT msg=audit(1398700916.439:1013): user pid=5263 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700916.439:1014): user pid=5263 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=5264 suid=74 rport=42151 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=USER_AUTH msg=audit(1398700916.440:1015): user pid=5263 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=ssh res=success'
>type=CRED_ACQ msg=audit(1398700916.441:1016): user pid=5263 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=LOGIN msg=audit(1398700916.441:1017): pid=5263 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=41
>type=USER_ROLE_CHANGE msg=audit(1398700916.548:1018): user pid=5263 uid=0 auid=0 ses=41 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_START msg=audit(1398700916.553:1019): user pid=5263 uid=0 auid=0 ses=41 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_LOGIN msg=audit(1398700916.558:1020): user pid=5263 uid=0 auid=0 ses=41 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_START msg=audit(1398700916.559:1021): user pid=5263 uid=0 auid=0 ses=41 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700916.560:1022): user pid=5277 uid=0 auid=0 ses=41 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=5277 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700916.560:1023): user pid=5277 uid=0 auid=0 ses=41 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=5277 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRED_REFR msg=audit(1398700916.562:1024): user pid=5277 uid=0 auid=0 ses=41 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_END msg=audit(1398700916.608:1025): user pid=5263 uid=0 auid=0 ses=41 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=CRED_DISP msg=audit(1398700916.609:1026): user pid=5263 uid=0 auid=0 ses=41 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_END msg=audit(1398700916.610:1027): user pid=5263 uid=0 auid=0 ses=41 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_LOGOUT msg=audit(1398700916.610:1028): user pid=5263 uid=0 auid=0 ses=41 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700916.610:1029): user pid=5263 uid=0 auid=0 ses=41 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=5263 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700916.611:1030): user pid=5263 uid=0 auid=0 ses=41 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=5263 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700916.611:1031): user pid=5263 uid=0 auid=0 ses=41 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=5263 suid=0 rport=42151 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700919.648:1032): user pid=5594 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=5594 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700919.648:1033): user pid=5594 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=5594 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_SESSION msg=audit(1398700919.649:1034): user pid=5593 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 spid=5594 suid=74 rport=42152 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_SESSION msg=audit(1398700919.649:1035): user pid=5593 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 spid=5594 suid=74 rport=42152 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=USER_AUTH msg=audit(1398700919.717:1036): user pid=5593 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=42152 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=USER_AUTH msg=audit(1398700919.717:1037): user pid=5593 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=8b:2d:a5:06:3e:34:8a:e0:bf:ca:69:94:eb:59:f0:19 rport=42152 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=USER_ACCT msg=audit(1398700919.729:1038): user pid=5593 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700919.729:1039): user pid=5593 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=5594 suid=74 rport=42152 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=USER_AUTH msg=audit(1398700919.730:1040): user pid=5593 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=ssh res=success'
>type=CRED_ACQ msg=audit(1398700919.731:1041): user pid=5593 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=LOGIN msg=audit(1398700919.731:1042): pid=5593 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=42
>type=USER_ROLE_CHANGE msg=audit(1398700919.845:1043): user pid=5593 uid=0 auid=0 ses=42 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_START msg=audit(1398700919.848:1044): user pid=5593 uid=0 auid=0 ses=42 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_LOGIN msg=audit(1398700919.854:1045): user pid=5593 uid=0 auid=0 ses=42 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_START msg=audit(1398700919.855:1046): user pid=5593 uid=0 auid=0 ses=42 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700919.856:1047): user pid=5600 uid=0 auid=0 ses=42 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=5600 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700919.856:1048): user pid=5600 uid=0 auid=0 ses=42 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=5600 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRED_REFR msg=audit(1398700919.857:1049): user pid=5600 uid=0 auid=0 ses=42 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_END msg=audit(1398700919.876:1050): user pid=5593 uid=0 auid=0 ses=42 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=CRED_DISP msg=audit(1398700919.886:1051): user pid=5593 uid=0 auid=0 ses=42 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_END msg=audit(1398700919.886:1052): user pid=5593 uid=0 auid=0 ses=42 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_LOGOUT msg=audit(1398700919.886:1053): user pid=5593 uid=0 auid=0 ses=42 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700919.886:1054): user pid=5593 uid=0 auid=0 ses=42 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=5593 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700919.886:1055): user pid=5593 uid=0 auid=0 ses=42 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=5593 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700919.886:1056): user pid=5593 uid=0 auid=0 ses=42 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=5593 suid=0 rport=42152 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=USER_ACCT msg=audit(1398700921.862:1057): user pid=5908 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=CRED_ACQ msg=audit(1398700921.862:1058): user pid=5908 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=LOGIN msg=audit(1398700921.871:1059): pid=5908 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=43
>type=USER_START msg=audit(1398700921.876:1060): user pid=5908 uid=0 auid=0 ses=43 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=CRED_DISP msg=audit(1398700921.914:1061): user pid=5908 uid=0 auid=0 ses=43 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=USER_END msg=audit(1398700921.914:1062): user pid=5908 uid=0 auid=0 ses=43 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700922.921:1063): user pid=5917 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=5917 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700922.922:1064): user pid=5917 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=5917 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_SESSION msg=audit(1398700922.924:1065): user pid=5916 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 spid=5917 suid=74 rport=42154 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_SESSION msg=audit(1398700922.924:1066): user pid=5916 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 spid=5917 suid=74 rport=42154 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=USER_AUTH msg=audit(1398700922.993:1067): user pid=5916 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=42154 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=USER_AUTH msg=audit(1398700922.993:1068): user pid=5916 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=8b:2d:a5:06:3e:34:8a:e0:bf:ca:69:94:eb:59:f0:19 rport=42154 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=USER_ACCT msg=audit(1398700923.002:1069): user pid=5916 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700923.003:1070): user pid=5916 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=5917 suid=74 rport=42154 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=USER_AUTH msg=audit(1398700923.003:1071): user pid=5916 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=ssh res=success'
>type=CRED_ACQ msg=audit(1398700923.004:1072): user pid=5916 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=LOGIN msg=audit(1398700923.004:1073): pid=5916 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=44
>type=USER_ROLE_CHANGE msg=audit(1398700923.114:1074): user pid=5916 uid=0 auid=0 ses=44 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_START msg=audit(1398700923.120:1075): user pid=5916 uid=0 auid=0 ses=44 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_LOGIN msg=audit(1398700923.126:1076): user pid=5916 uid=0 auid=0 ses=44 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_START msg=audit(1398700923.126:1077): user pid=5916 uid=0 auid=0 ses=44 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700923.129:1078): user pid=5919 uid=0 auid=0 ses=44 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=5919 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700923.129:1079): user pid=5919 uid=0 auid=0 ses=44 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=5919 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRED_REFR msg=audit(1398700923.130:1080): user pid=5919 uid=0 auid=0 ses=44 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_END msg=audit(1398700923.191:1081): user pid=5916 uid=0 auid=0 ses=44 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=CRED_DISP msg=audit(1398700923.192:1082): user pid=5916 uid=0 auid=0 ses=44 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_END msg=audit(1398700923.192:1083): user pid=5916 uid=0 auid=0 ses=44 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_LOGOUT msg=audit(1398700923.193:1084): user pid=5916 uid=0 auid=0 ses=44 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700923.193:1085): user pid=5916 uid=0 auid=0 ses=44 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=5916 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700923.193:1086): user pid=5916 uid=0 auid=0 ses=44 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=5916 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700923.193:1087): user pid=5916 uid=0 auid=0 ses=44 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=5916 suid=0 rport=42154 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700926.203:1088): user pid=5926 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=5926 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700926.203:1089): user pid=5926 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=5926 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_SESSION msg=audit(1398700926.203:1090): user pid=5925 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 spid=5926 suid=74 rport=42155 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_SESSION msg=audit(1398700926.204:1091): user pid=5925 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 spid=5926 suid=74 rport=42155 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=USER_AUTH msg=audit(1398700926.269:1092): user pid=5925 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=42155 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=USER_AUTH msg=audit(1398700926.269:1093): user pid=5925 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=8b:2d:a5:06:3e:34:8a:e0:bf:ca:69:94:eb:59:f0:19 rport=42155 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=USER_ACCT msg=audit(1398700926.276:1094): user pid=5925 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700926.276:1095): user pid=5925 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=5926 suid=74 rport=42155 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=USER_AUTH msg=audit(1398700926.277:1096): user pid=5925 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=ssh res=success'
>type=CRED_ACQ msg=audit(1398700926.277:1097): user pid=5925 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=LOGIN msg=audit(1398700926.278:1098): pid=5925 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=45
>type=USER_ROLE_CHANGE msg=audit(1398700926.377:1099): user pid=5925 uid=0 auid=0 ses=45 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_START msg=audit(1398700926.381:1100): user pid=5925 uid=0 auid=0 ses=45 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_LOGIN msg=audit(1398700926.386:1101): user pid=5925 uid=0 auid=0 ses=45 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_START msg=audit(1398700926.386:1102): user pid=5925 uid=0 auid=0 ses=45 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700926.389:1103): user pid=5928 uid=0 auid=0 ses=45 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=5928 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700926.389:1104): user pid=5928 uid=0 auid=0 ses=45 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=5928 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRED_REFR msg=audit(1398700926.390:1105): user pid=5928 uid=0 auid=0 ses=45 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_END msg=audit(1398700926.428:1106): user pid=5925 uid=0 auid=0 ses=45 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=CRED_DISP msg=audit(1398700926.428:1107): user pid=5925 uid=0 auid=0 ses=45 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_END msg=audit(1398700926.429:1108): user pid=5925 uid=0 auid=0 ses=45 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_LOGOUT msg=audit(1398700926.429:1109): user pid=5925 uid=0 auid=0 ses=45 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700926.429:1110): user pid=5925 uid=0 auid=0 ses=45 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=5925 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700926.429:1111): user pid=5925 uid=0 auid=0 ses=45 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=5925 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700926.429:1112): user pid=5925 uid=0 auid=0 ses=45 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=5925 suid=0 rport=42155 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700929.449:1113): user pid=5935 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=5935 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700929.449:1114): user pid=5935 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=5935 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_SESSION msg=audit(1398700929.450:1115): user pid=5934 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 spid=5935 suid=74 rport=42156 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_SESSION msg=audit(1398700929.450:1116): user pid=5934 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 spid=5935 suid=74 rport=42156 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=USER_AUTH msg=audit(1398700929.518:1117): user pid=5934 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=42156 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=USER_AUTH msg=audit(1398700929.518:1118): user pid=5934 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=8b:2d:a5:06:3e:34:8a:e0:bf:ca:69:94:eb:59:f0:19 rport=42156 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=USER_ACCT msg=audit(1398700929.525:1119): user pid=5934 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700929.525:1120): user pid=5934 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=5935 suid=74 rport=42156 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=USER_AUTH msg=audit(1398700929.526:1121): user pid=5934 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=ssh res=success'
>type=CRED_ACQ msg=audit(1398700929.527:1122): user pid=5934 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=LOGIN msg=audit(1398700929.527:1123): pid=5934 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=46
>type=USER_ROLE_CHANGE msg=audit(1398700929.651:1124): user pid=5934 uid=0 auid=0 ses=46 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_START msg=audit(1398700929.655:1125): user pid=5934 uid=0 auid=0 ses=46 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_LOGIN msg=audit(1398700929.660:1126): user pid=5934 uid=0 auid=0 ses=46 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_START msg=audit(1398700929.661:1127): user pid=5934 uid=0 auid=0 ses=46 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700929.663:1128): user pid=5937 uid=0 auid=0 ses=46 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=5937 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700929.663:1129): user pid=5937 uid=0 auid=0 ses=46 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=5937 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRED_REFR msg=audit(1398700929.664:1130): user pid=5937 uid=0 auid=0 ses=46 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_END msg=audit(1398700929.714:1131): user pid=5934 uid=0 auid=0 ses=46 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=CRED_DISP msg=audit(1398700929.714:1132): user pid=5934 uid=0 auid=0 ses=46 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_END msg=audit(1398700929.715:1133): user pid=5934 uid=0 auid=0 ses=46 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_LOGOUT msg=audit(1398700929.716:1134): user pid=5934 uid=0 auid=0 ses=46 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700929.716:1135): user pid=5934 uid=0 auid=0 ses=46 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=5934 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700929.716:1136): user pid=5934 uid=0 auid=0 ses=46 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=5934 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700929.716:1137): user pid=5934 uid=0 auid=0 ses=46 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=5934 suid=0 rport=42156 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700932.737:1138): user pid=5944 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=5944 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700932.737:1139): user pid=5944 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=5944 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_SESSION msg=audit(1398700932.738:1140): user pid=5943 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 spid=5944 suid=74 rport=42157 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_SESSION msg=audit(1398700932.738:1141): user pid=5943 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 spid=5944 suid=74 rport=42157 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=USER_AUTH msg=audit(1398700932.807:1142): user pid=5943 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=42157 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=USER_AUTH msg=audit(1398700932.807:1143): user pid=5943 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=8b:2d:a5:06:3e:34:8a:e0:bf:ca:69:94:eb:59:f0:19 rport=42157 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=USER_ACCT msg=audit(1398700932.816:1144): user pid=5943 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700932.817:1145): user pid=5943 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=5944 suid=74 rport=42157 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=USER_AUTH msg=audit(1398700932.817:1146): user pid=5943 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=ssh res=success'
>type=CRED_ACQ msg=audit(1398700932.818:1147): user pid=5943 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=LOGIN msg=audit(1398700932.818:1148): pid=5943 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=47
>type=USER_ROLE_CHANGE msg=audit(1398700932.916:1149): user pid=5943 uid=0 auid=0 ses=47 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_START msg=audit(1398700932.919:1150): user pid=5943 uid=0 auid=0 ses=47 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_LOGIN msg=audit(1398700932.920:1151): user pid=5943 uid=0 auid=0 ses=47 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_START msg=audit(1398700932.921:1152): user pid=5943 uid=0 auid=0 ses=47 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700932.922:1153): user pid=5946 uid=0 auid=0 ses=47 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=5946 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700932.923:1154): user pid=5946 uid=0 auid=0 ses=47 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=5946 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRED_REFR msg=audit(1398700932.923:1155): user pid=5946 uid=0 auid=0 ses=47 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_END msg=audit(1398700932.968:1156): user pid=5943 uid=0 auid=0 ses=47 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=CRED_DISP msg=audit(1398700932.969:1157): user pid=5943 uid=0 auid=0 ses=47 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_END msg=audit(1398700932.969:1158): user pid=5943 uid=0 auid=0 ses=47 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_LOGOUT msg=audit(1398700932.970:1159): user pid=5943 uid=0 auid=0 ses=47 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700932.970:1160): user pid=5943 uid=0 auid=0 ses=47 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=5943 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700932.970:1161): user pid=5943 uid=0 auid=0 ses=47 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=5943 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700932.970:1162): user pid=5943 uid=0 auid=0 ses=47 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=5943 suid=0 rport=42157 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700935.993:1163): user pid=5953 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=5953 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700935.993:1164): user pid=5953 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=5953 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_SESSION msg=audit(1398700935.993:1165): user pid=5952 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 spid=5953 suid=74 rport=42158 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_SESSION msg=audit(1398700935.994:1166): user pid=5952 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 spid=5953 suid=74 rport=42158 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=USER_AUTH msg=audit(1398700936.061:1167): user pid=5952 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=42158 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=USER_AUTH msg=audit(1398700936.061:1168): user pid=5952 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=8b:2d:a5:06:3e:34:8a:e0:bf:ca:69:94:eb:59:f0:19 rport=42158 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=USER_ACCT msg=audit(1398700936.067:1169): user pid=5952 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700936.068:1170): user pid=5952 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=5953 suid=74 rport=42158 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=USER_AUTH msg=audit(1398700936.068:1171): user pid=5952 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=ssh res=success'
>type=CRED_ACQ msg=audit(1398700936.069:1172): user pid=5952 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=LOGIN msg=audit(1398700936.069:1173): pid=5952 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=48
>type=USER_ROLE_CHANGE msg=audit(1398700936.183:1174): user pid=5952 uid=0 auid=0 ses=48 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_START msg=audit(1398700936.186:1175): user pid=5952 uid=0 auid=0 ses=48 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_LOGIN msg=audit(1398700936.192:1176): user pid=5952 uid=0 auid=0 ses=48 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_START msg=audit(1398700936.193:1177): user pid=5952 uid=0 auid=0 ses=48 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700936.194:1178): user pid=5955 uid=0 auid=0 ses=48 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=5955 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700936.194:1179): user pid=5955 uid=0 auid=0 ses=48 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=5955 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRED_REFR msg=audit(1398700936.195:1180): user pid=5955 uid=0 auid=0 ses=48 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_END msg=audit(1398700936.251:1181): user pid=5952 uid=0 auid=0 ses=48 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=CRED_DISP msg=audit(1398700936.252:1182): user pid=5952 uid=0 auid=0 ses=48 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_END msg=audit(1398700936.253:1183): user pid=5952 uid=0 auid=0 ses=48 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_LOGOUT msg=audit(1398700936.253:1184): user pid=5952 uid=0 auid=0 ses=48 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700936.253:1185): user pid=5952 uid=0 auid=0 ses=48 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=5952 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700936.253:1186): user pid=5952 uid=0 auid=0 ses=48 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=5952 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700936.254:1187): user pid=5952 uid=0 auid=0 ses=48 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=5952 suid=0 rport=42158 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700939.271:1188): user pid=5962 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=5962 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700939.271:1189): user pid=5962 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=5962 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_SESSION msg=audit(1398700939.271:1190): user pid=5961 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 spid=5962 suid=74 rport=42159 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_SESSION msg=audit(1398700939.271:1191): user pid=5961 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 spid=5962 suid=74 rport=42159 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=USER_AUTH msg=audit(1398700939.330:1192): user pid=5961 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=42159 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=USER_AUTH msg=audit(1398700939.330:1193): user pid=5961 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=8b:2d:a5:06:3e:34:8a:e0:bf:ca:69:94:eb:59:f0:19 rport=42159 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=USER_ACCT msg=audit(1398700939.336:1194): user pid=5961 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700939.337:1195): user pid=5961 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=5962 suid=74 rport=42159 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=USER_AUTH msg=audit(1398700939.337:1196): user pid=5961 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=ssh res=success'
>type=CRED_ACQ msg=audit(1398700939.338:1197): user pid=5961 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=LOGIN msg=audit(1398700939.338:1198): pid=5961 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=49
>type=USER_ROLE_CHANGE msg=audit(1398700939.441:1199): user pid=5961 uid=0 auid=0 ses=49 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_START msg=audit(1398700939.446:1200): user pid=5961 uid=0 auid=0 ses=49 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_LOGIN msg=audit(1398700939.453:1201): user pid=5961 uid=0 auid=0 ses=49 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_START msg=audit(1398700939.453:1202): user pid=5961 uid=0 auid=0 ses=49 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700939.456:1203): user pid=5964 uid=0 auid=0 ses=49 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=5964 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700939.456:1204): user pid=5964 uid=0 auid=0 ses=49 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=5964 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRED_REFR msg=audit(1398700939.457:1205): user pid=5964 uid=0 auid=0 ses=49 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_END msg=audit(1398700939.508:1206): user pid=5961 uid=0 auid=0 ses=49 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=CRED_DISP msg=audit(1398700939.508:1207): user pid=5961 uid=0 auid=0 ses=49 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_END msg=audit(1398700939.509:1208): user pid=5961 uid=0 auid=0 ses=49 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_LOGOUT msg=audit(1398700939.509:1209): user pid=5961 uid=0 auid=0 ses=49 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700939.509:1210): user pid=5961 uid=0 auid=0 ses=49 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=5961 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700939.509:1211): user pid=5961 uid=0 auid=0 ses=49 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=5961 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700939.509:1212): user pid=5961 uid=0 auid=0 ses=49 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=5961 suid=0 rport=42159 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700942.534:1213): user pid=5971 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=5971 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700942.534:1214): user pid=5971 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=5971 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_SESSION msg=audit(1398700942.534:1215): user pid=5970 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 spid=5971 suid=74 rport=42160 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_SESSION msg=audit(1398700942.534:1216): user pid=5970 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 spid=5971 suid=74 rport=42160 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=USER_AUTH msg=audit(1398700942.594:1217): user pid=5970 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=42160 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=USER_AUTH msg=audit(1398700942.594:1218): user pid=5970 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=8b:2d:a5:06:3e:34:8a:e0:bf:ca:69:94:eb:59:f0:19 rport=42160 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=USER_ACCT msg=audit(1398700942.600:1219): user pid=5970 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700942.601:1220): user pid=5970 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=5971 suid=74 rport=42160 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=USER_AUTH msg=audit(1398700942.601:1221): user pid=5970 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=ssh res=success'
>type=CRED_ACQ msg=audit(1398700942.602:1222): user pid=5970 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=LOGIN msg=audit(1398700942.602:1223): pid=5970 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=50
>type=USER_ROLE_CHANGE msg=audit(1398700942.706:1224): user pid=5970 uid=0 auid=0 ses=50 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_START msg=audit(1398700942.711:1225): user pid=5970 uid=0 auid=0 ses=50 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_LOGIN msg=audit(1398700942.717:1226): user pid=5970 uid=0 auid=0 ses=50 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_START msg=audit(1398700942.718:1227): user pid=5970 uid=0 auid=0 ses=50 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700942.720:1228): user pid=5973 uid=0 auid=0 ses=50 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=5973 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700942.720:1229): user pid=5973 uid=0 auid=0 ses=50 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=5973 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRED_REFR msg=audit(1398700942.721:1230): user pid=5973 uid=0 auid=0 ses=50 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_END msg=audit(1398700942.770:1231): user pid=5970 uid=0 auid=0 ses=50 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=CRED_DISP msg=audit(1398700942.771:1232): user pid=5970 uid=0 auid=0 ses=50 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_END msg=audit(1398700942.772:1233): user pid=5970 uid=0 auid=0 ses=50 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_LOGOUT msg=audit(1398700942.772:1234): user pid=5970 uid=0 auid=0 ses=50 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700942.772:1235): user pid=5970 uid=0 auid=0 ses=50 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=5970 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700942.772:1236): user pid=5970 uid=0 auid=0 ses=50 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=5970 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700942.772:1237): user pid=5970 uid=0 auid=0 ses=50 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=5970 suid=0 rport=42160 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700945.809:1238): user pid=5983 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=5983 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700945.809:1239): user pid=5983 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=5983 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_SESSION msg=audit(1398700945.809:1240): user pid=5982 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 spid=5983 suid=74 rport=42161 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_SESSION msg=audit(1398700945.809:1241): user pid=5982 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 spid=5983 suid=74 rport=42161 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=USER_AUTH msg=audit(1398700945.869:1242): user pid=5982 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=42161 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=USER_AUTH msg=audit(1398700945.869:1243): user pid=5982 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=8b:2d:a5:06:3e:34:8a:e0:bf:ca:69:94:eb:59:f0:19 rport=42161 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=USER_ACCT msg=audit(1398700945.879:1244): user pid=5982 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700945.880:1245): user pid=5982 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=5983 suid=74 rport=42161 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=USER_AUTH msg=audit(1398700945.881:1246): user pid=5982 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=ssh res=success'
>type=CRED_ACQ msg=audit(1398700945.881:1247): user pid=5982 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=LOGIN msg=audit(1398700945.881:1248): pid=5982 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=51
>type=USER_ROLE_CHANGE msg=audit(1398700945.988:1249): user pid=5982 uid=0 auid=0 ses=51 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_START msg=audit(1398700945.993:1250): user pid=5982 uid=0 auid=0 ses=51 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_LOGIN msg=audit(1398700946.000:1251): user pid=5982 uid=0 auid=0 ses=51 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_START msg=audit(1398700946.000:1252): user pid=5982 uid=0 auid=0 ses=51 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700946.003:1253): user pid=5985 uid=0 auid=0 ses=51 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=5985 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700946.003:1254): user pid=5985 uid=0 auid=0 ses=51 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=5985 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRED_REFR msg=audit(1398700946.004:1255): user pid=5985 uid=0 auid=0 ses=51 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_END msg=audit(1398700946.058:1256): user pid=5982 uid=0 auid=0 ses=51 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=CRED_DISP msg=audit(1398700946.059:1257): user pid=5982 uid=0 auid=0 ses=51 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_END msg=audit(1398700946.059:1258): user pid=5982 uid=0 auid=0 ses=51 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_LOGOUT msg=audit(1398700946.060:1259): user pid=5982 uid=0 auid=0 ses=51 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700946.060:1260): user pid=5982 uid=0 auid=0 ses=51 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=5982 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700946.060:1261): user pid=5982 uid=0 auid=0 ses=51 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=5982 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700946.060:1262): user pid=5982 uid=0 auid=0 ses=51 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=5982 suid=0 rport=42161 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=MAC_POLICY_LOAD msg=audit(1398700945.472:1263): policy loaded auid=0 ses=40
>type=SYSCALL msg=audit(1398700945.472:1263): arch=c000003e syscall=1 success=yes exit=7318143 a0=4 a1=7f9024315000 a2=6faa7f a3=7fff0ebd0200 items=0 ppid=5911 pid=5978 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=40 comm="load_policy" exe="/sbin/load_policy" subj=unconfined_u:system_r:load_policy_t:s0-s0:c0.c1023 key=(null)
>type=CRYPTO_KEY_USER msg=audit(1398700949.132:1264): user pid=6006 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=6006 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700949.132:1265): user pid=6006 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=6006 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_SESSION msg=audit(1398700949.134:1266): user pid=6004 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 spid=6006 suid=74 rport=42162 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_SESSION msg=audit(1398700949.134:1267): user pid=6004 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 spid=6006 suid=74 rport=42162 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=USER_AUTH msg=audit(1398700949.193:1268): user pid=6004 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=42162 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=USER_AUTH msg=audit(1398700949.193:1269): user pid=6004 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=8b:2d:a5:06:3e:34:8a:e0:bf:ca:69:94:eb:59:f0:19 rport=42162 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=USER_ACCT msg=audit(1398700949.199:1270): user pid=6004 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700949.200:1271): user pid=6004 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=6006 suid=74 rport=42162 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=USER_AUTH msg=audit(1398700949.200:1272): user pid=6004 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=ssh res=success'
>type=CRED_ACQ msg=audit(1398700949.201:1273): user pid=6004 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=LOGIN msg=audit(1398700949.201:1274): pid=6004 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=52
>type=USER_ROLE_CHANGE msg=audit(1398700949.312:1275): user pid=6004 uid=0 auid=0 ses=52 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_START msg=audit(1398700949.317:1276): user pid=6004 uid=0 auid=0 ses=52 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_LOGIN msg=audit(1398700949.324:1277): user pid=6004 uid=0 auid=0 ses=52 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_START msg=audit(1398700949.324:1278): user pid=6004 uid=0 auid=0 ses=52 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700949.327:1279): user pid=6008 uid=0 auid=0 ses=52 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=6008 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700949.327:1280): user pid=6008 uid=0 auid=0 ses=52 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=6008 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRED_REFR msg=audit(1398700949.328:1281): user pid=6008 uid=0 auid=0 ses=52 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_END msg=audit(1398700949.375:1282): user pid=6004 uid=0 auid=0 ses=52 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=CRED_DISP msg=audit(1398700949.376:1283): user pid=6004 uid=0 auid=0 ses=52 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_END msg=audit(1398700949.376:1284): user pid=6004 uid=0 auid=0 ses=52 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_LOGOUT msg=audit(1398700949.377:1285): user pid=6004 uid=0 auid=0 ses=52 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700949.377:1286): user pid=6004 uid=0 auid=0 ses=52 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=6004 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700949.377:1287): user pid=6004 uid=0 auid=0 ses=52 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=6004 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700949.377:1288): user pid=6004 uid=0 auid=0 ses=52 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=6004 suid=0 rport=42162 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700952.405:1289): user pid=6016 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=6016 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700952.405:1290): user pid=6016 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=6016 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_SESSION msg=audit(1398700952.405:1291): user pid=6015 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 spid=6016 suid=74 rport=42163 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_SESSION msg=audit(1398700952.405:1292): user pid=6015 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 spid=6016 suid=74 rport=42163 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=USER_AUTH msg=audit(1398700952.474:1293): user pid=6015 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=42163 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=USER_AUTH msg=audit(1398700952.474:1294): user pid=6015 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=8b:2d:a5:06:3e:34:8a:e0:bf:ca:69:94:eb:59:f0:19 rport=42163 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=USER_ACCT msg=audit(1398700952.482:1295): user pid=6015 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700952.483:1296): user pid=6015 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=6016 suid=74 rport=42163 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=USER_AUTH msg=audit(1398700952.484:1297): user pid=6015 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=ssh res=success'
>type=CRED_ACQ msg=audit(1398700952.484:1298): user pid=6015 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=LOGIN msg=audit(1398700952.484:1299): pid=6015 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=53
>type=USER_ROLE_CHANGE msg=audit(1398700952.582:1300): user pid=6015 uid=0 auid=0 ses=53 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_START msg=audit(1398700952.586:1301): user pid=6015 uid=0 auid=0 ses=53 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_LOGIN msg=audit(1398700952.594:1302): user pid=6015 uid=0 auid=0 ses=53 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_START msg=audit(1398700952.595:1303): user pid=6015 uid=0 auid=0 ses=53 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700952.597:1304): user pid=6018 uid=0 auid=0 ses=53 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=6018 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700952.597:1305): user pid=6018 uid=0 auid=0 ses=53 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=6018 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRED_REFR msg=audit(1398700952.598:1306): user pid=6018 uid=0 auid=0 ses=53 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_END msg=audit(1398700952.645:1307): user pid=6015 uid=0 auid=0 ses=53 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=CRED_DISP msg=audit(1398700952.645:1308): user pid=6015 uid=0 auid=0 ses=53 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_END msg=audit(1398700952.646:1309): user pid=6015 uid=0 auid=0 ses=53 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_LOGOUT msg=audit(1398700952.646:1310): user pid=6015 uid=0 auid=0 ses=53 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700952.647:1311): user pid=6015 uid=0 auid=0 ses=53 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=6015 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700952.647:1312): user pid=6015 uid=0 auid=0 ses=53 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=6015 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700952.647:1313): user pid=6015 uid=0 auid=0 ses=53 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=6015 suid=0 rport=42163 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=MAC_POLICY_LOAD msg=audit(1398700953.078:1314): policy loaded auid=0 ses=40
>type=SYSCALL msg=audit(1398700953.078:1314): arch=c000003e syscall=1 success=yes exit=7318143 a0=4 a1=7fc01ea03000 a2=6faa7f a3=7fff90063480 items=0 ppid=5988 pid=6021 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=40 comm="load_policy" exe="/sbin/load_policy" subj=unconfined_u:system_r:load_policy_t:s0-s0:c0.c1023 key=(null)
>type=CRYPTO_KEY_USER msg=audit(1398700955.696:1315): user pid=6028 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=6028 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700955.696:1316): user pid=6028 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=6028 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_SESSION msg=audit(1398700955.698:1317): user pid=6027 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 spid=6028 suid=74 rport=42164 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_SESSION msg=audit(1398700955.698:1318): user pid=6027 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 spid=6028 suid=74 rport=42164 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=USER_AUTH msg=audit(1398700955.762:1319): user pid=6027 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=42164 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=USER_AUTH msg=audit(1398700955.763:1320): user pid=6027 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=8b:2d:a5:06:3e:34:8a:e0:bf:ca:69:94:eb:59:f0:19 rport=42164 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=USER_ACCT msg=audit(1398700955.769:1321): user pid=6027 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700955.770:1322): user pid=6027 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=6028 suid=74 rport=42164 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=USER_AUTH msg=audit(1398700955.770:1323): user pid=6027 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=ssh res=success'
>type=CRED_ACQ msg=audit(1398700955.771:1324): user pid=6027 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=LOGIN msg=audit(1398700955.771:1325): pid=6027 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=54
>type=USER_ROLE_CHANGE msg=audit(1398700955.889:1326): user pid=6027 uid=0 auid=0 ses=54 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_START msg=audit(1398700955.893:1327): user pid=6027 uid=0 auid=0 ses=54 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_LOGIN msg=audit(1398700955.900:1328): user pid=6027 uid=0 auid=0 ses=54 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_START msg=audit(1398700955.901:1329): user pid=6027 uid=0 auid=0 ses=54 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700955.904:1330): user pid=6030 uid=0 auid=0 ses=54 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=6030 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700955.904:1331): user pid=6030 uid=0 auid=0 ses=54 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=6030 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRED_REFR msg=audit(1398700955.905:1332): user pid=6030 uid=0 auid=0 ses=54 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_END msg=audit(1398700955.951:1333): user pid=6027 uid=0 auid=0 ses=54 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=CRED_DISP msg=audit(1398700955.952:1334): user pid=6027 uid=0 auid=0 ses=54 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_END msg=audit(1398700955.953:1335): user pid=6027 uid=0 auid=0 ses=54 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_LOGOUT msg=audit(1398700955.953:1336): user pid=6027 uid=0 auid=0 ses=54 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700955.953:1337): user pid=6027 uid=0 auid=0 ses=54 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=6027 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700955.953:1338): user pid=6027 uid=0 auid=0 ses=54 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=6027 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700955.953:1339): user pid=6027 uid=0 auid=0 ses=54 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=6027 suid=0 rport=42164 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700958.970:1340): user pid=6037 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=6037 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700958.971:1341): user pid=6037 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=6037 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_SESSION msg=audit(1398700958.971:1342): user pid=6036 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 spid=6037 suid=74 rport=42165 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_SESSION msg=audit(1398700958.971:1343): user pid=6036 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 spid=6037 suid=74 rport=42165 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=USER_AUTH msg=audit(1398700959.025:1344): user pid=6036 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=42165 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=USER_AUTH msg=audit(1398700959.025:1345): user pid=6036 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=8b:2d:a5:06:3e:34:8a:e0:bf:ca:69:94:eb:59:f0:19 rport=42165 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=USER_ACCT msg=audit(1398700959.031:1346): user pid=6036 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700959.031:1347): user pid=6036 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=6037 suid=74 rport=42165 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=USER_AUTH msg=audit(1398700959.032:1348): user pid=6036 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=ssh res=success'
>type=CRED_ACQ msg=audit(1398700959.032:1349): user pid=6036 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=LOGIN msg=audit(1398700959.032:1350): pid=6036 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=55
>type=USER_ROLE_CHANGE msg=audit(1398700959.129:1351): user pid=6036 uid=0 auid=0 ses=55 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_START msg=audit(1398700959.134:1352): user pid=6036 uid=0 auid=0 ses=55 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_LOGIN msg=audit(1398700959.140:1353): user pid=6036 uid=0 auid=0 ses=55 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_START msg=audit(1398700959.140:1354): user pid=6036 uid=0 auid=0 ses=55 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700959.143:1355): user pid=6039 uid=0 auid=0 ses=55 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=6039 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700959.143:1356): user pid=6039 uid=0 auid=0 ses=55 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=6039 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRED_REFR msg=audit(1398700959.144:1357): user pid=6039 uid=0 auid=0 ses=55 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_END msg=audit(1398700959.194:1358): user pid=6036 uid=0 auid=0 ses=55 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=CRED_DISP msg=audit(1398700959.195:1359): user pid=6036 uid=0 auid=0 ses=55 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_END msg=audit(1398700959.195:1360): user pid=6036 uid=0 auid=0 ses=55 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_LOGOUT msg=audit(1398700959.196:1361): user pid=6036 uid=0 auid=0 ses=55 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700959.196:1362): user pid=6036 uid=0 auid=0 ses=55 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=6036 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700959.196:1363): user pid=6036 uid=0 auid=0 ses=55 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=6036 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700959.196:1364): user pid=6036 uid=0 auid=0 ses=55 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=6036 suid=0 rport=42165 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=MAC_POLICY_LOAD msg=audit(1398700960.421:1365): policy loaded auid=0 ses=40
>type=SYSCALL msg=audit(1398700960.421:1365): arch=c000003e syscall=1 success=yes exit=7318143 a0=4 a1=7ff2b24bc000 a2=6faa7f a3=7fff5d06e590 items=0 ppid=6023 pid=6042 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=40 comm="load_policy" exe="/sbin/load_policy" subj=unconfined_u:system_r:load_policy_t:s0-s0:c0.c1023 key=(null)
>type=CRYPTO_KEY_USER msg=audit(1398700962.292:1366): user pid=6048 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=6048 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700962.292:1367): user pid=6048 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=6048 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_SESSION msg=audit(1398700962.295:1368): user pid=6047 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 spid=6048 suid=74 rport=42166 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_SESSION msg=audit(1398700962.295:1369): user pid=6047 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 spid=6048 suid=74 rport=42166 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=USER_AUTH msg=audit(1398700962.375:1370): user pid=6047 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=42166 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=USER_AUTH msg=audit(1398700962.375:1371): user pid=6047 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=8b:2d:a5:06:3e:34:8a:e0:bf:ca:69:94:eb:59:f0:19 rport=42166 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=USER_ACCT msg=audit(1398700962.381:1372): user pid=6047 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700962.382:1373): user pid=6047 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=6048 suid=74 rport=42166 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=USER_AUTH msg=audit(1398700962.382:1374): user pid=6047 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=ssh res=success'
>type=CRED_ACQ msg=audit(1398700962.383:1375): user pid=6047 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=LOGIN msg=audit(1398700962.383:1376): pid=6047 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=56
>type=USER_ROLE_CHANGE msg=audit(1398700962.495:1377): user pid=6047 uid=0 auid=0 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_START msg=audit(1398700962.499:1378): user pid=6047 uid=0 auid=0 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_LOGIN msg=audit(1398700962.506:1379): user pid=6047 uid=0 auid=0 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_START msg=audit(1398700962.507:1380): user pid=6047 uid=0 auid=0 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700962.510:1381): user pid=6050 uid=0 auid=0 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=6050 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700962.510:1382): user pid=6050 uid=0 auid=0 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=6050 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRED_REFR msg=audit(1398700962.511:1383): user pid=6050 uid=0 auid=0 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_END msg=audit(1398700962.560:1384): user pid=6047 uid=0 auid=0 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=CRED_DISP msg=audit(1398700962.560:1385): user pid=6047 uid=0 auid=0 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_END msg=audit(1398700962.561:1386): user pid=6047 uid=0 auid=0 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_LOGOUT msg=audit(1398700962.561:1387): user pid=6047 uid=0 auid=0 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700962.561:1388): user pid=6047 uid=0 auid=0 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=6047 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700962.562:1389): user pid=6047 uid=0 auid=0 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=6047 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700962.562:1390): user pid=6047 uid=0 auid=0 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=6047 suid=0 rport=42166 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700965.580:1391): user pid=6058 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=6058 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700965.580:1392): user pid=6058 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=6058 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_SESSION msg=audit(1398700965.580:1393): user pid=6057 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 spid=6058 suid=74 rport=42167 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_SESSION msg=audit(1398700965.580:1394): user pid=6057 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 spid=6058 suid=74 rport=42167 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=USER_AUTH msg=audit(1398700965.635:1395): user pid=6057 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=42167 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=USER_AUTH msg=audit(1398700965.635:1396): user pid=6057 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=8b:2d:a5:06:3e:34:8a:e0:bf:ca:69:94:eb:59:f0:19 rport=42167 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=USER_ACCT msg=audit(1398700965.641:1397): user pid=6057 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700965.642:1398): user pid=6057 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=6058 suid=74 rport=42167 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=USER_AUTH msg=audit(1398700965.642:1399): user pid=6057 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=ssh res=success'
>type=CRED_ACQ msg=audit(1398700965.643:1400): user pid=6057 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=LOGIN msg=audit(1398700965.643:1401): pid=6057 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=57
>type=USER_ROLE_CHANGE msg=audit(1398700965.750:1402): user pid=6057 uid=0 auid=0 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_START msg=audit(1398700965.753:1403): user pid=6057 uid=0 auid=0 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_LOGIN msg=audit(1398700965.760:1404): user pid=6057 uid=0 auid=0 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_START msg=audit(1398700965.761:1405): user pid=6057 uid=0 auid=0 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700965.764:1406): user pid=6060 uid=0 auid=0 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=6060 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700965.764:1407): user pid=6060 uid=0 auid=0 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=6060 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRED_REFR msg=audit(1398700965.765:1408): user pid=6060 uid=0 auid=0 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_END msg=audit(1398700965.816:1409): user pid=6057 uid=0 auid=0 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=CRED_DISP msg=audit(1398700965.816:1410): user pid=6057 uid=0 auid=0 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_END msg=audit(1398700965.817:1411): user pid=6057 uid=0 auid=0 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_LOGOUT msg=audit(1398700965.817:1412): user pid=6057 uid=0 auid=0 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700965.817:1413): user pid=6057 uid=0 auid=0 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=6057 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700965.817:1414): user pid=6057 uid=0 auid=0 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=6057 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700965.817:1415): user pid=6057 uid=0 auid=0 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=6057 suid=0 rport=42167 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700968.834:1416): user pid=6068 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=6068 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700968.834:1417): user pid=6068 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=6068 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_SESSION msg=audit(1398700968.835:1418): user pid=6067 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 spid=6068 suid=74 rport=42168 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_SESSION msg=audit(1398700968.835:1419): user pid=6067 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 spid=6068 suid=74 rport=42168 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=USER_AUTH msg=audit(1398700968.893:1420): user pid=6067 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=42168 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=USER_AUTH msg=audit(1398700968.893:1421): user pid=6067 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=8b:2d:a5:06:3e:34:8a:e0:bf:ca:69:94:eb:59:f0:19 rport=42168 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=USER_ACCT msg=audit(1398700968.898:1422): user pid=6067 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700968.899:1423): user pid=6067 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=6068 suid=74 rport=42168 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=USER_AUTH msg=audit(1398700968.899:1424): user pid=6067 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=ssh res=success'
>type=CRED_ACQ msg=audit(1398700968.900:1425): user pid=6067 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=LOGIN msg=audit(1398700968.900:1426): pid=6067 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=58
>type=USER_ROLE_CHANGE msg=audit(1398700968.988:1427): user pid=6067 uid=0 auid=0 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_START msg=audit(1398700968.992:1428): user pid=6067 uid=0 auid=0 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_LOGIN msg=audit(1398700968.996:1429): user pid=6067 uid=0 auid=0 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_START msg=audit(1398700968.997:1430): user pid=6067 uid=0 auid=0 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700968.999:1431): user pid=6070 uid=0 auid=0 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=6070 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700969.000:1432): user pid=6070 uid=0 auid=0 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=6070 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRED_REFR msg=audit(1398700969.000:1433): user pid=6070 uid=0 auid=0 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_END msg=audit(1398700969.039:1434): user pid=6067 uid=0 auid=0 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=CRED_DISP msg=audit(1398700969.040:1435): user pid=6067 uid=0 auid=0 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_END msg=audit(1398700969.041:1436): user pid=6067 uid=0 auid=0 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_LOGOUT msg=audit(1398700969.041:1437): user pid=6067 uid=0 auid=0 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700969.042:1438): user pid=6067 uid=0 auid=0 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=6067 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700969.042:1439): user pid=6067 uid=0 auid=0 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=6067 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700969.042:1440): user pid=6067 uid=0 auid=0 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=6067 suid=0 rport=42168 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=MAC_POLICY_LOAD msg=audit(1398700968.137:1441): policy loaded auid=0 ses=40
>type=SYSCALL msg=audit(1398700968.137:1441): arch=c000003e syscall=1 success=yes exit=7318143 a0=4 a1=7f9437dba000 a2=6faa7f a3=7fff5ecb7130 items=0 ppid=6053 pid=6063 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=40 comm="load_policy" exe="/sbin/load_policy" subj=unconfined_u:system_r:load_policy_t:s0-s0:c0.c1023 key=(null)
>type=CRYPTO_KEY_USER msg=audit(1398700972.124:1442): user pid=6084 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=6084 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700972.124:1443): user pid=6084 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=6084 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_SESSION msg=audit(1398700972.127:1444): user pid=6083 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 spid=6084 suid=74 rport=42169 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_SESSION msg=audit(1398700972.127:1445): user pid=6083 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 spid=6084 suid=74 rport=42169 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=USER_AUTH msg=audit(1398700972.206:1446): user pid=6083 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=42169 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=USER_AUTH msg=audit(1398700972.206:1447): user pid=6083 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=8b:2d:a5:06:3e:34:8a:e0:bf:ca:69:94:eb:59:f0:19 rport=42169 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=USER_ACCT msg=audit(1398700972.212:1448): user pid=6083 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700972.213:1449): user pid=6083 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=6084 suid=74 rport=42169 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=USER_AUTH msg=audit(1398700972.214:1450): user pid=6083 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=ssh res=success'
>type=CRED_ACQ msg=audit(1398700972.214:1451): user pid=6083 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=LOGIN msg=audit(1398700972.214:1452): pid=6083 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=59
>type=USER_ROLE_CHANGE msg=audit(1398700972.336:1453): user pid=6083 uid=0 auid=0 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_START msg=audit(1398700972.341:1454): user pid=6083 uid=0 auid=0 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_LOGIN msg=audit(1398700972.348:1455): user pid=6083 uid=0 auid=0 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_START msg=audit(1398700972.349:1456): user pid=6083 uid=0 auid=0 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700972.352:1457): user pid=6086 uid=0 auid=0 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=6086 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700972.352:1458): user pid=6086 uid=0 auid=0 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=6086 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRED_REFR msg=audit(1398700972.353:1459): user pid=6086 uid=0 auid=0 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_END msg=audit(1398700972.393:1460): user pid=6083 uid=0 auid=0 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=CRED_DISP msg=audit(1398700972.393:1461): user pid=6083 uid=0 auid=0 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_END msg=audit(1398700972.394:1462): user pid=6083 uid=0 auid=0 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_LOGOUT msg=audit(1398700972.394:1463): user pid=6083 uid=0 auid=0 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700972.394:1464): user pid=6083 uid=0 auid=0 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=6083 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700972.394:1465): user pid=6083 uid=0 auid=0 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=6083 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700972.394:1466): user pid=6083 uid=0 auid=0 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=6083 suid=0 rport=42169 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700975.425:1467): user pid=6094 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=6094 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700975.425:1468): user pid=6094 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=6094 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_SESSION msg=audit(1398700975.425:1469): user pid=6093 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 spid=6094 suid=74 rport=42170 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_SESSION msg=audit(1398700975.425:1470): user pid=6093 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 spid=6094 suid=74 rport=42170 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=USER_AUTH msg=audit(1398700975.484:1471): user pid=6093 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=42170 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=USER_AUTH msg=audit(1398700975.484:1472): user pid=6093 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=8b:2d:a5:06:3e:34:8a:e0:bf:ca:69:94:eb:59:f0:19 rport=42170 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=USER_ACCT msg=audit(1398700975.490:1473): user pid=6093 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700975.490:1474): user pid=6093 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=6094 suid=74 rport=42170 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=USER_AUTH msg=audit(1398700975.491:1475): user pid=6093 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=ssh res=success'
>type=CRED_ACQ msg=audit(1398700975.491:1476): user pid=6093 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=LOGIN msg=audit(1398700975.491:1477): pid=6093 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=60
>type=USER_ROLE_CHANGE msg=audit(1398700975.583:1478): user pid=6093 uid=0 auid=0 ses=60 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_START msg=audit(1398700975.587:1479): user pid=6093 uid=0 auid=0 ses=60 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_LOGIN msg=audit(1398700975.594:1480): user pid=6093 uid=0 auid=0 ses=60 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_START msg=audit(1398700975.594:1481): user pid=6093 uid=0 auid=0 ses=60 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700975.595:1482): user pid=6096 uid=0 auid=0 ses=60 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=6096 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700975.595:1483): user pid=6096 uid=0 auid=0 ses=60 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=6096 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRED_REFR msg=audit(1398700975.596:1484): user pid=6096 uid=0 auid=0 ses=60 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_END msg=audit(1398700975.636:1485): user pid=6093 uid=0 auid=0 ses=60 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=CRED_DISP msg=audit(1398700975.636:1486): user pid=6093 uid=0 auid=0 ses=60 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_END msg=audit(1398700975.637:1487): user pid=6093 uid=0 auid=0 ses=60 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_LOGOUT msg=audit(1398700975.638:1488): user pid=6093 uid=0 auid=0 ses=60 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700975.638:1489): user pid=6093 uid=0 auid=0 ses=60 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=6093 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700975.638:1490): user pid=6093 uid=0 auid=0 ses=60 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=6093 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700975.638:1491): user pid=6093 uid=0 auid=0 ses=60 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=6093 suid=0 rport=42170 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700975.667:1492): user pid=6101 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=6101 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700975.667:1493): user pid=6101 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=6101 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_SESSION msg=audit(1398700975.667:1494): user pid=6100 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 spid=6101 suid=74 rport=42171 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_SESSION msg=audit(1398700975.668:1495): user pid=6100 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 spid=6101 suid=74 rport=42171 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=USER_AUTH msg=audit(1398700975.726:1496): user pid=6100 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=42171 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=USER_AUTH msg=audit(1398700975.726:1497): user pid=6100 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=8b:2d:a5:06:3e:34:8a:e0:bf:ca:69:94:eb:59:f0:19 rport=42171 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=USER_ACCT msg=audit(1398700975.732:1498): user pid=6100 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700975.733:1499): user pid=6100 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=6101 suid=74 rport=42171 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=USER_AUTH msg=audit(1398700975.733:1500): user pid=6100 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=ssh res=success'
>type=CRED_ACQ msg=audit(1398700975.734:1501): user pid=6100 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=LOGIN msg=audit(1398700975.734:1502): pid=6100 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=61
>type=USER_ROLE_CHANGE msg=audit(1398700975.826:1503): user pid=6100 uid=0 auid=0 ses=61 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_START msg=audit(1398700975.830:1504): user pid=6100 uid=0 auid=0 ses=61 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_LOGIN msg=audit(1398700975.835:1505): user pid=6100 uid=0 auid=0 ses=61 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_START msg=audit(1398700975.835:1506): user pid=6100 uid=0 auid=0 ses=61 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700975.836:1507): user pid=6103 uid=0 auid=0 ses=61 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=6103 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700975.836:1508): user pid=6103 uid=0 auid=0 ses=61 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=6103 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRED_REFR msg=audit(1398700975.838:1509): user pid=6103 uid=0 auid=0 ses=61 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_END msg=audit(1398700975.874:1510): user pid=6100 uid=0 auid=0 ses=61 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=CRED_DISP msg=audit(1398700975.874:1511): user pid=6100 uid=0 auid=0 ses=61 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_END msg=audit(1398700975.875:1512): user pid=6100 uid=0 auid=0 ses=61 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_LOGOUT msg=audit(1398700975.875:1513): user pid=6100 uid=0 auid=0 ses=61 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700975.875:1514): user pid=6100 uid=0 auid=0 ses=61 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=6100 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700975.876:1515): user pid=6100 uid=0 auid=0 ses=61 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=6100 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700975.876:1516): user pid=6100 uid=0 auid=0 ses=61 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=6100 suid=0 rport=42171 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700975.896:1517): user pid=6113 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=6113 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700975.896:1518): user pid=6113 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=6113 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_SESSION msg=audit(1398700975.897:1519): user pid=6112 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 spid=6113 suid=74 rport=42172 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_SESSION msg=audit(1398700975.897:1520): user pid=6112 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 spid=6113 suid=74 rport=42172 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=USER_AUTH msg=audit(1398700975.964:1521): user pid=6112 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=42172 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=USER_AUTH msg=audit(1398700975.964:1522): user pid=6112 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=8b:2d:a5:06:3e:34:8a:e0:bf:ca:69:94:eb:59:f0:19 rport=42172 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=USER_ACCT msg=audit(1398700975.972:1523): user pid=6112 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700975.973:1524): user pid=6112 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=6113 suid=74 rport=42172 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=USER_AUTH msg=audit(1398700975.973:1525): user pid=6112 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=ssh res=success'
>type=CRED_ACQ msg=audit(1398700975.974:1526): user pid=6112 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=LOGIN msg=audit(1398700975.974:1527): pid=6112 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=62
>type=USER_ROLE_CHANGE msg=audit(1398700976.070:1528): user pid=6112 uid=0 auid=0 ses=62 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_START msg=audit(1398700976.074:1529): user pid=6112 uid=0 auid=0 ses=62 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_LOGIN msg=audit(1398700976.081:1530): user pid=6112 uid=0 auid=0 ses=62 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_START msg=audit(1398700976.081:1531): user pid=6112 uid=0 auid=0 ses=62 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700976.084:1532): user pid=6126 uid=0 auid=0 ses=62 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=6126 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700976.084:1533): user pid=6126 uid=0 auid=0 ses=62 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=6126 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRED_REFR msg=audit(1398700976.085:1534): user pid=6126 uid=0 auid=0 ses=62 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_END msg=audit(1398700976.121:1535): user pid=6112 uid=0 auid=0 ses=62 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=CRED_DISP msg=audit(1398700976.122:1536): user pid=6112 uid=0 auid=0 ses=62 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_END msg=audit(1398700976.122:1537): user pid=6112 uid=0 auid=0 ses=62 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_LOGOUT msg=audit(1398700976.123:1538): user pid=6112 uid=0 auid=0 ses=62 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700976.123:1539): user pid=6112 uid=0 auid=0 ses=62 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=6112 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700976.123:1540): user pid=6112 uid=0 auid=0 ses=62 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=6112 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700976.123:1541): user pid=6112 uid=0 auid=0 ses=62 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=6112 suid=0 rport=42172 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700976.149:1542): user pid=6137 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=6137 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700976.149:1543): user pid=6137 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=6137 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_SESSION msg=audit(1398700976.149:1544): user pid=6136 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 spid=6137 suid=74 rport=42173 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_SESSION msg=audit(1398700976.150:1545): user pid=6136 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 spid=6137 suid=74 rport=42173 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=USER_AUTH msg=audit(1398700976.207:1546): user pid=6136 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=42173 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=USER_AUTH msg=audit(1398700976.207:1547): user pid=6136 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=8b:2d:a5:06:3e:34:8a:e0:bf:ca:69:94:eb:59:f0:19 rport=42173 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=USER_ACCT msg=audit(1398700976.220:1548): user pid=6136 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700976.221:1549): user pid=6136 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=6137 suid=74 rport=42173 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=USER_AUTH msg=audit(1398700976.221:1550): user pid=6136 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=ssh res=success'
>type=CRED_ACQ msg=audit(1398700976.222:1551): user pid=6136 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=LOGIN msg=audit(1398700976.222:1552): pid=6136 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=63
>type=USER_ROLE_CHANGE msg=audit(1398700976.391:1553): user pid=6136 uid=0 auid=0 ses=63 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_START msg=audit(1398700976.399:1554): user pid=6136 uid=0 auid=0 ses=63 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_LOGIN msg=audit(1398700976.411:1555): user pid=6136 uid=0 auid=0 ses=63 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_START msg=audit(1398700976.412:1556): user pid=6136 uid=0 auid=0 ses=63 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700976.414:1557): user pid=6143 uid=0 auid=0 ses=63 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=6143 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700976.414:1558): user pid=6143 uid=0 auid=0 ses=63 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=6143 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRED_REFR msg=audit(1398700976.420:1559): user pid=6143 uid=0 auid=0 ses=63 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_END msg=audit(1398700976.468:1560): user pid=6136 uid=0 auid=0 ses=63 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=CRED_DISP msg=audit(1398700976.485:1561): user pid=6136 uid=0 auid=0 ses=63 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_END msg=audit(1398700976.487:1562): user pid=6136 uid=0 auid=0 ses=63 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_LOGOUT msg=audit(1398700976.489:1563): user pid=6136 uid=0 auid=0 ses=63 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700976.489:1564): user pid=6136 uid=0 auid=0 ses=63 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=6136 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700976.489:1565): user pid=6136 uid=0 auid=0 ses=63 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=6136 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700976.489:1566): user pid=6136 uid=0 auid=0 ses=63 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=6136 suid=0 rport=42173 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700979.525:1567): user pid=6454 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=6454 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700979.525:1568): user pid=6454 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=6454 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_SESSION msg=audit(1398700979.526:1569): user pid=6453 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 spid=6454 suid=74 rport=42174 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_SESSION msg=audit(1398700979.526:1570): user pid=6453 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 spid=6454 suid=74 rport=42174 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=USER_AUTH msg=audit(1398700979.602:1571): user pid=6453 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=42174 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=USER_AUTH msg=audit(1398700979.602:1572): user pid=6453 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=8b:2d:a5:06:3e:34:8a:e0:bf:ca:69:94:eb:59:f0:19 rport=42174 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=USER_ACCT msg=audit(1398700979.614:1573): user pid=6453 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700979.618:1574): user pid=6453 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=6454 suid=74 rport=42174 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=USER_AUTH msg=audit(1398700979.619:1575): user pid=6453 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=ssh res=success'
>type=CRED_ACQ msg=audit(1398700979.620:1576): user pid=6453 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=LOGIN msg=audit(1398700979.620:1577): pid=6453 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=64
>type=USER_ROLE_CHANGE msg=audit(1398700979.791:1578): user pid=6453 uid=0 auid=0 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_START msg=audit(1398700979.795:1579): user pid=6453 uid=0 auid=0 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_LOGIN msg=audit(1398700979.796:1580): user pid=6453 uid=0 auid=0 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_START msg=audit(1398700979.797:1581): user pid=6453 uid=0 auid=0 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700979.799:1582): user pid=6456 uid=0 auid=0 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=6456 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700979.799:1583): user pid=6456 uid=0 auid=0 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=6456 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRED_REFR msg=audit(1398700979.800:1584): user pid=6456 uid=0 auid=0 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_END msg=audit(1398700979.842:1585): user pid=6453 uid=0 auid=0 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_LOGOUT msg=audit(1398700979.842:1586): user pid=6453 uid=0 auid=0 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_END msg=audit(1398700979.843:1587): user pid=6453 uid=0 auid=0 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=CRED_DISP msg=audit(1398700979.844:1588): user pid=6453 uid=0 auid=0 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700979.844:1589): user pid=6453 uid=0 auid=0 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=6453 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700979.844:1590): user pid=6453 uid=0 auid=0 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=6453 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700979.844:1591): user pid=6453 uid=0 auid=0 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=6453 suid=0 rport=42174 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=USER_ACCT msg=audit(1398700981.963:1592): user pid=6627 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=CRED_ACQ msg=audit(1398700981.963:1593): user pid=6627 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=LOGIN msg=audit(1398700981.976:1594): pid=6627 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=65
>type=USER_START msg=audit(1398700981.985:1595): user pid=6627 uid=0 auid=0 ses=65 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=CRED_DISP msg=audit(1398700982.049:1596): user pid=6627 uid=0 auid=0 ses=65 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=USER_END msg=audit(1398700982.049:1597): user pid=6627 uid=0 auid=0 ses=65 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700982.875:1598): user pid=6775 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=6775 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700982.875:1599): user pid=6775 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=6775 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_SESSION msg=audit(1398700982.876:1600): user pid=6774 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 spid=6775 suid=74 rport=42175 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_SESSION msg=audit(1398700982.876:1601): user pid=6774 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 spid=6775 suid=74 rport=42175 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=USER_AUTH msg=audit(1398700982.937:1602): user pid=6774 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=42175 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=USER_AUTH msg=audit(1398700982.937:1603): user pid=6774 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=8b:2d:a5:06:3e:34:8a:e0:bf:ca:69:94:eb:59:f0:19 rport=42175 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=USER_ACCT msg=audit(1398700982.942:1604): user pid=6774 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700982.942:1605): user pid=6774 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=6775 suid=74 rport=42175 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=USER_AUTH msg=audit(1398700982.943:1606): user pid=6774 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=ssh res=success'
>type=CRED_ACQ msg=audit(1398700982.943:1607): user pid=6774 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=LOGIN msg=audit(1398700982.943:1608): pid=6774 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=66
>type=USER_ROLE_CHANGE msg=audit(1398700983.061:1609): user pid=6774 uid=0 auid=0 ses=66 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_START msg=audit(1398700983.067:1610): user pid=6774 uid=0 auid=0 ses=66 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_LOGIN msg=audit(1398700983.075:1611): user pid=6774 uid=0 auid=0 ses=66 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_START msg=audit(1398700983.082:1612): user pid=6774 uid=0 auid=0 ses=66 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700983.089:1613): user pid=6777 uid=0 auid=0 ses=66 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=6777 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700983.089:1614): user pid=6777 uid=0 auid=0 ses=66 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=6777 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRED_REFR msg=audit(1398700983.090:1615): user pid=6777 uid=0 auid=0 ses=66 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_END msg=audit(1398700983.145:1616): user pid=6774 uid=0 auid=0 ses=66 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=CRED_DISP msg=audit(1398700983.146:1617): user pid=6774 uid=0 auid=0 ses=66 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_END msg=audit(1398700983.146:1618): user pid=6774 uid=0 auid=0 ses=66 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_LOGOUT msg=audit(1398700983.147:1619): user pid=6774 uid=0 auid=0 ses=66 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700983.147:1620): user pid=6774 uid=0 auid=0 ses=66 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=6774 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700983.147:1621): user pid=6774 uid=0 auid=0 ses=66 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=6774 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700983.147:1622): user pid=6774 uid=0 auid=0 ses=66 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=6774 suid=0 rport=42175 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700986.166:1623): user pid=6787 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=6787 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700986.166:1624): user pid=6787 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=6787 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_SESSION msg=audit(1398700986.168:1625): user pid=6786 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 spid=6787 suid=74 rport=42177 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_SESSION msg=audit(1398700986.168:1626): user pid=6786 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 spid=6787 suid=74 rport=42177 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=USER_AUTH msg=audit(1398700986.229:1627): user pid=6786 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=42177 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=USER_AUTH msg=audit(1398700986.229:1628): user pid=6786 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=8b:2d:a5:06:3e:34:8a:e0:bf:ca:69:94:eb:59:f0:19 rport=42177 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=USER_ACCT msg=audit(1398700986.241:1629): user pid=6786 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700986.242:1630): user pid=6786 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=6787 suid=74 rport=42177 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=USER_AUTH msg=audit(1398700986.243:1631): user pid=6786 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=ssh res=success'
>type=CRED_ACQ msg=audit(1398700986.243:1632): user pid=6786 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=LOGIN msg=audit(1398700986.243:1633): pid=6786 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=67
>type=USER_ROLE_CHANGE msg=audit(1398700986.358:1634): user pid=6786 uid=0 auid=0 ses=67 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_START msg=audit(1398700986.364:1635): user pid=6786 uid=0 auid=0 ses=67 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_LOGIN msg=audit(1398700986.373:1636): user pid=6786 uid=0 auid=0 ses=67 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_START msg=audit(1398700986.373:1637): user pid=6786 uid=0 auid=0 ses=67 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700986.376:1638): user pid=6791 uid=0 auid=0 ses=67 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=6791 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700986.376:1639): user pid=6791 uid=0 auid=0 ses=67 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=6791 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRED_REFR msg=audit(1398700986.378:1640): user pid=6791 uid=0 auid=0 ses=67 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_END msg=audit(1398700986.437:1641): user pid=6786 uid=0 auid=0 ses=67 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=CRED_DISP msg=audit(1398700986.440:1642): user pid=6786 uid=0 auid=0 ses=67 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_END msg=audit(1398700986.440:1643): user pid=6786 uid=0 auid=0 ses=67 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_LOGOUT msg=audit(1398700986.441:1644): user pid=6786 uid=0 auid=0 ses=67 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700986.441:1645): user pid=6786 uid=0 auid=0 ses=67 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=6786 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700986.441:1646): user pid=6786 uid=0 auid=0 ses=67 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=6786 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700986.441:1647): user pid=6786 uid=0 auid=0 ses=67 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=6786 suid=0 rport=42177 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=NETFILTER_CFG msg=audit(1398700986.459:1648): table=filter family=2 entries=0
>type=SYSCALL msg=audit(1398700986.459:1648): arch=c000003e syscall=175 success=yes exit=0 a0=c800f0 a1=22a0 a2=c78510 a3=7fff70824910 items=0 ppid=6797 pid=6798 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="modprobe" exe="/sbin/modprobe" subj=system_u:system_r:insmod_t:s0 key=(null)
>type=NETFILTER_CFG msg=audit(1398700986.461:1649): table=filter family=2 entries=4
>type=SYSCALL msg=audit(1398700986.461:1649): arch=c000003e syscall=54 success=yes exit=0 a0=3 a1=0 a2=40 a3=18502c0 items=0 ppid=6110 pid=6790 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=61 comm="iptables" exe="/sbin/iptables-multi-1.4.7" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null)
>type=CRYPTO_KEY_USER msg=audit(1398700989.473:1650): user pid=6833 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=6833 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700989.474:1651): user pid=6833 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=6833 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_SESSION msg=audit(1398700989.474:1652): user pid=6832 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 spid=6833 suid=74 rport=42180 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_SESSION msg=audit(1398700989.474:1653): user pid=6832 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 spid=6833 suid=74 rport=42180 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=USER_AUTH msg=audit(1398700989.533:1654): user pid=6832 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=42180 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=USER_AUTH msg=audit(1398700989.533:1655): user pid=6832 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=8b:2d:a5:06:3e:34:8a:e0:bf:ca:69:94:eb:59:f0:19 rport=42180 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=USER_ACCT msg=audit(1398700989.539:1656): user pid=6832 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700989.540:1657): user pid=6832 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=6833 suid=74 rport=42180 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=USER_AUTH msg=audit(1398700989.541:1658): user pid=6832 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=ssh res=success'
>type=CRED_ACQ msg=audit(1398700989.541:1659): user pid=6832 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=LOGIN msg=audit(1398700989.542:1660): pid=6832 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=68
>type=USER_ROLE_CHANGE msg=audit(1398700989.659:1661): user pid=6832 uid=0 auid=0 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_START msg=audit(1398700989.664:1662): user pid=6832 uid=0 auid=0 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_LOGIN msg=audit(1398700989.672:1663): user pid=6832 uid=0 auid=0 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_START msg=audit(1398700989.672:1664): user pid=6832 uid=0 auid=0 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700989.673:1665): user pid=6835 uid=0 auid=0 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=6835 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700989.673:1666): user pid=6835 uid=0 auid=0 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=6835 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRED_REFR msg=audit(1398700989.675:1667): user pid=6835 uid=0 auid=0 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_END msg=audit(1398700989.718:1668): user pid=6832 uid=0 auid=0 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=CRED_DISP msg=audit(1398700989.719:1669): user pid=6832 uid=0 auid=0 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_END msg=audit(1398700989.719:1670): user pid=6832 uid=0 auid=0 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_LOGOUT msg=audit(1398700989.720:1671): user pid=6832 uid=0 auid=0 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700989.720:1672): user pid=6832 uid=0 auid=0 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=6832 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700989.720:1673): user pid=6832 uid=0 auid=0 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=6832 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700989.720:1674): user pid=6832 uid=0 auid=0 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=6832 suid=0 rport=42180 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=ADD_GROUP msg=audit(1398700991.779:1675): user pid=6839 uid=0 auid=0 ses=61 subj=unconfined_u:system_r:groupadd_t:s0-s0:c0.c1023 msg='op=adding group to /etc/group id=27 exe="/usr/sbin/groupadd" hostname=? addr=? terminal=? res=success'
>type=ADD_GROUP msg=audit(1398700991.783:1676): user pid=6839 uid=0 auid=0 ses=61 subj=unconfined_u:system_r:groupadd_t:s0-s0:c0.c1023 msg='op=adding group to /etc/gshadow id=27 exe="/usr/sbin/groupadd" hostname=? addr=? terminal=? res=success'
>type=ADD_GROUP msg=audit(1398700991.785:1677): user pid=6839 uid=0 auid=0 ses=61 subj=unconfined_u:system_r:groupadd_t:s0-s0:c0.c1023 msg='op= id=27 exe="/usr/sbin/groupadd" hostname=? addr=? terminal=? res=success'
>type=ADD_USER msg=audit(1398700991.851:1678): user pid=6843 uid=0 auid=0 ses=61 subj=unconfined_u:system_r:useradd_t:s0-s0:c0.c1023 msg='op=adding user id=27 exe="/usr/sbin/useradd" hostname=? addr=? terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700992.768:1679): user pid=6865 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=6865 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700992.768:1680): user pid=6865 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=6865 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_SESSION msg=audit(1398700992.770:1681): user pid=6864 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 spid=6865 suid=74 rport=42182 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_SESSION msg=audit(1398700992.770:1682): user pid=6864 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 spid=6865 suid=74 rport=42182 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=USER_AUTH msg=audit(1398700992.834:1683): user pid=6864 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=42182 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=USER_AUTH msg=audit(1398700992.834:1684): user pid=6864 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=8b:2d:a5:06:3e:34:8a:e0:bf:ca:69:94:eb:59:f0:19 rport=42182 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=USER_ACCT msg=audit(1398700992.840:1685): user pid=6864 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700992.842:1686): user pid=6864 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=6865 suid=74 rport=42182 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=USER_AUTH msg=audit(1398700992.842:1687): user pid=6864 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=ssh res=success'
>type=CRED_ACQ msg=audit(1398700992.843:1688): user pid=6864 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=LOGIN msg=audit(1398700992.843:1689): pid=6864 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=69
>type=USER_ROLE_CHANGE msg=audit(1398700992.942:1690): user pid=6864 uid=0 auid=0 ses=69 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_START msg=audit(1398700992.946:1691): user pid=6864 uid=0 auid=0 ses=69 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_LOGIN msg=audit(1398700992.947:1692): user pid=6864 uid=0 auid=0 ses=69 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_START msg=audit(1398700992.947:1693): user pid=6864 uid=0 auid=0 ses=69 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700992.949:1694): user pid=6867 uid=0 auid=0 ses=69 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=6867 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700992.949:1695): user pid=6867 uid=0 auid=0 ses=69 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=6867 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRED_REFR msg=audit(1398700992.950:1696): user pid=6867 uid=0 auid=0 ses=69 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_END msg=audit(1398700992.996:1697): user pid=6864 uid=0 auid=0 ses=69 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_LOGOUT msg=audit(1398700992.996:1698): user pid=6864 uid=0 auid=0 ses=69 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_END msg=audit(1398700992.997:1699): user pid=6864 uid=0 auid=0 ses=69 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=CRED_DISP msg=audit(1398700992.997:1700): user pid=6864 uid=0 auid=0 ses=69 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700992.997:1701): user pid=6864 uid=0 auid=0 ses=69 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=6864 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700992.998:1702): user pid=6864 uid=0 auid=0 ses=69 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=6864 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700992.998:1703): user pid=6864 uid=0 auid=0 ses=69 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=6864 suid=0 rport=42182 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700996.040:1704): user pid=6993 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=6993 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700996.040:1705): user pid=6993 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=6993 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_SESSION msg=audit(1398700996.041:1706): user pid=6992 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 spid=6993 suid=74 rport=42183 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_SESSION msg=audit(1398700996.041:1707): user pid=6992 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 spid=6993 suid=74 rport=42183 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=USER_AUTH msg=audit(1398700996.103:1708): user pid=6992 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=42183 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=USER_AUTH msg=audit(1398700996.103:1709): user pid=6992 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=8b:2d:a5:06:3e:34:8a:e0:bf:ca:69:94:eb:59:f0:19 rport=42183 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=USER_ACCT msg=audit(1398700996.109:1710): user pid=6992 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700996.110:1711): user pid=6992 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=6993 suid=74 rport=42183 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=USER_AUTH msg=audit(1398700996.111:1712): user pid=6992 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=ssh res=success'
>type=CRED_ACQ msg=audit(1398700996.111:1713): user pid=6992 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=LOGIN msg=audit(1398700996.112:1714): pid=6992 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=70
>type=USER_ROLE_CHANGE msg=audit(1398700996.230:1715): user pid=6992 uid=0 auid=0 ses=70 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_START msg=audit(1398700996.234:1716): user pid=6992 uid=0 auid=0 ses=70 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_LOGIN msg=audit(1398700996.242:1717): user pid=6992 uid=0 auid=0 ses=70 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_START msg=audit(1398700996.243:1718): user pid=6992 uid=0 auid=0 ses=70 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700996.246:1719): user pid=7032 uid=0 auid=0 ses=70 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=7032 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700996.247:1720): user pid=7032 uid=0 auid=0 ses=70 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=7032 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRED_REFR msg=audit(1398700996.248:1721): user pid=7032 uid=0 auid=0 ses=70 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_END msg=audit(1398700996.302:1722): user pid=6992 uid=0 auid=0 ses=70 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=CRED_DISP msg=audit(1398700996.303:1723): user pid=6992 uid=0 auid=0 ses=70 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_END msg=audit(1398700996.304:1724): user pid=6992 uid=0 auid=0 ses=70 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_LOGOUT msg=audit(1398700996.304:1725): user pid=6992 uid=0 auid=0 ses=70 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700996.304:1726): user pid=6992 uid=0 auid=0 ses=70 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=6992 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700996.304:1727): user pid=6992 uid=0 auid=0 ses=70 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=6992 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700996.304:1728): user pid=6992 uid=0 auid=0 ses=70 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=6992 suid=0 rport=42183 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700999.336:1729): user pid=7178 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=7178 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700999.336:1730): user pid=7178 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=7178 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_SESSION msg=audit(1398700999.336:1731): user pid=7177 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 spid=7178 suid=74 rport=42184 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_SESSION msg=audit(1398700999.336:1732): user pid=7177 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 spid=7178 suid=74 rport=42184 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=USER_AUTH msg=audit(1398700999.398:1733): user pid=7177 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=42184 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=USER_AUTH msg=audit(1398700999.398:1734): user pid=7177 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=8b:2d:a5:06:3e:34:8a:e0:bf:ca:69:94:eb:59:f0:19 rport=42184 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=USER_ACCT msg=audit(1398700999.404:1735): user pid=7177 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700999.405:1736): user pid=7177 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=7178 suid=74 rport=42184 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=USER_AUTH msg=audit(1398700999.406:1737): user pid=7177 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=ssh res=success'
>type=CRED_ACQ msg=audit(1398700999.406:1738): user pid=7177 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=LOGIN msg=audit(1398700999.406:1739): pid=7177 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=71
>type=USER_ROLE_CHANGE msg=audit(1398700999.514:1740): user pid=7177 uid=0 auid=0 ses=71 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_START msg=audit(1398700999.518:1741): user pid=7177 uid=0 auid=0 ses=71 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_LOGIN msg=audit(1398700999.526:1742): user pid=7177 uid=0 auid=0 ses=71 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_START msg=audit(1398700999.526:1743): user pid=7177 uid=0 auid=0 ses=71 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700999.527:1744): user pid=7180 uid=0 auid=0 ses=71 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=7180 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700999.527:1745): user pid=7180 uid=0 auid=0 ses=71 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=7180 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRED_REFR msg=audit(1398700999.528:1746): user pid=7180 uid=0 auid=0 ses=71 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_END msg=audit(1398700999.586:1747): user pid=7177 uid=0 auid=0 ses=71 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=CRED_DISP msg=audit(1398700999.587:1748): user pid=7177 uid=0 auid=0 ses=71 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_END msg=audit(1398700999.588:1749): user pid=7177 uid=0 auid=0 ses=71 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_LOGOUT msg=audit(1398700999.588:1750): user pid=7177 uid=0 auid=0 ses=71 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700999.588:1751): user pid=7177 uid=0 auid=0 ses=71 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=7177 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700999.588:1752): user pid=7177 uid=0 auid=0 ses=71 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=7177 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398700999.589:1753): user pid=7177 uid=0 auid=0 ses=71 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=7177 suid=0 rport=42184 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701002.659:1754): user pid=7372 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=7372 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701002.659:1755): user pid=7372 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=7372 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_SESSION msg=audit(1398701002.662:1756): user pid=7365 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 spid=7372 suid=74 rport=42185 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_SESSION msg=audit(1398701002.662:1757): user pid=7365 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 spid=7372 suid=74 rport=42185 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=USER_AUTH msg=audit(1398701002.746:1758): user pid=7365 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=42185 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=USER_AUTH msg=audit(1398701002.746:1759): user pid=7365 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=8b:2d:a5:06:3e:34:8a:e0:bf:ca:69:94:eb:59:f0:19 rport=42185 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=USER_ACCT msg=audit(1398701002.754:1760): user pid=7365 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701002.754:1761): user pid=7365 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=7372 suid=74 rport=42185 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=USER_AUTH msg=audit(1398701002.755:1762): user pid=7365 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=ssh res=success'
>type=CRED_ACQ msg=audit(1398701002.755:1763): user pid=7365 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=LOGIN msg=audit(1398701002.756:1764): pid=7365 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=72
>type=USER_ROLE_CHANGE msg=audit(1398701002.850:1765): user pid=7365 uid=0 auid=0 ses=72 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_START msg=audit(1398701002.855:1766): user pid=7365 uid=0 auid=0 ses=72 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_LOGIN msg=audit(1398701002.856:1767): user pid=7365 uid=0 auid=0 ses=72 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_START msg=audit(1398701002.857:1768): user pid=7365 uid=0 auid=0 ses=72 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701002.858:1769): user pid=7374 uid=0 auid=0 ses=72 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=7374 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701002.858:1770): user pid=7374 uid=0 auid=0 ses=72 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=7374 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRED_REFR msg=audit(1398701002.860:1771): user pid=7374 uid=0 auid=0 ses=72 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_END msg=audit(1398701002.898:1772): user pid=7365 uid=0 auid=0 ses=72 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=CRED_DISP msg=audit(1398701002.898:1773): user pid=7365 uid=0 auid=0 ses=72 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_END msg=audit(1398701002.899:1774): user pid=7365 uid=0 auid=0 ses=72 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_LOGOUT msg=audit(1398701002.899:1775): user pid=7365 uid=0 auid=0 ses=72 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701002.899:1776): user pid=7365 uid=0 auid=0 ses=72 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=7365 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701002.899:1777): user pid=7365 uid=0 auid=0 ses=72 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=7365 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701002.899:1778): user pid=7365 uid=0 auid=0 ses=72 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=7365 suid=0 rport=42185 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701005.951:1779): user pid=7442 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=7442 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701005.952:1780): user pid=7442 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=7442 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_SESSION msg=audit(1398701005.952:1781): user pid=7441 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 spid=7442 suid=74 rport=42186 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_SESSION msg=audit(1398701005.952:1782): user pid=7441 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 spid=7442 suid=74 rport=42186 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=USER_AUTH msg=audit(1398701006.027:1783): user pid=7441 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=42186 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=USER_AUTH msg=audit(1398701006.027:1784): user pid=7441 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=8b:2d:a5:06:3e:34:8a:e0:bf:ca:69:94:eb:59:f0:19 rport=42186 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=USER_ACCT msg=audit(1398701006.037:1785): user pid=7441 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701006.040:1786): user pid=7441 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=7442 suid=74 rport=42186 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=USER_AUTH msg=audit(1398701006.042:1787): user pid=7441 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=ssh res=success'
>type=CRED_ACQ msg=audit(1398701006.042:1788): user pid=7441 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=LOGIN msg=audit(1398701006.042:1789): pid=7441 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=73
>type=USER_ROLE_CHANGE msg=audit(1398701006.229:1790): user pid=7441 uid=0 auid=0 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_START msg=audit(1398701006.236:1791): user pid=7441 uid=0 auid=0 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_LOGIN msg=audit(1398701006.248:1792): user pid=7441 uid=0 auid=0 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_START msg=audit(1398701006.249:1793): user pid=7441 uid=0 auid=0 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701006.256:1794): user pid=7446 uid=0 auid=0 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=7446 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701006.256:1795): user pid=7446 uid=0 auid=0 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=7446 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRED_REFR msg=audit(1398701006.257:1796): user pid=7446 uid=0 auid=0 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_END msg=audit(1398701006.293:1797): user pid=7441 uid=0 auid=0 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=CRED_DISP msg=audit(1398701006.293:1798): user pid=7441 uid=0 auid=0 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_END msg=audit(1398701006.294:1799): user pid=7441 uid=0 auid=0 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_LOGOUT msg=audit(1398701006.295:1800): user pid=7441 uid=0 auid=0 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701006.295:1801): user pid=7441 uid=0 auid=0 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=7441 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701006.295:1802): user pid=7441 uid=0 auid=0 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=7441 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701006.297:1803): user pid=7441 uid=0 auid=0 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=7441 suid=0 rport=42186 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701009.318:1804): user pid=7519 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=7519 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701009.318:1805): user pid=7519 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=7519 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_SESSION msg=audit(1398701009.318:1806): user pid=7517 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 spid=7519 suid=74 rport=42187 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_SESSION msg=audit(1398701009.319:1807): user pid=7517 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 spid=7519 suid=74 rport=42187 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=USER_AUTH msg=audit(1398701009.386:1808): user pid=7517 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=42187 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=USER_AUTH msg=audit(1398701009.387:1809): user pid=7517 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=8b:2d:a5:06:3e:34:8a:e0:bf:ca:69:94:eb:59:f0:19 rport=42187 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=USER_ACCT msg=audit(1398701009.393:1810): user pid=7517 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701009.394:1811): user pid=7517 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=7519 suid=74 rport=42187 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=USER_AUTH msg=audit(1398701009.395:1812): user pid=7517 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=ssh res=success'
>type=CRED_ACQ msg=audit(1398701009.395:1813): user pid=7517 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=LOGIN msg=audit(1398701009.395:1814): pid=7517 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=74
>type=USER_ROLE_CHANGE msg=audit(1398701009.514:1815): user pid=7517 uid=0 auid=0 ses=74 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_START msg=audit(1398701009.518:1816): user pid=7517 uid=0 auid=0 ses=74 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_LOGIN msg=audit(1398701009.526:1817): user pid=7517 uid=0 auid=0 ses=74 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_START msg=audit(1398701009.527:1818): user pid=7517 uid=0 auid=0 ses=74 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701009.530:1819): user pid=7526 uid=0 auid=0 ses=74 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=7526 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701009.530:1820): user pid=7526 uid=0 auid=0 ses=74 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=7526 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRED_REFR msg=audit(1398701009.531:1821): user pid=7526 uid=0 auid=0 ses=74 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_END msg=audit(1398701009.549:1822): user pid=7517 uid=0 auid=0 ses=74 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=CRED_DISP msg=audit(1398701009.549:1823): user pid=7517 uid=0 auid=0 ses=74 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_END msg=audit(1398701009.550:1824): user pid=7517 uid=0 auid=0 ses=74 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_LOGOUT msg=audit(1398701009.550:1825): user pid=7517 uid=0 auid=0 ses=74 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701009.550:1826): user pid=7517 uid=0 auid=0 ses=74 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=7517 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701009.551:1827): user pid=7517 uid=0 auid=0 ses=74 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=7517 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701009.551:1828): user pid=7517 uid=0 auid=0 ses=74 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=7517 suid=0 rport=42187 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=NETFILTER_CFG msg=audit(1398701010.621:1829): table=filter family=2 entries=0
>type=SYSCALL msg=audit(1398701010.621:1829): arch=c000003e syscall=272 success=yes exit=0 a0=40000000 a1=c0 a2=0 a3=7fff2f991cb0 items=0 ppid=7713 pid=7720 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=62 comm="ip" exe="/sbin/ip" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null)
>type=NETFILTER_CFG msg=audit(1398701010.663:1830): table=filter family=2 entries=0
>type=SYSCALL msg=audit(1398701010.663:1830): arch=c000003e syscall=272 success=yes exit=0 a0=40000000 a1=c0 a2=0 a3=7fff7569de80 items=0 ppid=7713 pid=7724 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=62 comm="ip" exe="/sbin/ip" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null)
>type=NETFILTER_CFG msg=audit(1398701010.994:1831): table=filter family=2 entries=0
>type=SYSCALL msg=audit(1398701010.994:1831): arch=c000003e syscall=272 success=yes exit=0 a0=40000000 a1=c0 a2=0 a3=7fff29a8e660 items=0 ppid=7713 pid=7726 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=62 comm="ip" exe="/sbin/ip" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null)
>type=CRYPTO_KEY_USER msg=audit(1398701012.584:1832): user pid=7985 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=7985 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701012.584:1833): user pid=7985 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=7985 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_SESSION msg=audit(1398701012.585:1834): user pid=7981 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 spid=7985 suid=74 rport=42188 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_SESSION msg=audit(1398701012.585:1835): user pid=7981 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 spid=7985 suid=74 rport=42188 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=USER_AUTH msg=audit(1398701012.638:1836): user pid=7981 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=42188 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=USER_AUTH msg=audit(1398701012.638:1837): user pid=7981 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=8b:2d:a5:06:3e:34:8a:e0:bf:ca:69:94:eb:59:f0:19 rport=42188 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=USER_ACCT msg=audit(1398701012.645:1838): user pid=7981 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701012.646:1839): user pid=7981 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=7985 suid=74 rport=42188 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=USER_AUTH msg=audit(1398701012.647:1840): user pid=7981 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=ssh res=success'
>type=CRED_ACQ msg=audit(1398701012.647:1841): user pid=7981 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=LOGIN msg=audit(1398701012.647:1842): pid=7981 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=75
>type=USER_ROLE_CHANGE msg=audit(1398701012.748:1843): user pid=7981 uid=0 auid=0 ses=75 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_START msg=audit(1398701012.753:1844): user pid=7981 uid=0 auid=0 ses=75 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_LOGIN msg=audit(1398701012.760:1845): user pid=7981 uid=0 auid=0 ses=75 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_START msg=audit(1398701012.760:1846): user pid=7981 uid=0 auid=0 ses=75 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701012.769:1847): user pid=8029 uid=0 auid=0 ses=75 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=8029 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701012.769:1848): user pid=8029 uid=0 auid=0 ses=75 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=8029 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRED_REFR msg=audit(1398701012.770:1849): user pid=8029 uid=0 auid=0 ses=75 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_END msg=audit(1398701012.805:1850): user pid=7981 uid=0 auid=0 ses=75 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=CRED_DISP msg=audit(1398701012.806:1851): user pid=7981 uid=0 auid=0 ses=75 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_END msg=audit(1398701012.807:1852): user pid=7981 uid=0 auid=0 ses=75 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_LOGOUT msg=audit(1398701012.807:1853): user pid=7981 uid=0 auid=0 ses=75 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701012.807:1854): user pid=7981 uid=0 auid=0 ses=75 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=7981 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701012.807:1855): user pid=7981 uid=0 auid=0 ses=75 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=7981 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701012.807:1856): user pid=7981 uid=0 auid=0 ses=75 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=7981 suid=0 rport=42188 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=NETFILTER_CFG msg=audit(1398701012.847:1857): table=filter family=2 entries=0
>type=SYSCALL msg=audit(1398701012.847:1857): arch=c000003e syscall=272 success=yes exit=0 a0=40000000 a1=c0 a2=0 a3=7fff7b6ce870 items=0 ppid=8027 pid=8037 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=62 comm="ip" exe="/sbin/ip" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null)
>type=NETFILTER_CFG msg=audit(1398701012.876:1858): table=filter family=2 entries=0
>type=SYSCALL msg=audit(1398701012.876:1858): arch=c000003e syscall=272 success=yes exit=0 a0=40000000 a1=c0 a2=0 a3=7fffdc2f9810 items=0 ppid=8027 pid=8041 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=62 comm="ip" exe="/sbin/ip" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null)
>type=NETFILTER_CFG msg=audit(1398701013.209:1859): table=filter family=2 entries=0
>type=SYSCALL msg=audit(1398701013.209:1859): arch=c000003e syscall=272 success=yes exit=0 a0=40000000 a1=c0 a2=0 a3=7fff7538c0c0 items=0 ppid=8027 pid=8043 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=62 comm="ip" exe="/sbin/ip" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null)
>type=NETFILTER_CFG msg=audit(1398701014.208:1860): table=filter family=2 entries=5
>type=SYSCALL msg=audit(1398701014.208:1860): arch=c000003e syscall=54 success=yes exit=0 a0=3 a1=0 a2=40 a3=c039b0 items=0 ppid=7529 pid=8169 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=62 comm="iptables" exe="/sbin/iptables-multi-1.4.7" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null)
>type=CRYPTO_KEY_USER msg=audit(1398701015.834:1861): user pid=8207 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=8207 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701015.834:1862): user pid=8207 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=8207 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_SESSION msg=audit(1398701015.835:1863): user pid=8206 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 spid=8207 suid=74 rport=42189 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_SESSION msg=audit(1398701015.836:1864): user pid=8206 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 spid=8207 suid=74 rport=42189 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=USER_AUTH msg=audit(1398701015.891:1865): user pid=8206 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=42189 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=USER_AUTH msg=audit(1398701015.891:1866): user pid=8206 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=8b:2d:a5:06:3e:34:8a:e0:bf:ca:69:94:eb:59:f0:19 rport=42189 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=USER_ACCT msg=audit(1398701015.897:1867): user pid=8206 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701015.898:1868): user pid=8206 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=8207 suid=74 rport=42189 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=USER_AUTH msg=audit(1398701015.898:1869): user pid=8206 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=ssh res=success'
>type=CRED_ACQ msg=audit(1398701015.899:1870): user pid=8206 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=LOGIN msg=audit(1398701015.899:1871): pid=8206 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=76
>type=USER_ROLE_CHANGE msg=audit(1398701015.996:1872): user pid=8206 uid=0 auid=0 ses=76 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_START msg=audit(1398701016.001:1873): user pid=8206 uid=0 auid=0 ses=76 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_LOGIN msg=audit(1398701016.007:1874): user pid=8206 uid=0 auid=0 ses=76 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_START msg=audit(1398701016.007:1875): user pid=8206 uid=0 auid=0 ses=76 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701016.010:1876): user pid=8209 uid=0 auid=0 ses=76 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=8209 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701016.010:1877): user pid=8209 uid=0 auid=0 ses=76 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=8209 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRED_REFR msg=audit(1398701016.011:1878): user pid=8209 uid=0 auid=0 ses=76 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_END msg=audit(1398701016.052:1879): user pid=8206 uid=0 auid=0 ses=76 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=CRED_DISP msg=audit(1398701016.052:1880): user pid=8206 uid=0 auid=0 ses=76 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_END msg=audit(1398701016.053:1881): user pid=8206 uid=0 auid=0 ses=76 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_LOGOUT msg=audit(1398701016.054:1882): user pid=8206 uid=0 auid=0 ses=76 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701016.054:1883): user pid=8206 uid=0 auid=0 ses=76 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=8206 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701016.054:1884): user pid=8206 uid=0 auid=0 ses=76 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=8206 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701016.054:1885): user pid=8206 uid=0 auid=0 ses=76 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=8206 suid=0 rport=42189 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701016.125:1886): user pid=8216 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=8216 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701016.125:1887): user pid=8216 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=8216 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_SESSION msg=audit(1398701016.126:1888): user pid=8215 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 spid=8216 suid=74 rport=42190 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_SESSION msg=audit(1398701016.126:1889): user pid=8215 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 spid=8216 suid=74 rport=42190 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=USER_AUTH msg=audit(1398701016.186:1890): user pid=8215 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=42190 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=USER_AUTH msg=audit(1398701016.186:1891): user pid=8215 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=8b:2d:a5:06:3e:34:8a:e0:bf:ca:69:94:eb:59:f0:19 rport=42190 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=USER_ACCT msg=audit(1398701016.192:1892): user pid=8215 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701016.193:1893): user pid=8215 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=8216 suid=74 rport=42190 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=USER_AUTH msg=audit(1398701016.194:1894): user pid=8215 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=ssh res=success'
>type=CRED_ACQ msg=audit(1398701016.194:1895): user pid=8215 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=LOGIN msg=audit(1398701016.194:1896): pid=8215 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=77
>type=USER_ROLE_CHANGE msg=audit(1398701016.292:1897): user pid=8215 uid=0 auid=0 ses=77 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_START msg=audit(1398701016.297:1898): user pid=8215 uid=0 auid=0 ses=77 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_LOGIN msg=audit(1398701016.305:1899): user pid=8215 uid=0 auid=0 ses=77 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_START msg=audit(1398701016.306:1900): user pid=8215 uid=0 auid=0 ses=77 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701016.309:1901): user pid=8218 uid=0 auid=0 ses=77 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=8218 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701016.309:1902): user pid=8218 uid=0 auid=0 ses=77 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=8218 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRED_REFR msg=audit(1398701016.310:1903): user pid=8218 uid=0 auid=0 ses=77 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_END msg=audit(1398701016.349:1904): user pid=8215 uid=0 auid=0 ses=77 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=CRED_DISP msg=audit(1398701016.349:1905): user pid=8215 uid=0 auid=0 ses=77 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_END msg=audit(1398701016.350:1906): user pid=8215 uid=0 auid=0 ses=77 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_LOGOUT msg=audit(1398701016.350:1907): user pid=8215 uid=0 auid=0 ses=77 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701016.350:1908): user pid=8215 uid=0 auid=0 ses=77 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=8215 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701016.350:1909): user pid=8215 uid=0 auid=0 ses=77 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=8215 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701016.350:1910): user pid=8215 uid=0 auid=0 ses=77 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=8215 suid=0 rport=42190 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=ADD_GROUP msg=audit(1398701017.480:1911): user pid=8228 uid=0 auid=0 ses=62 subj=unconfined_u:system_r:groupadd_t:s0-s0:c0.c1023 msg='op=adding group to /etc/group id=498 exe="/usr/sbin/groupadd" hostname=? addr=? terminal=? res=success'
>type=ADD_GROUP msg=audit(1398701017.484:1912): user pid=8228 uid=0 auid=0 ses=62 subj=unconfined_u:system_r:groupadd_t:s0-s0:c0.c1023 msg='op=adding group to /etc/gshadow id=498 exe="/usr/sbin/groupadd" hostname=? addr=? terminal=? res=success'
>type=ADD_GROUP msg=audit(1398701017.485:1913): user pid=8228 uid=0 auid=0 ses=62 subj=unconfined_u:system_r:groupadd_t:s0-s0:c0.c1023 msg='op= id=498 exe="/usr/sbin/groupadd" hostname=? addr=? terminal=? res=success'
>type=ADD_USER msg=audit(1398701017.541:1914): user pid=8233 uid=0 auid=0 ses=62 subj=unconfined_u:system_r:useradd_t:s0-s0:c0.c1023 msg='op=adding user id=498 exe="/usr/sbin/useradd" hostname=? addr=? terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701019.400:1915): user pid=8245 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=8245 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701019.400:1916): user pid=8245 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=8245 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_SESSION msg=audit(1398701019.401:1917): user pid=8244 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 spid=8245 suid=74 rport=42192 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_SESSION msg=audit(1398701019.401:1918): user pid=8244 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 spid=8245 suid=74 rport=42192 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=USER_AUTH msg=audit(1398701019.459:1919): user pid=8244 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=42192 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=USER_AUTH msg=audit(1398701019.459:1920): user pid=8244 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=8b:2d:a5:06:3e:34:8a:e0:bf:ca:69:94:eb:59:f0:19 rport=42192 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=USER_ACCT msg=audit(1398701019.465:1921): user pid=8244 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701019.466:1922): user pid=8244 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=8245 suid=74 rport=42192 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=USER_AUTH msg=audit(1398701019.466:1923): user pid=8244 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=ssh res=success'
>type=CRED_ACQ msg=audit(1398701019.467:1924): user pid=8244 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=LOGIN msg=audit(1398701019.467:1925): pid=8244 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=78
>type=USER_ROLE_CHANGE msg=audit(1398701019.575:1926): user pid=8244 uid=0 auid=0 ses=78 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_START msg=audit(1398701019.580:1927): user pid=8244 uid=0 auid=0 ses=78 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_START msg=audit(1398701019.587:1928): user pid=8256 uid=0 auid=0 ses=62 subj=unconfined_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="qpidd" exe="/sbin/runuser" hostname=? addr=? terminal=? res=success'
>type=CRED_ACQ msg=audit(1398701019.587:1929): user pid=8256 uid=0 auid=0 ses=62 subj=unconfined_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="qpidd" exe="/sbin/runuser" hostname=? addr=? terminal=? res=success'
>type=USER_LOGIN msg=audit(1398701019.587:1930): user pid=8244 uid=0 auid=0 ses=78 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_START msg=audit(1398701019.588:1931): user pid=8244 uid=0 auid=0 ses=78 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701019.589:1932): user pid=8258 uid=0 auid=0 ses=78 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=8258 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701019.589:1933): user pid=8258 uid=0 auid=0 ses=78 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=8258 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRED_DISP msg=audit(1398701019.589:1934): user pid=8256 uid=0 auid=0 ses=62 subj=unconfined_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="qpidd" exe="/sbin/runuser" hostname=? addr=? terminal=? res=success'
>type=USER_END msg=audit(1398701019.589:1935): user pid=8256 uid=0 auid=0 ses=62 subj=unconfined_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="qpidd" exe="/sbin/runuser" hostname=? addr=? terminal=? res=success'
>type=CRED_REFR msg=audit(1398701019.590:1936): user pid=8258 uid=0 auid=0 ses=78 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_END msg=audit(1398701019.639:1937): user pid=8244 uid=0 auid=0 ses=78 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=CRED_DISP msg=audit(1398701019.639:1938): user pid=8244 uid=0 auid=0 ses=78 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_END msg=audit(1398701019.641:1939): user pid=8244 uid=0 auid=0 ses=78 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_LOGOUT msg=audit(1398701019.645:1940): user pid=8244 uid=0 auid=0 ses=78 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701019.645:1941): user pid=8244 uid=0 auid=0 ses=78 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=8244 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701019.645:1942): user pid=8244 uid=0 auid=0 ses=78 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=8244 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701019.645:1943): user pid=8244 uid=0 auid=0 ses=78 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=8244 suid=0 rport=42192 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=USER_START msg=audit(1398701019.717:1944): user pid=8274 uid=0 auid=0 ses=62 subj=unconfined_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="qpidd" exe="/sbin/runuser" hostname=? addr=? terminal=? res=success'
>type=CRED_ACQ msg=audit(1398701019.717:1945): user pid=8274 uid=0 auid=0 ses=62 subj=unconfined_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="qpidd" exe="/sbin/runuser" hostname=? addr=? terminal=? res=success'
>type=CRED_DISP msg=audit(1398701019.719:1946): user pid=8274 uid=0 auid=0 ses=62 subj=unconfined_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="qpidd" exe="/sbin/runuser" hostname=? addr=? terminal=? res=success'
>type=USER_END msg=audit(1398701019.720:1947): user pid=8274 uid=0 auid=0 ses=62 subj=unconfined_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="qpidd" exe="/sbin/runuser" hostname=? addr=? terminal=? res=success'
>type=USER_START msg=audit(1398701019.722:1948): user pid=8276 uid=0 auid=0 ses=62 subj=unconfined_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="qpidd" exe="/sbin/runuser" hostname=? addr=? terminal=? res=success'
>type=CRED_ACQ msg=audit(1398701019.722:1949): user pid=8276 uid=0 auid=0 ses=62 subj=unconfined_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="qpidd" exe="/sbin/runuser" hostname=? addr=? terminal=? res=success'
>type=CRED_DISP msg=audit(1398701019.747:1950): user pid=8276 uid=0 auid=0 ses=62 subj=unconfined_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="qpidd" exe="/sbin/runuser" hostname=? addr=? terminal=? res=success'
>type=USER_END msg=audit(1398701019.751:1951): user pid=8276 uid=0 auid=0 ses=62 subj=unconfined_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="qpidd" exe="/sbin/runuser" hostname=? addr=? terminal=? res=success'
>type=USER_START msg=audit(1398701019.880:1952): user pid=8301 uid=0 auid=0 ses=62 subj=unconfined_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="qpidd" exe="/sbin/runuser" hostname=? addr=? terminal=? res=success'
>type=CRED_ACQ msg=audit(1398701019.880:1953): user pid=8301 uid=0 auid=0 ses=62 subj=unconfined_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="qpidd" exe="/sbin/runuser" hostname=? addr=? terminal=? res=success'
>type=CRED_DISP msg=audit(1398701019.908:1954): user pid=8301 uid=0 auid=0 ses=62 subj=unconfined_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="qpidd" exe="/sbin/runuser" hostname=? addr=? terminal=? res=success'
>type=USER_END msg=audit(1398701019.908:1955): user pid=8301 uid=0 auid=0 ses=62 subj=unconfined_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="qpidd" exe="/sbin/runuser" hostname=? addr=? terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701022.668:1956): user pid=8324 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=8324 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701022.668:1957): user pid=8324 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=8324 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_SESSION msg=audit(1398701022.668:1958): user pid=8323 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 spid=8324 suid=74 rport=42193 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_SESSION msg=audit(1398701022.668:1959): user pid=8323 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 spid=8324 suid=74 rport=42193 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=USER_AUTH msg=audit(1398701022.728:1960): user pid=8323 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=42193 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=USER_AUTH msg=audit(1398701022.728:1961): user pid=8323 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=8b:2d:a5:06:3e:34:8a:e0:bf:ca:69:94:eb:59:f0:19 rport=42193 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=USER_ACCT msg=audit(1398701022.735:1962): user pid=8323 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701022.735:1963): user pid=8323 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=8324 suid=74 rport=42193 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=USER_AUTH msg=audit(1398701022.736:1964): user pid=8323 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=ssh res=success'
>type=CRED_ACQ msg=audit(1398701022.736:1965): user pid=8323 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=LOGIN msg=audit(1398701022.737:1966): pid=8323 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=79
>type=USER_ROLE_CHANGE msg=audit(1398701022.838:1967): user pid=8323 uid=0 auid=0 ses=79 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_START msg=audit(1398701022.842:1968): user pid=8323 uid=0 auid=0 ses=79 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_LOGIN msg=audit(1398701022.848:1969): user pid=8323 uid=0 auid=0 ses=79 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_START msg=audit(1398701022.849:1970): user pid=8323 uid=0 auid=0 ses=79 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701022.850:1971): user pid=8326 uid=0 auid=0 ses=79 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=8326 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701022.850:1972): user pid=8326 uid=0 auid=0 ses=79 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=8326 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRED_REFR msg=audit(1398701022.851:1973): user pid=8326 uid=0 auid=0 ses=79 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_END msg=audit(1398701022.894:1974): user pid=8323 uid=0 auid=0 ses=79 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=CRED_DISP msg=audit(1398701022.894:1975): user pid=8323 uid=0 auid=0 ses=79 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_END msg=audit(1398701022.895:1976): user pid=8323 uid=0 auid=0 ses=79 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_LOGOUT msg=audit(1398701022.895:1977): user pid=8323 uid=0 auid=0 ses=79 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701022.895:1978): user pid=8323 uid=0 auid=0 ses=79 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=8323 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701022.895:1979): user pid=8323 uid=0 auid=0 ses=79 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=8323 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701022.895:1980): user pid=8323 uid=0 auid=0 ses=79 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=8323 suid=0 rport=42193 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701022.931:1981): user pid=8331 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=8331 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701022.931:1982): user pid=8331 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=8331 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_SESSION msg=audit(1398701022.931:1983): user pid=8330 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 spid=8331 suid=74 rport=42194 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_SESSION msg=audit(1398701022.932:1984): user pid=8330 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 spid=8331 suid=74 rport=42194 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=USER_AUTH msg=audit(1398701022.990:1985): user pid=8330 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=42194 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=USER_AUTH msg=audit(1398701022.990:1986): user pid=8330 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=8b:2d:a5:06:3e:34:8a:e0:bf:ca:69:94:eb:59:f0:19 rport=42194 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=USER_ACCT msg=audit(1398701022.996:1987): user pid=8330 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701022.997:1988): user pid=8330 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=8331 suid=74 rport=42194 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=USER_AUTH msg=audit(1398701022.998:1989): user pid=8330 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=ssh res=success'
>type=CRED_ACQ msg=audit(1398701022.998:1990): user pid=8330 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=LOGIN msg=audit(1398701022.999:1991): pid=8330 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=80
>type=USER_ROLE_CHANGE msg=audit(1398701023.096:1992): user pid=8330 uid=0 auid=0 ses=80 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_START msg=audit(1398701023.099:1993): user pid=8330 uid=0 auid=0 ses=80 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_LOGIN msg=audit(1398701023.105:1994): user pid=8330 uid=0 auid=0 ses=80 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_START msg=audit(1398701023.105:1995): user pid=8330 uid=0 auid=0 ses=80 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701023.106:1996): user pid=8333 uid=0 auid=0 ses=80 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=8333 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701023.107:1997): user pid=8333 uid=0 auid=0 ses=80 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=8333 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRED_REFR msg=audit(1398701023.108:1998): user pid=8333 uid=0 auid=0 ses=80 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_END msg=audit(1398701023.153:1999): user pid=8330 uid=0 auid=0 ses=80 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=CRED_DISP msg=audit(1398701023.153:2000): user pid=8330 uid=0 auid=0 ses=80 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_END msg=audit(1398701023.154:2001): user pid=8330 uid=0 auid=0 ses=80 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_LOGOUT msg=audit(1398701023.154:2002): user pid=8330 uid=0 auid=0 ses=80 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701023.155:2003): user pid=8330 uid=0 auid=0 ses=80 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=8330 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701023.155:2004): user pid=8330 uid=0 auid=0 ses=80 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=8330 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701023.155:2005): user pid=8330 uid=0 auid=0 ses=80 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=8330 suid=0 rport=42194 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701023.175:2006): user pid=8343 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=8343 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701023.175:2007): user pid=8343 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=8343 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_SESSION msg=audit(1398701023.175:2008): user pid=8342 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 spid=8343 suid=74 rport=42195 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_SESSION msg=audit(1398701023.175:2009): user pid=8342 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 spid=8343 suid=74 rport=42195 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=USER_AUTH msg=audit(1398701023.243:2010): user pid=8342 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=42195 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=USER_AUTH msg=audit(1398701023.243:2011): user pid=8342 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=8b:2d:a5:06:3e:34:8a:e0:bf:ca:69:94:eb:59:f0:19 rport=42195 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=USER_ACCT msg=audit(1398701023.251:2012): user pid=8342 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701023.251:2013): user pid=8342 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=8343 suid=74 rport=42195 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=USER_AUTH msg=audit(1398701023.253:2014): user pid=8342 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=ssh res=success'
>type=CRED_ACQ msg=audit(1398701023.253:2015): user pid=8342 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=LOGIN msg=audit(1398701023.253:2016): pid=8342 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=81
>type=USER_ROLE_CHANGE msg=audit(1398701023.358:2017): user pid=8342 uid=0 auid=0 ses=81 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_START msg=audit(1398701023.362:2018): user pid=8342 uid=0 auid=0 ses=81 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_LOGIN msg=audit(1398701023.368:2019): user pid=8342 uid=0 auid=0 ses=81 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_START msg=audit(1398701023.368:2020): user pid=8342 uid=0 auid=0 ses=81 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701023.372:2021): user pid=8356 uid=0 auid=0 ses=81 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=8356 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701023.372:2022): user pid=8356 uid=0 auid=0 ses=81 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=8356 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRED_REFR msg=audit(1398701023.373:2023): user pid=8356 uid=0 auid=0 ses=81 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_END msg=audit(1398701023.417:2024): user pid=8342 uid=0 auid=0 ses=81 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=CRED_DISP msg=audit(1398701023.417:2025): user pid=8342 uid=0 auid=0 ses=81 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_END msg=audit(1398701023.418:2026): user pid=8342 uid=0 auid=0 ses=81 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_LOGOUT msg=audit(1398701023.419:2027): user pid=8342 uid=0 auid=0 ses=81 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701023.419:2028): user pid=8342 uid=0 auid=0 ses=81 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=8342 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701023.419:2029): user pid=8342 uid=0 auid=0 ses=81 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=8342 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701023.419:2030): user pid=8342 uid=0 auid=0 ses=81 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=8342 suid=0 rport=42195 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701023.438:2031): user pid=8365 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=8365 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701023.439:2032): user pid=8365 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=8365 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_SESSION msg=audit(1398701023.440:2033): user pid=8364 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 spid=8365 suid=74 rport=42196 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_SESSION msg=audit(1398701023.440:2034): user pid=8364 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 spid=8365 suid=74 rport=42196 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=USER_AUTH msg=audit(1398701023.505:2035): user pid=8364 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=42196 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=USER_AUTH msg=audit(1398701023.505:2036): user pid=8364 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=8b:2d:a5:06:3e:34:8a:e0:bf:ca:69:94:eb:59:f0:19 rport=42196 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=USER_ACCT msg=audit(1398701023.518:2037): user pid=8364 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701023.520:2038): user pid=8364 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=8365 suid=74 rport=42196 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=USER_AUTH msg=audit(1398701023.520:2039): user pid=8364 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=ssh res=success'
>type=CRED_ACQ msg=audit(1398701023.521:2040): user pid=8364 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=LOGIN msg=audit(1398701023.521:2041): pid=8364 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=82
>type=USER_ROLE_CHANGE msg=audit(1398701023.623:2042): user pid=8364 uid=0 auid=0 ses=82 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_START msg=audit(1398701023.627:2043): user pid=8364 uid=0 auid=0 ses=82 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_LOGIN msg=audit(1398701023.633:2044): user pid=8364 uid=0 auid=0 ses=82 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_START msg=audit(1398701023.633:2045): user pid=8364 uid=0 auid=0 ses=82 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701023.634:2046): user pid=8372 uid=0 auid=0 ses=82 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=8372 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701023.635:2047): user pid=8372 uid=0 auid=0 ses=82 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=8372 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRED_REFR msg=audit(1398701023.635:2048): user pid=8372 uid=0 auid=0 ses=82 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_END msg=audit(1398701023.660:2049): user pid=8364 uid=0 auid=0 ses=82 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=CRED_DISP msg=audit(1398701023.660:2050): user pid=8364 uid=0 auid=0 ses=82 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_END msg=audit(1398701023.661:2051): user pid=8364 uid=0 auid=0 ses=82 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_LOGOUT msg=audit(1398701023.661:2052): user pid=8364 uid=0 auid=0 ses=82 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701023.661:2053): user pid=8364 uid=0 auid=0 ses=82 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=8364 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701023.661:2054): user pid=8364 uid=0 auid=0 ses=82 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=8364 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701023.661:2055): user pid=8364 uid=0 auid=0 ses=82 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=8364 suid=0 rport=42196 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701023.679:2056): user pid=8405 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=8405 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701023.679:2057): user pid=8405 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=8405 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_SESSION msg=audit(1398701023.680:2058): user pid=8397 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 spid=8405 suid=74 rport=42197 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_SESSION msg=audit(1398701023.680:2059): user pid=8397 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 spid=8405 suid=74 rport=42197 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=USER_AUTH msg=audit(1398701023.735:2060): user pid=8397 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=42197 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=USER_AUTH msg=audit(1398701023.735:2061): user pid=8397 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=8b:2d:a5:06:3e:34:8a:e0:bf:ca:69:94:eb:59:f0:19 rport=42197 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=USER_ACCT msg=audit(1398701023.743:2062): user pid=8397 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701023.744:2063): user pid=8397 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=8405 suid=74 rport=42197 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=USER_AUTH msg=audit(1398701023.745:2064): user pid=8397 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=ssh res=success'
>type=CRED_ACQ msg=audit(1398701023.745:2065): user pid=8397 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=LOGIN msg=audit(1398701023.745:2066): pid=8397 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=83
>type=USER_ROLE_CHANGE msg=audit(1398701023.849:2067): user pid=8397 uid=0 auid=0 ses=83 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_START msg=audit(1398701023.854:2068): user pid=8397 uid=0 auid=0 ses=83 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_LOGIN msg=audit(1398701023.856:2069): user pid=8397 uid=0 auid=0 ses=83 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_START msg=audit(1398701023.857:2070): user pid=8397 uid=0 auid=0 ses=83 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701023.858:2071): user pid=8524 uid=0 auid=0 ses=83 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=8524 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701023.858:2072): user pid=8524 uid=0 auid=0 ses=83 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=8524 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRED_REFR msg=audit(1398701023.859:2073): user pid=8524 uid=0 auid=0 ses=83 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_END msg=audit(1398701023.883:2074): user pid=8397 uid=0 auid=0 ses=83 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=CRED_DISP msg=audit(1398701023.883:2075): user pid=8397 uid=0 auid=0 ses=83 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_END msg=audit(1398701023.884:2076): user pid=8397 uid=0 auid=0 ses=83 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_LOGOUT msg=audit(1398701023.884:2077): user pid=8397 uid=0 auid=0 ses=83 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701023.884:2078): user pid=8397 uid=0 auid=0 ses=83 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=8397 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701023.885:2079): user pid=8397 uid=0 auid=0 ses=83 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=8397 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701023.885:2080): user pid=8397 uid=0 auid=0 ses=83 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=8397 suid=0 rport=42197 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=NETFILTER_CFG msg=audit(1398701024.011:2081): table=filter family=2 entries=0
>type=SYSCALL msg=audit(1398701024.011:2081): arch=c000003e syscall=272 success=yes exit=0 a0=40000000 a1=c0 a2=0 a3=7fff3ac0c500 items=0 ppid=8554 pid=8561 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=80 comm="ip" exe="/sbin/ip" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null)
>type=NETFILTER_CFG msg=audit(1398701024.041:2082): table=filter family=2 entries=0
>type=SYSCALL msg=audit(1398701024.041:2082): arch=c000003e syscall=272 success=yes exit=0 a0=40000000 a1=c0 a2=0 a3=7fff80f029a0 items=0 ppid=8554 pid=8565 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=80 comm="ip" exe="/sbin/ip" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null)
>type=NETFILTER_CFG msg=audit(1398701024.374:2083): table=filter family=2 entries=0
>type=SYSCALL msg=audit(1398701024.374:2083): arch=c000003e syscall=272 success=yes exit=0 a0=40000000 a1=c0 a2=0 a3=7ffff4ead200 items=0 ppid=8554 pid=8567 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=80 comm="ip" exe="/sbin/ip" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null)
>type=CRYPTO_KEY_USER msg=audit(1398701026.907:2084): user pid=8695 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=8695 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701026.907:2085): user pid=8695 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=8695 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_SESSION msg=audit(1398701026.909:2086): user pid=8694 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 spid=8695 suid=74 rport=42198 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_SESSION msg=audit(1398701026.909:2087): user pid=8694 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 spid=8695 suid=74 rport=42198 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=USER_AUTH msg=audit(1398701026.971:2088): user pid=8694 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=42198 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=USER_AUTH msg=audit(1398701026.971:2089): user pid=8694 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=8b:2d:a5:06:3e:34:8a:e0:bf:ca:69:94:eb:59:f0:19 rport=42198 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=USER_ACCT msg=audit(1398701026.981:2090): user pid=8694 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701026.981:2091): user pid=8694 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=8695 suid=74 rport=42198 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=USER_AUTH msg=audit(1398701026.982:2092): user pid=8694 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=ssh res=success'
>type=CRED_ACQ msg=audit(1398701026.983:2093): user pid=8694 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=LOGIN msg=audit(1398701026.983:2094): pid=8694 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=84
>type=USER_ROLE_CHANGE msg=audit(1398701027.095:2095): user pid=8694 uid=0 auid=0 ses=84 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_START msg=audit(1398701027.100:2096): user pid=8694 uid=0 auid=0 ses=84 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_LOGIN msg=audit(1398701027.107:2097): user pid=8694 uid=0 auid=0 ses=84 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_START msg=audit(1398701027.108:2098): user pid=8694 uid=0 auid=0 ses=84 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701027.109:2099): user pid=8710 uid=0 auid=0 ses=84 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=8710 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701027.109:2100): user pid=8710 uid=0 auid=0 ses=84 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=8710 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRED_REFR msg=audit(1398701027.110:2101): user pid=8710 uid=0 auid=0 ses=84 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_END msg=audit(1398701027.141:2102): user pid=8694 uid=0 auid=0 ses=84 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=CRED_DISP msg=audit(1398701027.149:2103): user pid=8694 uid=0 auid=0 ses=84 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_END msg=audit(1398701027.150:2104): user pid=8694 uid=0 auid=0 ses=84 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_LOGOUT msg=audit(1398701027.151:2105): user pid=8694 uid=0 auid=0 ses=84 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701027.151:2106): user pid=8694 uid=0 auid=0 ses=84 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=8694 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701027.151:2107): user pid=8694 uid=0 auid=0 ses=84 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=8694 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701027.151:2108): user pid=8694 uid=0 auid=0 ses=84 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=8694 suid=0 rport=42198 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=NETFILTER_CFG msg=audit(1398701027.507:2109): table=filter family=2 entries=0
>type=SYSCALL msg=audit(1398701027.507:2109): arch=c000003e syscall=272 success=yes exit=0 a0=40000000 a1=c0 a2=0 a3=7fff8f80d300 items=0 ppid=8871 pid=8878 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=80 comm="ip" exe="/sbin/ip" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null)
>type=NETFILTER_CFG msg=audit(1398701027.544:2110): table=filter family=2 entries=0
>type=SYSCALL msg=audit(1398701027.544:2110): arch=c000003e syscall=272 success=yes exit=0 a0=40000000 a1=c0 a2=0 a3=7fff80f1cb10 items=0 ppid=8871 pid=8882 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=80 comm="ip" exe="/sbin/ip" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null)
>type=NETFILTER_CFG msg=audit(1398701027.903:2111): table=filter family=2 entries=0
>type=SYSCALL msg=audit(1398701027.903:2111): arch=c000003e syscall=272 success=yes exit=0 a0=40000000 a1=c0 a2=0 a3=7fffcd547290 items=0 ppid=8871 pid=8884 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=80 comm="ip" exe="/sbin/ip" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null)
>type=NETFILTER_CFG msg=audit(1398701029.305:2112): table=filter family=2 entries=6
>type=SYSCALL msg=audit(1398701029.305:2112): arch=c000003e syscall=54 success=yes exit=0 a0=3 a1=0 a2=40 a3=1842e10 items=0 ppid=8340 pid=9013 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=80 comm="iptables" exe="/sbin/iptables-multi-1.4.7" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null)
>type=USER_ACCT msg=audit(1398701029.978:2113): user pid=9043 uid=0 auid=0 ses=80 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/bin/crontab" hostname=? addr=? terminal=cron res=success'
>type=CRED_ACQ msg=audit(1398701029.978:2114): user pid=9043 uid=0 auid=0 ses=80 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/bin/crontab" hostname=? addr=? terminal=cron res=success'
>type=USER_ACCT msg=audit(1398701030.006:2115): user pid=9045 uid=0 auid=0 ses=80 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/bin/crontab" hostname=? addr=? terminal=cron res=success'
>type=CRED_ACQ msg=audit(1398701030.007:2116): user pid=9045 uid=0 auid=0 ses=80 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/bin/crontab" hostname=? addr=? terminal=cron res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701030.190:2117): user pid=9062 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=9062 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701030.191:2118): user pid=9062 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=9062 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_SESSION msg=audit(1398701030.191:2119): user pid=9061 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 spid=9062 suid=74 rport=42199 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_SESSION msg=audit(1398701030.191:2120): user pid=9061 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 spid=9062 suid=74 rport=42199 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=USER_AUTH msg=audit(1398701030.255:2121): user pid=9061 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=42199 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=USER_AUTH msg=audit(1398701030.255:2122): user pid=9061 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=8b:2d:a5:06:3e:34:8a:e0:bf:ca:69:94:eb:59:f0:19 rport=42199 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=USER_ACCT msg=audit(1398701030.264:2123): user pid=9061 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701030.265:2124): user pid=9061 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=9062 suid=74 rport=42199 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=USER_AUTH msg=audit(1398701030.266:2125): user pid=9061 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=ssh res=success'
>type=CRED_ACQ msg=audit(1398701030.267:2126): user pid=9061 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=LOGIN msg=audit(1398701030.267:2127): pid=9061 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=85
>type=USER_ROLE_CHANGE msg=audit(1398701030.426:2128): user pid=9061 uid=0 auid=0 ses=85 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_START msg=audit(1398701030.432:2129): user pid=9061 uid=0 auid=0 ses=85 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_LOGIN msg=audit(1398701030.440:2130): user pid=9061 uid=0 auid=0 ses=85 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_START msg=audit(1398701030.441:2131): user pid=9061 uid=0 auid=0 ses=85 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701030.445:2132): user pid=9065 uid=0 auid=0 ses=85 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=9065 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701030.445:2133): user pid=9065 uid=0 auid=0 ses=85 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=9065 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRED_REFR msg=audit(1398701030.446:2134): user pid=9065 uid=0 auid=0 ses=85 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_END msg=audit(1398701030.500:2135): user pid=9061 uid=0 auid=0 ses=85 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=CRED_DISP msg=audit(1398701030.500:2136): user pid=9061 uid=0 auid=0 ses=85 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_END msg=audit(1398701030.501:2137): user pid=9061 uid=0 auid=0 ses=85 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_LOGOUT msg=audit(1398701030.502:2138): user pid=9061 uid=0 auid=0 ses=85 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701030.502:2139): user pid=9061 uid=0 auid=0 ses=85 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=9061 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701030.502:2140): user pid=9061 uid=0 auid=0 ses=85 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=9061 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701030.502:2141): user pid=9061 uid=0 auid=0 ses=85 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=9061 suid=0 rport=42199 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701033.527:2142): user pid=9072 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=9072 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701033.527:2143): user pid=9072 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=9072 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_SESSION msg=audit(1398701033.527:2144): user pid=9071 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 spid=9072 suid=74 rport=42201 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_SESSION msg=audit(1398701033.527:2145): user pid=9071 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 spid=9072 suid=74 rport=42201 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=USER_AUTH msg=audit(1398701033.596:2146): user pid=9071 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=42201 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=USER_AUTH msg=audit(1398701033.596:2147): user pid=9071 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=8b:2d:a5:06:3e:34:8a:e0:bf:ca:69:94:eb:59:f0:19 rport=42201 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=USER_ACCT msg=audit(1398701033.607:2148): user pid=9071 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701033.608:2149): user pid=9071 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=9072 suid=74 rport=42201 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=USER_AUTH msg=audit(1398701033.609:2150): user pid=9071 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=ssh res=success'
>type=CRED_ACQ msg=audit(1398701033.609:2151): user pid=9071 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=LOGIN msg=audit(1398701033.610:2152): pid=9071 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=86
>type=USER_ROLE_CHANGE msg=audit(1398701033.716:2153): user pid=9071 uid=0 auid=0 ses=86 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_START msg=audit(1398701033.720:2154): user pid=9071 uid=0 auid=0 ses=86 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_LOGIN msg=audit(1398701033.727:2155): user pid=9071 uid=0 auid=0 ses=86 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_START msg=audit(1398701033.727:2156): user pid=9071 uid=0 auid=0 ses=86 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701033.729:2157): user pid=9074 uid=0 auid=0 ses=86 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=9074 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701033.729:2158): user pid=9074 uid=0 auid=0 ses=86 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=9074 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRED_REFR msg=audit(1398701033.730:2159): user pid=9074 uid=0 auid=0 ses=86 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_END msg=audit(1398701033.779:2160): user pid=9071 uid=0 auid=0 ses=86 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=CRED_DISP msg=audit(1398701033.779:2161): user pid=9071 uid=0 auid=0 ses=86 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_END msg=audit(1398701033.780:2162): user pid=9071 uid=0 auid=0 ses=86 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_LOGOUT msg=audit(1398701033.780:2163): user pid=9071 uid=0 auid=0 ses=86 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701033.780:2164): user pid=9071 uid=0 auid=0 ses=86 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=9071 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701033.781:2165): user pid=9071 uid=0 auid=0 ses=86 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=9071 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701033.781:2166): user pid=9071 uid=0 auid=0 ses=86 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=9071 suid=0 rport=42201 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701036.808:2167): user pid=9081 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=9081 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701036.808:2168): user pid=9081 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=9081 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_SESSION msg=audit(1398701036.808:2169): user pid=9080 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 spid=9081 suid=74 rport=42202 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_SESSION msg=audit(1398701036.808:2170): user pid=9080 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 spid=9081 suid=74 rport=42202 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=USER_AUTH msg=audit(1398701036.872:2171): user pid=9080 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=42202 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=USER_AUTH msg=audit(1398701036.872:2172): user pid=9080 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=8b:2d:a5:06:3e:34:8a:e0:bf:ca:69:94:eb:59:f0:19 rport=42202 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=USER_ACCT msg=audit(1398701036.877:2173): user pid=9080 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701036.878:2174): user pid=9080 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=9081 suid=74 rport=42202 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=USER_AUTH msg=audit(1398701036.878:2175): user pid=9080 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=ssh res=success'
>type=CRED_ACQ msg=audit(1398701036.879:2176): user pid=9080 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=LOGIN msg=audit(1398701036.879:2177): pid=9080 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=87
>type=USER_ROLE_CHANGE msg=audit(1398701036.980:2178): user pid=9080 uid=0 auid=0 ses=87 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_START msg=audit(1398701036.986:2179): user pid=9080 uid=0 auid=0 ses=87 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_LOGIN msg=audit(1398701036.993:2180): user pid=9080 uid=0 auid=0 ses=87 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_START msg=audit(1398701036.993:2181): user pid=9080 uid=0 auid=0 ses=87 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701036.996:2182): user pid=9083 uid=0 auid=0 ses=87 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=9083 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701036.996:2183): user pid=9083 uid=0 auid=0 ses=87 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=9083 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRED_REFR msg=audit(1398701036.997:2184): user pid=9083 uid=0 auid=0 ses=87 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_END msg=audit(1398701037.042:2185): user pid=9080 uid=0 auid=0 ses=87 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=CRED_DISP msg=audit(1398701037.043:2186): user pid=9080 uid=0 auid=0 ses=87 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_END msg=audit(1398701037.044:2187): user pid=9080 uid=0 auid=0 ses=87 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_LOGOUT msg=audit(1398701037.044:2188): user pid=9080 uid=0 auid=0 ses=87 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701037.044:2189): user pid=9080 uid=0 auid=0 ses=87 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=9080 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701037.044:2190): user pid=9080 uid=0 auid=0 ses=87 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=9080 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701037.044:2191): user pid=9080 uid=0 auid=0 ses=87 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=9080 suid=0 rport=42202 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=ADD_GROUP msg=audit(1398701039.281:2192): user pid=9088 uid=0 auid=0 ses=80 subj=unconfined_u:system_r:groupadd_t:s0-s0:c0.c1023 msg='op=adding group to /etc/group id=163 exe="/usr/sbin/groupadd" hostname=? addr=? terminal=? res=success'
>type=ADD_GROUP msg=audit(1398701039.284:2193): user pid=9088 uid=0 auid=0 ses=80 subj=unconfined_u:system_r:groupadd_t:s0-s0:c0.c1023 msg='op=adding group to /etc/gshadow id=163 exe="/usr/sbin/groupadd" hostname=? addr=? terminal=? res=success'
>type=ADD_GROUP msg=audit(1398701039.285:2194): user pid=9088 uid=0 auid=0 ses=80 subj=unconfined_u:system_r:groupadd_t:s0-s0:c0.c1023 msg='op= id=163 exe="/usr/sbin/groupadd" hostname=? addr=? terminal=? res=success'
>type=ADD_USER msg=audit(1398701039.354:2195): user pid=9093 uid=0 auid=0 ses=80 subj=unconfined_u:system_r:useradd_t:s0-s0:c0.c1023 msg='op=adding user id=163 exe="/usr/sbin/useradd" hostname=? addr=? terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701040.076:2196): user pid=9104 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=9104 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701040.076:2197): user pid=9104 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=9104 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_SESSION msg=audit(1398701040.077:2198): user pid=9103 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 spid=9104 suid=74 rport=42203 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_SESSION msg=audit(1398701040.077:2199): user pid=9103 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 spid=9104 suid=74 rport=42203 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=USER_AUTH msg=audit(1398701040.150:2200): user pid=9103 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=42203 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=USER_AUTH msg=audit(1398701040.150:2201): user pid=9103 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=8b:2d:a5:06:3e:34:8a:e0:bf:ca:69:94:eb:59:f0:19 rport=42203 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=USER_ACCT msg=audit(1398701040.158:2202): user pid=9103 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701040.159:2203): user pid=9103 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=9104 suid=74 rport=42203 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=USER_AUTH msg=audit(1398701040.160:2204): user pid=9103 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=ssh res=success'
>type=CRED_ACQ msg=audit(1398701040.160:2205): user pid=9103 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=LOGIN msg=audit(1398701040.160:2206): pid=9103 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=88
>type=USER_ROLE_CHANGE msg=audit(1398701040.260:2207): user pid=9103 uid=0 auid=0 ses=88 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_START msg=audit(1398701040.264:2208): user pid=9103 uid=0 auid=0 ses=88 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_LOGIN msg=audit(1398701040.271:2209): user pid=9103 uid=0 auid=0 ses=88 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_START msg=audit(1398701040.271:2210): user pid=9103 uid=0 auid=0 ses=88 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701040.274:2211): user pid=9106 uid=0 auid=0 ses=88 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=9106 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701040.274:2212): user pid=9106 uid=0 auid=0 ses=88 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=9106 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRED_REFR msg=audit(1398701040.275:2213): user pid=9106 uid=0 auid=0 ses=88 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_END msg=audit(1398701040.324:2214): user pid=9103 uid=0 auid=0 ses=88 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=CRED_DISP msg=audit(1398701040.324:2215): user pid=9103 uid=0 auid=0 ses=88 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_END msg=audit(1398701040.325:2216): user pid=9103 uid=0 auid=0 ses=88 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_LOGOUT msg=audit(1398701040.325:2217): user pid=9103 uid=0 auid=0 ses=88 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701040.326:2218): user pid=9103 uid=0 auid=0 ses=88 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=9103 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701040.326:2219): user pid=9103 uid=0 auid=0 ses=88 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=9103 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701040.326:2220): user pid=9103 uid=0 auid=0 ses=88 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=9103 suid=0 rport=42203 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=USER_ACCT msg=audit(1398701041.323:2221): user pid=9110 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=USER_ACCT msg=audit(1398701041.323:2222): user pid=9111 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=CRED_ACQ msg=audit(1398701041.323:2223): user pid=9111 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=CRED_ACQ msg=audit(1398701041.324:2224): user pid=9110 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=LOGIN msg=audit(1398701041.325:2225): pid=9110 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=89
>type=LOGIN msg=audit(1398701041.326:2226): pid=9111 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=90
>type=USER_START msg=audit(1398701041.331:2227): user pid=9111 uid=0 auid=0 ses=90 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=USER_START msg=audit(1398701041.331:2228): user pid=9110 uid=0 auid=0 ses=89 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=CRED_DISP msg=audit(1398701041.380:2229): user pid=9110 uid=0 auid=0 ses=89 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=USER_END msg=audit(1398701041.380:2230): user pid=9110 uid=0 auid=0 ses=89 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=CRED_DISP msg=audit(1398701041.893:2231): user pid=9111 uid=0 auid=0 ses=90 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=USER_END msg=audit(1398701041.894:2232): user pid=9111 uid=0 auid=0 ses=90 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=USER_START msg=audit(1398701042.866:2233): user pid=9160 uid=0 auid=0 ses=80 subj=unconfined_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="keystone" exe="/sbin/runuser" hostname=? addr=? terminal=? res=success'
>type=CRED_ACQ msg=audit(1398701042.866:2234): user pid=9160 uid=0 auid=0 ses=80 subj=unconfined_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="keystone" exe="/sbin/runuser" hostname=? addr=? terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701043.360:2235): user pid=9174 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=9174 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701043.360:2236): user pid=9174 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=9174 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_SESSION msg=audit(1398701043.362:2237): user pid=9173 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 spid=9174 suid=74 rport=42205 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_SESSION msg=audit(1398701043.362:2238): user pid=9173 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 spid=9174 suid=74 rport=42205 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=USER_AUTH msg=audit(1398701043.429:2239): user pid=9173 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=42205 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=USER_AUTH msg=audit(1398701043.429:2240): user pid=9173 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=8b:2d:a5:06:3e:34:8a:e0:bf:ca:69:94:eb:59:f0:19 rport=42205 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=USER_ACCT msg=audit(1398701043.434:2241): user pid=9173 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701043.434:2242): user pid=9173 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=9174 suid=74 rport=42205 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=USER_AUTH msg=audit(1398701043.435:2243): user pid=9173 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=ssh res=success'
>type=CRED_ACQ msg=audit(1398701043.435:2244): user pid=9173 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=LOGIN msg=audit(1398701043.435:2245): pid=9173 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=91
>type=USER_ROLE_CHANGE msg=audit(1398701043.543:2246): user pid=9173 uid=0 auid=0 ses=91 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_START msg=audit(1398701043.548:2247): user pid=9173 uid=0 auid=0 ses=91 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_LOGIN msg=audit(1398701043.555:2248): user pid=9173 uid=0 auid=0 ses=91 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_START msg=audit(1398701043.555:2249): user pid=9173 uid=0 auid=0 ses=91 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701043.556:2250): user pid=9176 uid=0 auid=0 ses=91 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=9176 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701043.556:2251): user pid=9176 uid=0 auid=0 ses=91 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=9176 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRED_REFR msg=audit(1398701043.558:2252): user pid=9176 uid=0 auid=0 ses=91 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_END msg=audit(1398701043.610:2253): user pid=9173 uid=0 auid=0 ses=91 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=CRED_DISP msg=audit(1398701043.613:2254): user pid=9173 uid=0 auid=0 ses=91 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_END msg=audit(1398701043.614:2255): user pid=9173 uid=0 auid=0 ses=91 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_LOGOUT msg=audit(1398701043.615:2256): user pid=9173 uid=0 auid=0 ses=91 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701043.615:2257): user pid=9173 uid=0 auid=0 ses=91 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=9173 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701043.615:2258): user pid=9173 uid=0 auid=0 ses=91 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=9173 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701043.615:2259): user pid=9173 uid=0 auid=0 ses=91 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=9173 suid=0 rport=42205 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRED_DISP msg=audit(1398701043.896:2260): user pid=9160 uid=0 auid=0 ses=80 subj=unconfined_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="keystone" exe="/sbin/runuser" hostname=? addr=? terminal=? res=success'
>type=USER_END msg=audit(1398701043.900:2261): user pid=9160 uid=0 auid=0 ses=80 subj=unconfined_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="keystone" exe="/sbin/runuser" hostname=? addr=? terminal=? res=success'
>type=NETFILTER_CFG msg=audit(1398701045.652:2262): table=filter family=2 entries=0
>type=SYSCALL msg=audit(1398701045.652:2262): arch=c000003e syscall=272 success=yes exit=0 a0=40000000 a1=c0 a2=0 a3=7fffff9d6b10 items=0 ppid=9409 pid=9416 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=81 comm="ip" exe="/sbin/ip" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null)
>type=NETFILTER_CFG msg=audit(1398701045.686:2263): table=filter family=2 entries=0
>type=SYSCALL msg=audit(1398701045.686:2263): arch=c000003e syscall=272 success=yes exit=0 a0=40000000 a1=c0 a2=0 a3=7fffc0a51f40 items=0 ppid=9409 pid=9420 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=81 comm="ip" exe="/sbin/ip" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null)
>type=NETFILTER_CFG msg=audit(1398701046.015:2264): table=filter family=2 entries=0
>type=SYSCALL msg=audit(1398701046.015:2264): arch=c000003e syscall=272 success=yes exit=0 a0=40000000 a1=c0 a2=0 a3=7fff98e1f500 items=0 ppid=9409 pid=9422 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=81 comm="ip" exe="/sbin/ip" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null)
>type=CRYPTO_KEY_USER msg=audit(1398701046.629:2265): user pid=9518 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=9518 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701046.629:2266): user pid=9518 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=9518 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_SESSION msg=audit(1398701046.631:2267): user pid=9517 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 spid=9518 suid=74 rport=42207 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_SESSION msg=audit(1398701046.631:2268): user pid=9517 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 spid=9518 suid=74 rport=42207 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=USER_AUTH msg=audit(1398701046.693:2269): user pid=9517 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=42207 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=USER_AUTH msg=audit(1398701046.693:2270): user pid=9517 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=8b:2d:a5:06:3e:34:8a:e0:bf:ca:69:94:eb:59:f0:19 rport=42207 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=USER_ACCT msg=audit(1398701046.704:2271): user pid=9517 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701046.709:2272): user pid=9517 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=9518 suid=74 rport=42207 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=USER_AUTH msg=audit(1398701046.710:2273): user pid=9517 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=ssh res=success'
>type=CRED_ACQ msg=audit(1398701046.713:2274): user pid=9517 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=LOGIN msg=audit(1398701046.713:2275): pid=9517 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=92
>type=USER_ROLE_CHANGE msg=audit(1398701046.822:2276): user pid=9517 uid=0 auid=0 ses=92 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_START msg=audit(1398701046.827:2277): user pid=9517 uid=0 auid=0 ses=92 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_LOGIN msg=audit(1398701046.835:2278): user pid=9517 uid=0 auid=0 ses=92 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_START msg=audit(1398701046.836:2279): user pid=9517 uid=0 auid=0 ses=92 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701046.840:2280): user pid=9522 uid=0 auid=0 ses=92 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=9522 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701046.840:2281): user pid=9522 uid=0 auid=0 ses=92 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=9522 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRED_REFR msg=audit(1398701046.841:2282): user pid=9522 uid=0 auid=0 ses=92 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_END msg=audit(1398701046.875:2283): user pid=9517 uid=0 auid=0 ses=92 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=CRED_DISP msg=audit(1398701046.876:2284): user pid=9517 uid=0 auid=0 ses=92 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_END msg=audit(1398701046.877:2285): user pid=9517 uid=0 auid=0 ses=92 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_LOGOUT msg=audit(1398701046.877:2286): user pid=9517 uid=0 auid=0 ses=92 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701046.877:2287): user pid=9517 uid=0 auid=0 ses=92 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=9517 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701046.877:2288): user pid=9517 uid=0 auid=0 ses=92 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=9517 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701046.877:2289): user pid=9517 uid=0 auid=0 ses=92 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=9517 suid=0 rport=42207 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=NETFILTER_CFG msg=audit(1398701048.449:2290): table=filter family=2 entries=0
>type=SYSCALL msg=audit(1398701048.449:2290): arch=c000003e syscall=272 success=yes exit=0 a0=40000000 a1=c0 a2=0 a3=7fff4a263ce0 items=0 ppid=9739 pid=9746 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=81 comm="ip" exe="/sbin/ip" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null)
>type=NETFILTER_CFG msg=audit(1398701048.481:2291): table=filter family=2 entries=0
>type=SYSCALL msg=audit(1398701048.481:2291): arch=c000003e syscall=272 success=yes exit=0 a0=40000000 a1=c0 a2=0 a3=7fffd45ece10 items=0 ppid=9739 pid=9750 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=81 comm="ip" exe="/sbin/ip" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null)
>type=NETFILTER_CFG msg=audit(1398701048.820:2292): table=filter family=2 entries=0
>type=SYSCALL msg=audit(1398701048.820:2292): arch=c000003e syscall=272 success=yes exit=0 a0=40000000 a1=c0 a2=0 a3=7fff8ea602c0 items=0 ppid=9739 pid=9752 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=81 comm="ip" exe="/sbin/ip" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null)
>type=NETFILTER_CFG msg=audit(1398701049.587:2293): table=filter family=2 entries=7
>type=SYSCALL msg=audit(1398701049.587:2293): arch=c000003e syscall=54 success=yes exit=0 a0=3 a1=0 a2=40 a3=1639260 items=0 ppid=9195 pid=9852 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=81 comm="iptables" exe="/sbin/iptables-multi-1.4.7" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null)
>type=CRYPTO_KEY_USER msg=audit(1398701049.911:2294): user pid=9884 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=9884 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701049.911:2295): user pid=9884 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=9884 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_SESSION msg=audit(1398701049.912:2296): user pid=9883 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 spid=9884 suid=74 rport=42208 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_SESSION msg=audit(1398701049.913:2297): user pid=9883 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 spid=9884 suid=74 rport=42208 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=USER_AUTH msg=audit(1398701049.978:2298): user pid=9883 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=42208 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=USER_AUTH msg=audit(1398701049.978:2299): user pid=9883 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=8b:2d:a5:06:3e:34:8a:e0:bf:ca:69:94:eb:59:f0:19 rport=42208 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=USER_ACCT msg=audit(1398701049.984:2300): user pid=9883 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701049.985:2301): user pid=9883 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=9884 suid=74 rport=42208 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=USER_AUTH msg=audit(1398701049.985:2302): user pid=9883 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=ssh res=success'
>type=CRED_ACQ msg=audit(1398701049.986:2303): user pid=9883 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=LOGIN msg=audit(1398701049.986:2304): pid=9883 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=93
>type=USER_ROLE_CHANGE msg=audit(1398701050.117:2305): user pid=9883 uid=0 auid=0 ses=93 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_START msg=audit(1398701050.122:2306): user pid=9883 uid=0 auid=0 ses=93 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_LOGIN msg=audit(1398701050.130:2307): user pid=9883 uid=0 auid=0 ses=93 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_START msg=audit(1398701050.131:2308): user pid=9883 uid=0 auid=0 ses=93 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701050.134:2309): user pid=9889 uid=0 auid=0 ses=93 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=9889 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701050.134:2310): user pid=9889 uid=0 auid=0 ses=93 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=9889 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRED_REFR msg=audit(1398701050.135:2311): user pid=9889 uid=0 auid=0 ses=93 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_END msg=audit(1398701050.181:2312): user pid=9883 uid=0 auid=0 ses=93 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=CRED_DISP msg=audit(1398701050.182:2313): user pid=9883 uid=0 auid=0 ses=93 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_END msg=audit(1398701050.183:2314): user pid=9883 uid=0 auid=0 ses=93 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_LOGOUT msg=audit(1398701050.183:2315): user pid=9883 uid=0 auid=0 ses=93 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701050.183:2316): user pid=9883 uid=0 auid=0 ses=93 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=9883 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701050.183:2317): user pid=9883 uid=0 auid=0 ses=93 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=9883 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701050.183:2318): user pid=9883 uid=0 auid=0 ses=93 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=9883 suid=0 rport=42208 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701053.215:2319): user pid=9897 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=9897 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701053.215:2320): user pid=9897 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=9897 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_SESSION msg=audit(1398701053.217:2321): user pid=9896 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 spid=9897 suid=74 rport=42210 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_SESSION msg=audit(1398701053.217:2322): user pid=9896 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 spid=9897 suid=74 rport=42210 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=USER_AUTH msg=audit(1398701053.286:2323): user pid=9896 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=42210 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=USER_AUTH msg=audit(1398701053.286:2324): user pid=9896 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=8b:2d:a5:06:3e:34:8a:e0:bf:ca:69:94:eb:59:f0:19 rport=42210 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=USER_ACCT msg=audit(1398701053.294:2325): user pid=9896 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701053.294:2326): user pid=9896 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=9897 suid=74 rport=42210 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=USER_AUTH msg=audit(1398701053.295:2327): user pid=9896 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=ssh res=success'
>type=CRED_ACQ msg=audit(1398701053.295:2328): user pid=9896 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=LOGIN msg=audit(1398701053.295:2329): pid=9896 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=94
>type=USER_ROLE_CHANGE msg=audit(1398701053.406:2330): user pid=9896 uid=0 auid=0 ses=94 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_START msg=audit(1398701053.410:2331): user pid=9896 uid=0 auid=0 ses=94 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_LOGIN msg=audit(1398701053.418:2332): user pid=9896 uid=0 auid=0 ses=94 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_START msg=audit(1398701053.418:2333): user pid=9896 uid=0 auid=0 ses=94 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701053.421:2334): user pid=9899 uid=0 auid=0 ses=94 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=9899 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701053.422:2335): user pid=9899 uid=0 auid=0 ses=94 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=9899 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRED_REFR msg=audit(1398701053.423:2336): user pid=9899 uid=0 auid=0 ses=94 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_END msg=audit(1398701053.472:2337): user pid=9896 uid=0 auid=0 ses=94 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=CRED_DISP msg=audit(1398701053.472:2338): user pid=9896 uid=0 auid=0 ses=94 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_END msg=audit(1398701053.473:2339): user pid=9896 uid=0 auid=0 ses=94 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_LOGOUT msg=audit(1398701053.473:2340): user pid=9896 uid=0 auid=0 ses=94 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701053.473:2341): user pid=9896 uid=0 auid=0 ses=94 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=9896 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701053.474:2342): user pid=9896 uid=0 auid=0 ses=94 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=9896 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701053.474:2343): user pid=9896 uid=0 auid=0 ses=94 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=9896 suid=0 rport=42210 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701053.547:2344): user pid=9904 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=9904 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701053.548:2345): user pid=9904 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=9904 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_SESSION msg=audit(1398701053.548:2346): user pid=9903 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 spid=9904 suid=74 rport=42211 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_SESSION msg=audit(1398701053.548:2347): user pid=9903 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 spid=9904 suid=74 rport=42211 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=USER_AUTH msg=audit(1398701053.608:2348): user pid=9903 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=42211 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=USER_AUTH msg=audit(1398701053.608:2349): user pid=9903 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=8b:2d:a5:06:3e:34:8a:e0:bf:ca:69:94:eb:59:f0:19 rport=42211 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=USER_ACCT msg=audit(1398701053.614:2350): user pid=9903 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701053.614:2351): user pid=9903 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=9904 suid=74 rport=42211 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=USER_AUTH msg=audit(1398701053.615:2352): user pid=9903 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=ssh res=success'
>type=CRED_ACQ msg=audit(1398701053.616:2353): user pid=9903 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=LOGIN msg=audit(1398701053.616:2354): pid=9903 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=95
>type=USER_ROLE_CHANGE msg=audit(1398701053.718:2355): user pid=9903 uid=0 auid=0 ses=95 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_START msg=audit(1398701053.722:2356): user pid=9903 uid=0 auid=0 ses=95 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_LOGIN msg=audit(1398701053.729:2357): user pid=9903 uid=0 auid=0 ses=95 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_START msg=audit(1398701053.730:2358): user pid=9903 uid=0 auid=0 ses=95 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701053.733:2359): user pid=9906 uid=0 auid=0 ses=95 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=9906 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701053.733:2360): user pid=9906 uid=0 auid=0 ses=95 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=9906 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRED_REFR msg=audit(1398701053.734:2361): user pid=9906 uid=0 auid=0 ses=95 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_END msg=audit(1398701053.825:2362): user pid=9903 uid=0 auid=0 ses=95 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_LOGOUT msg=audit(1398701053.830:2363): user pid=9903 uid=0 auid=0 ses=95 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_END msg=audit(1398701053.831:2364): user pid=9903 uid=0 auid=0 ses=95 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=CRED_DISP msg=audit(1398701053.831:2365): user pid=9903 uid=0 auid=0 ses=95 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701053.831:2366): user pid=9903 uid=0 auid=0 ses=95 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=9903 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701053.831:2367): user pid=9903 uid=0 auid=0 ses=95 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=9903 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701053.833:2368): user pid=9903 uid=0 auid=0 ses=95 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=9903 suid=0 rport=42211 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=USER_END msg=audit(1398701053.856:2369): user pid=4909 uid=0 auid=0 ses=18 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'
>type=USER_END msg=audit(1398701053.863:2370): user pid=4909 uid=0 auid=0 ses=18 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=USER_LOGOUT msg=audit(1398701053.864:2371): user pid=4909 uid=0 auid=0 ses=18 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=ADD_GROUP msg=audit(1398701053.889:2372): user pid=9912 uid=0 auid=0 ses=81 subj=unconfined_u:system_r:groupadd_t:s0-s0:c0.c1023 msg='op=adding group to /etc/group id=161 exe="/usr/sbin/groupadd" hostname=? addr=? terminal=? res=success'
>type=ADD_GROUP msg=audit(1398701053.892:2373): user pid=9912 uid=0 auid=0 ses=81 subj=unconfined_u:system_r:groupadd_t:s0-s0:c0.c1023 msg='op=adding group to /etc/gshadow id=161 exe="/usr/sbin/groupadd" hostname=? addr=? terminal=? res=success'
>type=ADD_GROUP msg=audit(1398701053.892:2374): user pid=9912 uid=0 auid=0 ses=81 subj=unconfined_u:system_r:groupadd_t:s0-s0:c0.c1023 msg='op= id=161 exe="/usr/sbin/groupadd" hostname=? addr=? terminal=? res=success'
>type=ADD_USER msg=audit(1398701053.942:2375): user pid=9917 uid=0 auid=0 ses=81 subj=unconfined_u:system_r:useradd_t:s0-s0:c0.c1023 msg='op=adding user id=161 exe="/usr/sbin/useradd" hostname=? addr=? terminal=? res=success'
>type=USER_END msg=audit(1398701053.963:2376): user pid=4909 uid=0 auid=0 ses=18 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=CRED_DISP msg=audit(1398701053.963:2377): user pid=4909 uid=0 auid=0 ses=18 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701053.964:2378): user pid=4909 uid=0 auid=0 ses=18 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=4909 suid=0 rport=38241 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701053.964:2379): user pid=4909 uid=0 auid=0 ses=18 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=4909 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701053.964:2380): user pid=4909 uid=0 auid=0 ses=18 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=4909 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701053.972:2381): user pid=9923 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=9923 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701053.972:2382): user pid=9923 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=9923 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=CRYPTO_SESSION msg=audit(1398701053.973:2383): user pid=9922 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 spid=9923 suid=74 rport=38273 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=CRYPTO_SESSION msg=audit(1398701053.973:2384): user pid=9922 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 spid=9923 suid=74 rport=38273 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=USER_AUTH msg=audit(1398701054.163:2385): user pid=9922 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=38273 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=USER_AUTH msg=audit(1398701054.163:2386): user pid=9922 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=e7:e2:3d:94:48:cf:f5:8c:5e:54:98:bd:89:a5:29:a9 rport=38273 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=USER_ACCT msg=audit(1398701054.170:2387): user pid=9922 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701054.171:2388): user pid=9922 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=9923 suid=74 rport=38273 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=USER_AUTH msg=audit(1398701054.172:2389): user pid=9922 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=ssh res=success'
>type=CRED_ACQ msg=audit(1398701054.172:2390): user pid=9922 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=LOGIN msg=audit(1398701054.172:2391): pid=9922 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=96
>type=USER_ROLE_CHANGE msg=audit(1398701054.299:2392): user pid=9922 uid=0 auid=0 ses=96 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=USER_START msg=audit(1398701054.311:2393): user pid=9922 uid=0 auid=0 ses=96 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=USER_LOGIN msg=audit(1398701054.338:2394): user pid=9922 uid=0 auid=0 ses=96 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=USER_START msg=audit(1398701054.339:2395): user pid=9922 uid=0 auid=0 ses=96 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701054.340:2396): user pid=9929 uid=0 auid=0 ses=96 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=9929 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701054.340:2397): user pid=9929 uid=0 auid=0 ses=96 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=9929 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=CRED_REFR msg=audit(1398701054.341:2398): user pid=9929 uid=0 auid=0 ses=96 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=USER_END msg=audit(1398701054.389:2399): user pid=9922 uid=0 auid=0 ses=96 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=USER_LOGOUT msg=audit(1398701054.389:2400): user pid=9922 uid=0 auid=0 ses=96 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=USER_END msg=audit(1398701054.490:2401): user pid=9922 uid=0 auid=0 ses=96 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=CRED_DISP msg=audit(1398701054.490:2402): user pid=9922 uid=0 auid=0 ses=96 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701054.491:2403): user pid=9922 uid=0 auid=0 ses=96 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=9922 suid=0 rport=38273 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701054.491:2404): user pid=9922 uid=0 auid=0 ses=96 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=9922 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701054.491:2405): user pid=9922 uid=0 auid=0 ses=96 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=9922 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701054.499:2406): user pid=9935 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=9935 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701054.499:2407): user pid=9935 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=9935 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=CRYPTO_SESSION msg=audit(1398701054.501:2408): user pid=9934 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 spid=9935 suid=74 rport=38274 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=CRYPTO_SESSION msg=audit(1398701054.501:2409): user pid=9934 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 spid=9935 suid=74 rport=38274 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=USER_AUTH msg=audit(1398701054.688:2410): user pid=9934 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=38274 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=USER_AUTH msg=audit(1398701054.688:2411): user pid=9934 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=e7:e2:3d:94:48:cf:f5:8c:5e:54:98:bd:89:a5:29:a9 rport=38274 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=USER_ACCT msg=audit(1398701054.697:2412): user pid=9934 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701054.697:2413): user pid=9934 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=9935 suid=74 rport=38274 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=USER_AUTH msg=audit(1398701054.698:2414): user pid=9934 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=ssh res=success'
>type=CRED_ACQ msg=audit(1398701054.698:2415): user pid=9934 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=LOGIN msg=audit(1398701054.698:2416): pid=9934 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=97
>type=USER_ROLE_CHANGE msg=audit(1398701054.804:2417): user pid=9934 uid=0 auid=0 ses=97 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=USER_START msg=audit(1398701054.808:2418): user pid=9934 uid=0 auid=0 ses=97 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=USER_LOGIN msg=audit(1398701054.819:2419): user pid=9934 uid=0 auid=0 ses=97 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=USER_START msg=audit(1398701054.819:2420): user pid=9934 uid=0 auid=0 ses=97 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=USER_START msg=audit(1398701054.821:2421): user pid=9937 uid=0 auid=0 ses=97 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=/dev/pts/0 res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701054.821:2422): user pid=9937 uid=0 auid=0 ses=97 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=9937 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=pts/0 res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701054.821:2423): user pid=9937 uid=0 auid=0 ses=97 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=9937 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=pts/0 res=success'
>type=CRED_REFR msg=audit(1398701054.822:2424): user pid=9937 uid=0 auid=0 ses=97 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701055.141:2425): user pid=10022 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=10022 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701055.142:2426): user pid=10022 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=10022 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701055.176:2427): user pid=10027 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=10027 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701055.176:2428): user pid=10027 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=10027 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_SESSION msg=audit(1398701055.176:2429): user pid=10026 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 spid=10027 suid=74 rport=42213 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_SESSION msg=audit(1398701055.177:2430): user pid=10026 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 spid=10027 suid=74 rport=42213 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=USER_AUTH msg=audit(1398701055.232:2431): user pid=10026 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=42213 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=USER_AUTH msg=audit(1398701055.232:2432): user pid=10026 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=8b:2d:a5:06:3e:34:8a:e0:bf:ca:69:94:eb:59:f0:19 rport=42213 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=USER_ACCT msg=audit(1398701055.244:2433): user pid=10026 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701055.245:2434): user pid=10026 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=10027 suid=74 rport=42213 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=USER_AUTH msg=audit(1398701055.246:2435): user pid=10026 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=ssh res=success'
>type=CRED_ACQ msg=audit(1398701055.246:2436): user pid=10026 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=LOGIN msg=audit(1398701055.247:2437): pid=10026 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=98
>type=USER_ROLE_CHANGE msg=audit(1398701055.349:2438): user pid=10026 uid=0 auid=0 ses=98 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_START msg=audit(1398701055.352:2439): user pid=10026 uid=0 auid=0 ses=98 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_LOGIN msg=audit(1398701055.360:2440): user pid=10026 uid=0 auid=0 ses=98 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_START msg=audit(1398701055.360:2441): user pid=10026 uid=0 auid=0 ses=98 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701055.363:2442): user pid=10029 uid=0 auid=0 ses=98 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=10029 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701055.363:2443): user pid=10029 uid=0 auid=0 ses=98 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=10029 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRED_REFR msg=audit(1398701055.364:2444): user pid=10029 uid=0 auid=0 ses=98 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_END msg=audit(1398701055.517:2445): user pid=10026 uid=0 auid=0 ses=98 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=CRED_DISP msg=audit(1398701055.517:2446): user pid=10026 uid=0 auid=0 ses=98 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_END msg=audit(1398701055.518:2447): user pid=10026 uid=0 auid=0 ses=98 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_LOGOUT msg=audit(1398701055.518:2448): user pid=10026 uid=0 auid=0 ses=98 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701055.518:2449): user pid=10026 uid=0 auid=0 ses=98 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=10026 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701055.518:2450): user pid=10026 uid=0 auid=0 ses=98 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=10026 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701055.519:2451): user pid=10026 uid=0 auid=0 ses=98 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=10026 suid=0 rport=42213 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701055.539:2452): user pid=10039 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=10039 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701055.539:2453): user pid=10039 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=10039 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_SESSION msg=audit(1398701055.540:2454): user pid=10038 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 spid=10039 suid=74 rport=42214 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_SESSION msg=audit(1398701055.540:2455): user pid=10038 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 spid=10039 suid=74 rport=42214 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=USER_AUTH msg=audit(1398701055.602:2456): user pid=10038 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=42214 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=USER_AUTH msg=audit(1398701055.602:2457): user pid=10038 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=8b:2d:a5:06:3e:34:8a:e0:bf:ca:69:94:eb:59:f0:19 rport=42214 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=USER_ACCT msg=audit(1398701055.610:2458): user pid=10038 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701055.610:2459): user pid=10038 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=10039 suid=74 rport=42214 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=USER_AUTH msg=audit(1398701055.611:2460): user pid=10038 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=ssh res=success'
>type=CRED_ACQ msg=audit(1398701055.611:2461): user pid=10038 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=LOGIN msg=audit(1398701055.611:2462): pid=10038 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=99
>type=USER_ROLE_CHANGE msg=audit(1398701055.722:2463): user pid=10038 uid=0 auid=0 ses=99 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_START msg=audit(1398701055.727:2464): user pid=10038 uid=0 auid=0 ses=99 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_LOGIN msg=audit(1398701055.735:2465): user pid=10038 uid=0 auid=0 ses=99 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_START msg=audit(1398701055.735:2466): user pid=10038 uid=0 auid=0 ses=99 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701055.738:2467): user pid=10041 uid=0 auid=0 ses=99 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=10041 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701055.739:2468): user pid=10041 uid=0 auid=0 ses=99 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=10041 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRED_REFR msg=audit(1398701055.739:2469): user pid=10041 uid=0 auid=0 ses=99 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_END msg=audit(1398701055.802:2470): user pid=10038 uid=0 auid=0 ses=99 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=CRED_DISP msg=audit(1398701055.803:2471): user pid=10038 uid=0 auid=0 ses=99 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_END msg=audit(1398701055.804:2472): user pid=10038 uid=0 auid=0 ses=99 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_LOGOUT msg=audit(1398701055.809:2473): user pid=10038 uid=0 auid=0 ses=99 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701055.809:2474): user pid=10038 uid=0 auid=0 ses=99 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=10038 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701055.809:2475): user pid=10038 uid=0 auid=0 ses=99 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=10038 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701055.809:2476): user pid=10038 uid=0 auid=0 ses=99 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=10038 suid=0 rport=42214 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701055.825:2477): user pid=10047 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=10047 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701055.825:2478): user pid=10047 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=10047 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_SESSION msg=audit(1398701055.825:2479): user pid=10046 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 spid=10047 suid=74 rport=42215 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_SESSION msg=audit(1398701055.825:2480): user pid=10046 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 spid=10047 suid=74 rport=42215 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=USER_AUTH msg=audit(1398701055.887:2481): user pid=10046 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=42215 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=USER_AUTH msg=audit(1398701055.887:2482): user pid=10046 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=8b:2d:a5:06:3e:34:8a:e0:bf:ca:69:94:eb:59:f0:19 rport=42215 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=USER_ACCT msg=audit(1398701055.899:2483): user pid=10046 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701055.900:2484): user pid=10046 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=10047 suid=74 rport=42215 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=USER_AUTH msg=audit(1398701055.901:2485): user pid=10046 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=ssh res=success'
>type=CRED_ACQ msg=audit(1398701055.901:2486): user pid=10046 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=LOGIN msg=audit(1398701055.901:2487): pid=10046 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=100
>type=USER_ROLE_CHANGE msg=audit(1398701056.011:2488): user pid=10046 uid=0 auid=0 ses=100 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_START msg=audit(1398701056.017:2489): user pid=10046 uid=0 auid=0 ses=100 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_LOGIN msg=audit(1398701056.026:2490): user pid=10046 uid=0 auid=0 ses=100 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_START msg=audit(1398701056.027:2491): user pid=10046 uid=0 auid=0 ses=100 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701056.030:2492): user pid=10050 uid=0 auid=0 ses=100 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=10050 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701056.030:2493): user pid=10050 uid=0 auid=0 ses=100 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=10050 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRED_REFR msg=audit(1398701056.031:2494): user pid=10050 uid=0 auid=0 ses=100 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_END msg=audit(1398701056.076:2495): user pid=10046 uid=0 auid=0 ses=100 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=CRED_DISP msg=audit(1398701056.077:2496): user pid=10046 uid=0 auid=0 ses=100 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_END msg=audit(1398701056.078:2497): user pid=10046 uid=0 auid=0 ses=100 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_LOGOUT msg=audit(1398701056.078:2498): user pid=10046 uid=0 auid=0 ses=100 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701056.078:2499): user pid=10046 uid=0 auid=0 ses=100 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=10046 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701056.078:2500): user pid=10046 uid=0 auid=0 ses=100 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=10046 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701056.078:2501): user pid=10046 uid=0 auid=0 ses=100 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=10046 suid=0 rport=42215 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701056.101:2502): user pid=10059 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=10059 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701056.101:2503): user pid=10059 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=10059 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_SESSION msg=audit(1398701056.101:2504): user pid=10058 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 spid=10059 suid=74 rport=42216 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_SESSION msg=audit(1398701056.101:2505): user pid=10058 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 spid=10059 suid=74 rport=42216 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=USER_AUTH msg=audit(1398701056.162:2506): user pid=10058 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=42216 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=USER_AUTH msg=audit(1398701056.162:2507): user pid=10058 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=8b:2d:a5:06:3e:34:8a:e0:bf:ca:69:94:eb:59:f0:19 rport=42216 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=USER_ACCT msg=audit(1398701056.175:2508): user pid=10058 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701056.182:2509): user pid=10058 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=10059 suid=74 rport=42216 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=USER_AUTH msg=audit(1398701056.183:2510): user pid=10058 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=ssh res=success'
>type=CRED_ACQ msg=audit(1398701056.183:2511): user pid=10058 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=LOGIN msg=audit(1398701056.183:2512): pid=10058 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=101
>type=USER_ROLE_CHANGE msg=audit(1398701056.289:2513): user pid=10058 uid=0 auid=0 ses=101 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_START msg=audit(1398701056.293:2514): user pid=10058 uid=0 auid=0 ses=101 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_LOGIN msg=audit(1398701056.295:2515): user pid=10058 uid=0 auid=0 ses=101 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_START msg=audit(1398701056.296:2516): user pid=10058 uid=0 auid=0 ses=101 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701056.299:2517): user pid=10061 uid=0 auid=0 ses=101 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=10061 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701056.299:2518): user pid=10061 uid=0 auid=0 ses=101 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=10061 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRED_REFR msg=audit(1398701056.300:2519): user pid=10061 uid=0 auid=0 ses=101 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_END msg=audit(1398701056.365:2520): user pid=10058 uid=0 auid=0 ses=101 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=CRED_DISP msg=audit(1398701056.366:2521): user pid=10058 uid=0 auid=0 ses=101 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_END msg=audit(1398701056.366:2522): user pid=10058 uid=0 auid=0 ses=101 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_LOGOUT msg=audit(1398701056.367:2523): user pid=10058 uid=0 auid=0 ses=101 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701056.367:2524): user pid=10058 uid=0 auid=0 ses=101 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=10058 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701056.367:2525): user pid=10058 uid=0 auid=0 ses=101 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=10058 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701056.367:2526): user pid=10058 uid=0 auid=0 ses=101 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=10058 suid=0 rport=42216 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701056.395:2527): user pid=10067 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=10067 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701056.395:2528): user pid=10067 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=10067 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_SESSION msg=audit(1398701056.395:2529): user pid=10066 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 spid=10067 suid=74 rport=42217 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_SESSION msg=audit(1398701056.395:2530): user pid=10066 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 spid=10067 suid=74 rport=42217 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=USER_AUTH msg=audit(1398701056.465:2531): user pid=10066 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=42217 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=USER_AUTH msg=audit(1398701056.465:2532): user pid=10066 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=8b:2d:a5:06:3e:34:8a:e0:bf:ca:69:94:eb:59:f0:19 rport=42217 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=USER_ACCT msg=audit(1398701056.473:2533): user pid=10066 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701056.473:2534): user pid=10066 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=10067 suid=74 rport=42217 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=USER_AUTH msg=audit(1398701056.474:2535): user pid=10066 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=ssh res=success'
>type=CRED_ACQ msg=audit(1398701056.474:2536): user pid=10066 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=LOGIN msg=audit(1398701056.474:2537): pid=10066 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=102
>type=USER_ROLE_CHANGE msg=audit(1398701056.590:2538): user pid=10066 uid=0 auid=0 ses=102 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_START msg=audit(1398701056.595:2539): user pid=10066 uid=0 auid=0 ses=102 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_LOGIN msg=audit(1398701056.597:2540): user pid=10066 uid=0 auid=0 ses=102 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_START msg=audit(1398701056.598:2541): user pid=10066 uid=0 auid=0 ses=102 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701056.599:2542): user pid=10073 uid=0 auid=0 ses=102 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=10073 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701056.599:2543): user pid=10073 uid=0 auid=0 ses=102 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=10073 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRED_REFR msg=audit(1398701056.600:2544): user pid=10073 uid=0 auid=0 ses=102 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_END msg=audit(1398701056.768:2545): user pid=10066 uid=0 auid=0 ses=102 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=CRED_DISP msg=audit(1398701056.768:2546): user pid=10066 uid=0 auid=0 ses=102 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_END msg=audit(1398701056.769:2547): user pid=10066 uid=0 auid=0 ses=102 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_LOGOUT msg=audit(1398701056.769:2548): user pid=10066 uid=0 auid=0 ses=102 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701056.769:2549): user pid=10066 uid=0 auid=0 ses=102 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=10066 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701056.770:2550): user pid=10066 uid=0 auid=0 ses=102 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=10066 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701056.770:2551): user pid=10066 uid=0 auid=0 ses=102 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=10066 suid=0 rport=42217 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701056.791:2552): user pid=10079 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=10079 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701056.791:2553): user pid=10079 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=10079 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_SESSION msg=audit(1398701056.791:2554): user pid=10078 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 spid=10079 suid=74 rport=42218 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_SESSION msg=audit(1398701056.791:2555): user pid=10078 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 spid=10079 suid=74 rport=42218 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=USER_AUTH msg=audit(1398701056.852:2556): user pid=10078 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=42218 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=USER_AUTH msg=audit(1398701056.852:2557): user pid=10078 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=8b:2d:a5:06:3e:34:8a:e0:bf:ca:69:94:eb:59:f0:19 rport=42218 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=USER_ACCT msg=audit(1398701056.858:2558): user pid=10078 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701056.859:2559): user pid=10078 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=10079 suid=74 rport=42218 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=USER_AUTH msg=audit(1398701056.859:2560): user pid=10078 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=ssh res=success'
>type=CRED_ACQ msg=audit(1398701056.860:2561): user pid=10078 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=LOGIN msg=audit(1398701056.860:2562): pid=10078 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=103
>type=USER_ROLE_CHANGE msg=audit(1398701056.962:2563): user pid=10078 uid=0 auid=0 ses=103 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_START msg=audit(1398701056.967:2564): user pid=10078 uid=0 auid=0 ses=103 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_LOGIN msg=audit(1398701056.973:2565): user pid=10078 uid=0 auid=0 ses=103 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_START msg=audit(1398701056.974:2566): user pid=10078 uid=0 auid=0 ses=103 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701056.977:2567): user pid=10085 uid=0 auid=0 ses=103 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=10085 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701056.977:2568): user pid=10085 uid=0 auid=0 ses=103 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=10085 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRED_REFR msg=audit(1398701056.978:2569): user pid=10085 uid=0 auid=0 ses=103 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_END msg=audit(1398701057.030:2570): user pid=10078 uid=0 auid=0 ses=103 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=CRED_DISP msg=audit(1398701057.032:2571): user pid=10078 uid=0 auid=0 ses=103 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_END msg=audit(1398701057.033:2572): user pid=10078 uid=0 auid=0 ses=103 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_LOGOUT msg=audit(1398701057.033:2573): user pid=10078 uid=0 auid=0 ses=103 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701057.033:2574): user pid=10078 uid=0 auid=0 ses=103 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=10078 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701057.033:2575): user pid=10078 uid=0 auid=0 ses=103 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=10078 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701057.033:2576): user pid=10078 uid=0 auid=0 ses=103 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=10078 suid=0 rport=42218 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701057.055:2577): user pid=10093 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=10093 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701057.055:2578): user pid=10093 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=10093 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_SESSION msg=audit(1398701057.055:2579): user pid=10092 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 spid=10093 suid=74 rport=42220 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_SESSION msg=audit(1398701057.055:2580): user pid=10092 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 spid=10093 suid=74 rport=42220 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=USER_AUTH msg=audit(1398701057.122:2581): user pid=10092 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=42220 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=USER_AUTH msg=audit(1398701057.122:2582): user pid=10092 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=8b:2d:a5:06:3e:34:8a:e0:bf:ca:69:94:eb:59:f0:19 rport=42220 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=USER_ACCT msg=audit(1398701057.132:2583): user pid=10092 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701057.134:2584): user pid=10092 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=10093 suid=74 rport=42220 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=USER_AUTH msg=audit(1398701057.135:2585): user pid=10092 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=ssh res=success'
>type=CRED_ACQ msg=audit(1398701057.135:2586): user pid=10092 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=LOGIN msg=audit(1398701057.136:2587): pid=10092 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=104
>type=USER_ROLE_CHANGE msg=audit(1398701057.244:2588): user pid=10092 uid=0 auid=0 ses=104 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_START msg=audit(1398701057.248:2589): user pid=10092 uid=0 auid=0 ses=104 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_LOGIN msg=audit(1398701057.251:2590): user pid=10092 uid=0 auid=0 ses=104 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_START msg=audit(1398701057.252:2591): user pid=10092 uid=0 auid=0 ses=104 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701057.254:2592): user pid=10095 uid=0 auid=0 ses=104 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=10095 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701057.256:2593): user pid=10095 uid=0 auid=0 ses=104 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=10095 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRED_REFR msg=audit(1398701057.257:2594): user pid=10095 uid=0 auid=0 ses=104 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_END msg=audit(1398701057.303:2595): user pid=10092 uid=0 auid=0 ses=104 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=CRED_DISP msg=audit(1398701057.304:2596): user pid=10092 uid=0 auid=0 ses=104 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_END msg=audit(1398701057.304:2597): user pid=10092 uid=0 auid=0 ses=104 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_LOGOUT msg=audit(1398701057.305:2598): user pid=10092 uid=0 auid=0 ses=104 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701057.305:2599): user pid=10092 uid=0 auid=0 ses=104 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=10092 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701057.305:2600): user pid=10092 uid=0 auid=0 ses=104 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=10092 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701057.305:2601): user pid=10092 uid=0 auid=0 ses=104 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=10092 suid=0 rport=42220 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701057.317:2602): user pid=10102 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=10102 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701057.317:2603): user pid=10102 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=10102 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_SESSION msg=audit(1398701057.318:2604): user pid=10101 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 spid=10102 suid=74 rport=42225 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_SESSION msg=audit(1398701057.318:2605): user pid=10101 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 spid=10102 suid=74 rport=42225 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=USER_AUTH msg=audit(1398701057.385:2606): user pid=10101 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=42225 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=USER_AUTH msg=audit(1398701057.385:2607): user pid=10101 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=8b:2d:a5:06:3e:34:8a:e0:bf:ca:69:94:eb:59:f0:19 rport=42225 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=USER_ACCT msg=audit(1398701057.391:2608): user pid=10101 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701057.391:2609): user pid=10101 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=10102 suid=74 rport=42225 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=USER_AUTH msg=audit(1398701057.392:2610): user pid=10101 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=ssh res=success'
>type=CRED_ACQ msg=audit(1398701057.393:2611): user pid=10101 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=LOGIN msg=audit(1398701057.393:2612): pid=10101 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=105
>type=USER_ROLE_CHANGE msg=audit(1398701057.510:2613): user pid=10101 uid=0 auid=0 ses=105 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_START msg=audit(1398701057.514:2614): user pid=10101 uid=0 auid=0 ses=105 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_LOGIN msg=audit(1398701057.516:2615): user pid=10101 uid=0 auid=0 ses=105 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_START msg=audit(1398701057.516:2616): user pid=10101 uid=0 auid=0 ses=105 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701057.520:2617): user pid=10104 uid=0 auid=0 ses=105 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=10104 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701057.520:2618): user pid=10104 uid=0 auid=0 ses=105 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=10104 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRED_REFR msg=audit(1398701057.521:2619): user pid=10104 uid=0 auid=0 ses=105 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_END msg=audit(1398701057.579:2620): user pid=10101 uid=0 auid=0 ses=105 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=CRED_DISP msg=audit(1398701057.580:2621): user pid=10101 uid=0 auid=0 ses=105 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_END msg=audit(1398701057.581:2622): user pid=10101 uid=0 auid=0 ses=105 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_LOGOUT msg=audit(1398701057.581:2623): user pid=10101 uid=0 auid=0 ses=105 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701057.581:2624): user pid=10101 uid=0 auid=0 ses=105 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=10101 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701057.581:2625): user pid=10101 uid=0 auid=0 ses=105 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=10101 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701057.581:2626): user pid=10101 uid=0 auid=0 ses=105 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=10101 suid=0 rport=42225 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701057.595:2627): user pid=10111 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=10111 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701057.595:2628): user pid=10111 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=10111 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_SESSION msg=audit(1398701057.595:2629): user pid=10110 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 spid=10111 suid=74 rport=42226 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_SESSION msg=audit(1398701057.595:2630): user pid=10110 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 spid=10111 suid=74 rport=42226 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=USER_AUTH msg=audit(1398701057.660:2631): user pid=10110 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=42226 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=USER_AUTH msg=audit(1398701057.660:2632): user pid=10110 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=8b:2d:a5:06:3e:34:8a:e0:bf:ca:69:94:eb:59:f0:19 rport=42226 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=USER_ACCT msg=audit(1398701057.668:2633): user pid=10110 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701057.669:2634): user pid=10110 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=10111 suid=74 rport=42226 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=USER_AUTH msg=audit(1398701057.669:2635): user pid=10110 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=ssh res=success'
>type=CRED_ACQ msg=audit(1398701057.670:2636): user pid=10110 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=LOGIN msg=audit(1398701057.670:2637): pid=10110 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=106
>type=USER_ROLE_CHANGE msg=audit(1398701057.781:2638): user pid=10110 uid=0 auid=0 ses=106 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_START msg=audit(1398701057.785:2639): user pid=10110 uid=0 auid=0 ses=106 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_LOGIN msg=audit(1398701057.786:2640): user pid=10110 uid=0 auid=0 ses=106 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_START msg=audit(1398701057.787:2641): user pid=10110 uid=0 auid=0 ses=106 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701057.789:2642): user pid=10113 uid=0 auid=0 ses=106 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=10113 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701057.789:2643): user pid=10113 uid=0 auid=0 ses=106 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=10113 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRED_REFR msg=audit(1398701057.790:2644): user pid=10113 uid=0 auid=0 ses=106 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_END msg=audit(1398701057.839:2645): user pid=10110 uid=0 auid=0 ses=106 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=CRED_DISP msg=audit(1398701057.840:2646): user pid=10110 uid=0 auid=0 ses=106 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_END msg=audit(1398701057.840:2647): user pid=10110 uid=0 auid=0 ses=106 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_LOGOUT msg=audit(1398701057.842:2648): user pid=10110 uid=0 auid=0 ses=106 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701057.842:2649): user pid=10110 uid=0 auid=0 ses=106 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=10110 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701057.842:2650): user pid=10110 uid=0 auid=0 ses=106 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=10110 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701057.842:2651): user pid=10110 uid=0 auid=0 ses=106 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=10110 suid=0 rport=42226 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701057.856:2652): user pid=10119 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=10119 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701057.856:2653): user pid=10119 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=10119 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_SESSION msg=audit(1398701057.856:2654): user pid=10118 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 spid=10119 suid=74 rport=42227 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_SESSION msg=audit(1398701057.856:2655): user pid=10118 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 spid=10119 suid=74 rport=42227 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=USER_AUTH msg=audit(1398701057.924:2656): user pid=10118 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=42227 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=USER_AUTH msg=audit(1398701057.924:2657): user pid=10118 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=8b:2d:a5:06:3e:34:8a:e0:bf:ca:69:94:eb:59:f0:19 rport=42227 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=USER_ACCT msg=audit(1398701057.933:2658): user pid=10118 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701057.933:2659): user pid=10118 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=10119 suid=74 rport=42227 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=USER_AUTH msg=audit(1398701057.934:2660): user pid=10118 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=ssh res=success'
>type=CRED_ACQ msg=audit(1398701057.935:2661): user pid=10118 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=LOGIN msg=audit(1398701057.935:2662): pid=10118 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=107
>type=USER_ROLE_CHANGE msg=audit(1398701058.044:2663): user pid=10118 uid=0 auid=0 ses=107 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_START msg=audit(1398701058.049:2664): user pid=10118 uid=0 auid=0 ses=107 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_LOGIN msg=audit(1398701058.058:2665): user pid=10118 uid=0 auid=0 ses=107 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_START msg=audit(1398701058.058:2666): user pid=10118 uid=0 auid=0 ses=107 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701058.062:2667): user pid=10130 uid=0 auid=0 ses=107 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=10130 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701058.062:2668): user pid=10130 uid=0 auid=0 ses=107 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=10130 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRED_REFR msg=audit(1398701058.063:2669): user pid=10130 uid=0 auid=0 ses=107 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_END msg=audit(1398701058.112:2670): user pid=10118 uid=0 auid=0 ses=107 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=CRED_DISP msg=audit(1398701058.113:2671): user pid=10118 uid=0 auid=0 ses=107 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_END msg=audit(1398701058.114:2672): user pid=10118 uid=0 auid=0 ses=107 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_LOGOUT msg=audit(1398701058.114:2673): user pid=10118 uid=0 auid=0 ses=107 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701058.114:2674): user pid=10118 uid=0 auid=0 ses=107 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=10118 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701058.114:2675): user pid=10118 uid=0 auid=0 ses=107 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=10118 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701058.114:2676): user pid=10118 uid=0 auid=0 ses=107 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=10118 suid=0 rport=42227 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701058.130:2677): user pid=10139 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=10139 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701058.130:2678): user pid=10139 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=10139 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_SESSION msg=audit(1398701058.131:2679): user pid=10138 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 spid=10139 suid=74 rport=42228 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_SESSION msg=audit(1398701058.131:2680): user pid=10138 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 spid=10139 suid=74 rport=42228 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=USER_AUTH msg=audit(1398701058.192:2681): user pid=10138 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=42228 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=USER_AUTH msg=audit(1398701058.192:2682): user pid=10138 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=8b:2d:a5:06:3e:34:8a:e0:bf:ca:69:94:eb:59:f0:19 rport=42228 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=USER_ACCT msg=audit(1398701058.201:2683): user pid=10138 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701058.202:2684): user pid=10138 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=10139 suid=74 rport=42228 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=USER_AUTH msg=audit(1398701058.203:2685): user pid=10138 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=ssh res=success'
>type=CRED_ACQ msg=audit(1398701058.203:2686): user pid=10138 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=LOGIN msg=audit(1398701058.204:2687): pid=10138 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=108
>type=USER_START msg=audit(1398701058.240:2688): user pid=10148 uid=0 auid=0 ses=81 subj=unconfined_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="glance" exe="/sbin/runuser" hostname=? addr=? terminal=? res=success'
>type=CRED_ACQ msg=audit(1398701058.240:2689): user pid=10148 uid=0 auid=0 ses=81 subj=unconfined_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="glance" exe="/sbin/runuser" hostname=? addr=? terminal=? res=success'
>type=CRED_DISP msg=audit(1398701058.244:2690): user pid=10148 uid=0 auid=0 ses=81 subj=unconfined_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="glance" exe="/sbin/runuser" hostname=? addr=? terminal=? res=success'
>type=USER_END msg=audit(1398701058.244:2691): user pid=10148 uid=0 auid=0 ses=81 subj=unconfined_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="glance" exe="/sbin/runuser" hostname=? addr=? terminal=? res=success'
>type=USER_ROLE_CHANGE msg=audit(1398701058.365:2692): user pid=10138 uid=0 auid=0 ses=108 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_START msg=audit(1398701058.374:2693): user pid=10138 uid=0 auid=0 ses=108 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_LOGIN msg=audit(1398701058.383:2694): user pid=10138 uid=0 auid=0 ses=108 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_START msg=audit(1398701058.383:2695): user pid=10138 uid=0 auid=0 ses=108 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701058.393:2696): user pid=10153 uid=0 auid=0 ses=108 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=10153 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701058.393:2697): user pid=10153 uid=0 auid=0 ses=108 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=10153 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRED_REFR msg=audit(1398701058.398:2698): user pid=10153 uid=0 auid=0 ses=108 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_END msg=audit(1398701058.467:2699): user pid=10138 uid=0 auid=0 ses=108 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=CRED_DISP msg=audit(1398701058.467:2700): user pid=10138 uid=0 auid=0 ses=108 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_END msg=audit(1398701058.468:2701): user pid=10138 uid=0 auid=0 ses=108 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_LOGOUT msg=audit(1398701058.468:2702): user pid=10138 uid=0 auid=0 ses=108 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701058.468:2703): user pid=10138 uid=0 auid=0 ses=108 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=10138 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701058.468:2704): user pid=10138 uid=0 auid=0 ses=108 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=10138 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701058.468:2705): user pid=10138 uid=0 auid=0 ses=108 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=10138 suid=0 rport=42228 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701058.484:2706): user pid=10161 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=10161 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701058.484:2707): user pid=10161 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=10161 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_SESSION msg=audit(1398701058.486:2708): user pid=10160 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 spid=10161 suid=74 rport=42229 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_SESSION msg=audit(1398701058.486:2709): user pid=10160 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 spid=10161 suid=74 rport=42229 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=USER_AUTH msg=audit(1398701058.552:2710): user pid=10160 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=42229 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=USER_AUTH msg=audit(1398701058.552:2711): user pid=10160 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=8b:2d:a5:06:3e:34:8a:e0:bf:ca:69:94:eb:59:f0:19 rport=42229 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=USER_ACCT msg=audit(1398701058.573:2712): user pid=10160 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701058.573:2713): user pid=10160 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=10161 suid=74 rport=42229 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=USER_AUTH msg=audit(1398701058.574:2714): user pid=10160 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=ssh res=success'
>type=CRED_ACQ msg=audit(1398701058.574:2715): user pid=10160 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=LOGIN msg=audit(1398701058.575:2716): pid=10160 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=109
>type=USER_ROLE_CHANGE msg=audit(1398701058.702:2717): user pid=10160 uid=0 auid=0 ses=109 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_START msg=audit(1398701058.713:2718): user pid=10160 uid=0 auid=0 ses=109 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_LOGIN msg=audit(1398701058.728:2719): user pid=10160 uid=0 auid=0 ses=109 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_START msg=audit(1398701058.728:2720): user pid=10160 uid=0 auid=0 ses=109 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701058.735:2721): user pid=10168 uid=0 auid=0 ses=109 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=10168 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701058.735:2722): user pid=10168 uid=0 auid=0 ses=109 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=10168 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRED_REFR msg=audit(1398701058.740:2723): user pid=10168 uid=0 auid=0 ses=109 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_END msg=audit(1398701058.838:2724): user pid=10160 uid=0 auid=0 ses=109 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_LOGOUT msg=audit(1398701058.838:2725): user pid=10160 uid=0 auid=0 ses=109 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_END msg=audit(1398701058.839:2726): user pid=10160 uid=0 auid=0 ses=109 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=CRED_DISP msg=audit(1398701058.839:2727): user pid=10160 uid=0 auid=0 ses=109 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701058.839:2728): user pid=10160 uid=0 auid=0 ses=109 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=10160 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701058.839:2729): user pid=10160 uid=0 auid=0 ses=109 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=10160 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701058.839:2730): user pid=10160 uid=0 auid=0 ses=109 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=10160 suid=0 rport=42229 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701058.863:2731): user pid=10176 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=10176 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701058.870:2732): user pid=10176 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=10176 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_SESSION msg=audit(1398701058.870:2733): user pid=10174 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 spid=10176 suid=74 rport=42230 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_SESSION msg=audit(1398701058.870:2734): user pid=10174 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 spid=10176 suid=74 rport=42230 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=USER_AUTH msg=audit(1398701058.944:2735): user pid=10174 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=42230 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=USER_AUTH msg=audit(1398701058.945:2736): user pid=10174 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=8b:2d:a5:06:3e:34:8a:e0:bf:ca:69:94:eb:59:f0:19 rport=42230 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=USER_ACCT msg=audit(1398701058.953:2737): user pid=10174 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701058.953:2738): user pid=10174 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=10176 suid=74 rport=42230 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=USER_AUTH msg=audit(1398701058.954:2739): user pid=10174 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=ssh res=success'
>type=CRED_ACQ msg=audit(1398701058.954:2740): user pid=10174 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=LOGIN msg=audit(1398701058.954:2741): pid=10174 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=110
>type=USER_ROLE_CHANGE msg=audit(1398701059.071:2742): user pid=10174 uid=0 auid=0 ses=110 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_START msg=audit(1398701059.077:2743): user pid=10174 uid=0 auid=0 ses=110 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_LOGIN msg=audit(1398701059.086:2744): user pid=10174 uid=0 auid=0 ses=110 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_START msg=audit(1398701059.086:2745): user pid=10174 uid=0 auid=0 ses=110 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701059.088:2746): user pid=10188 uid=0 auid=0 ses=110 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=10188 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701059.088:2747): user pid=10188 uid=0 auid=0 ses=110 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=10188 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRED_REFR msg=audit(1398701059.089:2748): user pid=10188 uid=0 auid=0 ses=110 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_END msg=audit(1398701059.127:2749): user pid=10174 uid=0 auid=0 ses=110 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=CRED_DISP msg=audit(1398701059.128:2750): user pid=10174 uid=0 auid=0 ses=110 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_END msg=audit(1398701059.128:2751): user pid=10174 uid=0 auid=0 ses=110 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_LOGOUT msg=audit(1398701059.129:2752): user pid=10174 uid=0 auid=0 ses=110 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701059.129:2753): user pid=10174 uid=0 auid=0 ses=110 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=10174 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701059.129:2754): user pid=10174 uid=0 auid=0 ses=110 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=10174 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701059.129:2755): user pid=10174 uid=0 auid=0 ses=110 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=10174 suid=0 rport=42230 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=USER_START msg=audit(1398701059.158:2756): user pid=10201 uid=0 auid=0 ses=81 subj=unconfined_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="glance" exe="/sbin/runuser" hostname=? addr=? terminal=? res=success'
>type=CRED_ACQ msg=audit(1398701059.159:2757): user pid=10201 uid=0 auid=0 ses=81 subj=unconfined_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="glance" exe="/sbin/runuser" hostname=? addr=? terminal=? res=success'
>type=CRED_DISP msg=audit(1398701059.161:2758): user pid=10201 uid=0 auid=0 ses=81 subj=unconfined_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="glance" exe="/sbin/runuser" hostname=? addr=? terminal=? res=success'
>type=USER_END msg=audit(1398701059.161:2759): user pid=10201 uid=0 auid=0 ses=81 subj=unconfined_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="glance" exe="/sbin/runuser" hostname=? addr=? terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701059.178:2760): user pid=10208 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=10208 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701059.178:2761): user pid=10208 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=10208 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_SESSION msg=audit(1398701059.178:2762): user pid=10206 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 spid=10208 suid=74 rport=42231 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_SESSION msg=audit(1398701059.178:2763): user pid=10206 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 spid=10208 suid=74 rport=42231 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=USER_AUTH msg=audit(1398701059.232:2764): user pid=10206 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=42231 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=USER_AUTH msg=audit(1398701059.232:2765): user pid=10206 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=8b:2d:a5:06:3e:34:8a:e0:bf:ca:69:94:eb:59:f0:19 rport=42231 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=USER_ACCT msg=audit(1398701059.253:2766): user pid=10206 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701059.259:2767): user pid=10206 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=10208 suid=74 rport=42231 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=USER_AUTH msg=audit(1398701059.260:2768): user pid=10206 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=ssh res=success'
>type=CRED_ACQ msg=audit(1398701059.260:2769): user pid=10206 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=LOGIN msg=audit(1398701059.260:2770): pid=10206 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=111
>type=USER_ROLE_CHANGE msg=audit(1398701059.461:2771): user pid=10206 uid=0 auid=0 ses=111 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_START msg=audit(1398701059.471:2772): user pid=10206 uid=0 auid=0 ses=111 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_LOGIN msg=audit(1398701059.479:2773): user pid=10206 uid=0 auid=0 ses=111 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_START msg=audit(1398701059.479:2774): user pid=10206 uid=0 auid=0 ses=111 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701059.483:2775): user pid=10212 uid=0 auid=0 ses=111 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=10212 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701059.483:2776): user pid=10212 uid=0 auid=0 ses=111 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=10212 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRED_REFR msg=audit(1398701059.485:2777): user pid=10212 uid=0 auid=0 ses=111 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_END msg=audit(1398701059.647:2778): user pid=10206 uid=0 auid=0 ses=111 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=CRED_DISP msg=audit(1398701059.648:2779): user pid=10206 uid=0 auid=0 ses=111 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_END msg=audit(1398701059.648:2780): user pid=10206 uid=0 auid=0 ses=111 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_LOGOUT msg=audit(1398701059.649:2781): user pid=10206 uid=0 auid=0 ses=111 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701059.649:2782): user pid=10206 uid=0 auid=0 ses=111 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=10206 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701059.649:2783): user pid=10206 uid=0 auid=0 ses=111 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=10206 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701059.649:2784): user pid=10206 uid=0 auid=0 ses=111 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=10206 suid=0 rport=42231 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701059.670:2785): user pid=10223 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=10223 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701059.670:2786): user pid=10223 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=10223 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_SESSION msg=audit(1398701059.670:2787): user pid=10222 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 spid=10223 suid=74 rport=42232 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_SESSION msg=audit(1398701059.671:2788): user pid=10222 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 spid=10223 suid=74 rport=42232 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=USER_AUTH msg=audit(1398701059.737:2789): user pid=10222 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=42232 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=USER_AUTH msg=audit(1398701059.737:2790): user pid=10222 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=8b:2d:a5:06:3e:34:8a:e0:bf:ca:69:94:eb:59:f0:19 rport=42232 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=USER_ACCT msg=audit(1398701059.765:2791): user pid=10222 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701059.767:2792): user pid=10222 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=10223 suid=74 rport=42232 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=USER_AUTH msg=audit(1398701059.768:2793): user pid=10222 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=ssh res=success'
>type=CRED_ACQ msg=audit(1398701059.768:2794): user pid=10222 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=LOGIN msg=audit(1398701059.768:2795): pid=10222 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=112
>type=USER_ROLE_CHANGE msg=audit(1398701059.998:2796): user pid=10222 uid=0 auid=0 ses=112 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_START msg=audit(1398701060.008:2797): user pid=10222 uid=0 auid=0 ses=112 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_LOGIN msg=audit(1398701060.020:2798): user pid=10222 uid=0 auid=0 ses=112 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_START msg=audit(1398701060.021:2799): user pid=10222 uid=0 auid=0 ses=112 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701060.026:2800): user pid=10238 uid=0 auid=0 ses=112 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=10238 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701060.026:2801): user pid=10238 uid=0 auid=0 ses=112 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=10238 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRED_REFR msg=audit(1398701060.029:2802): user pid=10238 uid=0 auid=0 ses=112 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_END msg=audit(1398701060.378:2803): user pid=10222 uid=0 auid=0 ses=112 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=CRED_DISP msg=audit(1398701060.378:2804): user pid=10222 uid=0 auid=0 ses=112 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_END msg=audit(1398701060.379:2805): user pid=10222 uid=0 auid=0 ses=112 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_LOGOUT msg=audit(1398701060.379:2806): user pid=10222 uid=0 auid=0 ses=112 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701060.379:2807): user pid=10222 uid=0 auid=0 ses=112 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=10222 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701060.380:2808): user pid=10222 uid=0 auid=0 ses=112 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=10222 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701060.380:2809): user pid=10222 uid=0 auid=0 ses=112 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=10222 suid=0 rport=42232 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701060.444:2810): user pid=10248 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=10248 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701060.444:2811): user pid=10248 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=10248 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_SESSION msg=audit(1398701060.444:2812): user pid=10247 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 spid=10248 suid=74 rport=42233 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_SESSION msg=audit(1398701060.444:2813): user pid=10247 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 spid=10248 suid=74 rport=42233 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=USER_AUTH msg=audit(1398701060.503:2814): user pid=10247 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=42233 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=USER_AUTH msg=audit(1398701060.503:2815): user pid=10247 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=8b:2d:a5:06:3e:34:8a:e0:bf:ca:69:94:eb:59:f0:19 rport=42233 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=USER_ACCT msg=audit(1398701060.510:2816): user pid=10247 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701060.510:2817): user pid=10247 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=10248 suid=74 rport=42233 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=USER_AUTH msg=audit(1398701060.511:2818): user pid=10247 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=ssh res=success'
>type=CRED_ACQ msg=audit(1398701060.511:2819): user pid=10247 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=LOGIN msg=audit(1398701060.511:2820): pid=10247 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=113
>type=USER_ROLE_CHANGE msg=audit(1398701060.611:2821): user pid=10247 uid=0 auid=0 ses=113 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_START msg=audit(1398701060.614:2822): user pid=10247 uid=0 auid=0 ses=113 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_LOGIN msg=audit(1398701060.621:2823): user pid=10247 uid=0 auid=0 ses=113 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_START msg=audit(1398701060.621:2824): user pid=10247 uid=0 auid=0 ses=113 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701060.622:2825): user pid=10250 uid=0 auid=0 ses=113 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=10250 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701060.622:2826): user pid=10250 uid=0 auid=0 ses=113 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=10250 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRED_REFR msg=audit(1398701060.623:2827): user pid=10250 uid=0 auid=0 ses=113 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_END msg=audit(1398701062.095:2828): user pid=10247 uid=0 auid=0 ses=113 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=CRED_DISP msg=audit(1398701062.099:2829): user pid=10247 uid=0 auid=0 ses=113 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_END msg=audit(1398701062.100:2830): user pid=10247 uid=0 auid=0 ses=113 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_LOGOUT msg=audit(1398701062.100:2831): user pid=10247 uid=0 auid=0 ses=113 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701062.100:2832): user pid=10247 uid=0 auid=0 ses=113 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=10247 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701062.100:2833): user pid=10247 uid=0 auid=0 ses=113 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=10247 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701062.101:2834): user pid=10247 uid=0 auid=0 ses=113 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=10247 suid=0 rport=42233 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701062.109:2835): user pid=10259 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=10259 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701062.109:2836): user pid=10259 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=10259 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_SESSION msg=audit(1398701062.109:2837): user pid=10258 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 spid=10259 suid=74 rport=42234 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_SESSION msg=audit(1398701062.109:2838): user pid=10258 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 spid=10259 suid=74 rport=42234 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=USER_AUTH msg=audit(1398701062.169:2839): user pid=10258 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=42234 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=USER_AUTH msg=audit(1398701062.169:2840): user pid=10258 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=8b:2d:a5:06:3e:34:8a:e0:bf:ca:69:94:eb:59:f0:19 rport=42234 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=USER_ACCT msg=audit(1398701062.176:2841): user pid=10258 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701062.176:2842): user pid=10258 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=10259 suid=74 rport=42234 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=USER_AUTH msg=audit(1398701062.177:2843): user pid=10258 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=ssh res=success'
>type=CRED_ACQ msg=audit(1398701062.177:2844): user pid=10258 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=LOGIN msg=audit(1398701062.178:2845): pid=10258 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=114
>type=USER_ROLE_CHANGE msg=audit(1398701062.281:2846): user pid=10258 uid=0 auid=0 ses=114 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_START msg=audit(1398701062.284:2847): user pid=10258 uid=0 auid=0 ses=114 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_LOGIN msg=audit(1398701062.290:2848): user pid=10258 uid=0 auid=0 ses=114 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_START msg=audit(1398701062.291:2849): user pid=10258 uid=0 auid=0 ses=114 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701062.292:2850): user pid=10261 uid=0 auid=0 ses=114 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=10261 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701062.292:2851): user pid=10261 uid=0 auid=0 ses=114 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=10261 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRED_REFR msg=audit(1398701062.294:2852): user pid=10261 uid=0 auid=0 ses=114 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_END msg=audit(1398701062.413:2853): user pid=10258 uid=0 auid=0 ses=114 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=CRED_DISP msg=audit(1398701062.414:2854): user pid=10258 uid=0 auid=0 ses=114 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_END msg=audit(1398701062.414:2855): user pid=10258 uid=0 auid=0 ses=114 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_LOGOUT msg=audit(1398701062.415:2856): user pid=10258 uid=0 auid=0 ses=114 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701062.415:2857): user pid=10258 uid=0 auid=0 ses=114 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=10258 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701062.415:2858): user pid=10258 uid=0 auid=0 ses=114 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=10258 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701062.415:2859): user pid=10258 uid=0 auid=0 ses=114 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=10258 suid=0 rport=42234 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701062.441:2860): user pid=10273 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=10273 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701062.441:2861): user pid=10273 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=10273 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_SESSION msg=audit(1398701062.441:2862): user pid=10272 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 spid=10273 suid=74 rport=42235 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_SESSION msg=audit(1398701062.441:2863): user pid=10272 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 spid=10273 suid=74 rport=42235 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=USER_AUTH msg=audit(1398701062.500:2864): user pid=10272 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=42235 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=USER_AUTH msg=audit(1398701062.500:2865): user pid=10272 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=8b:2d:a5:06:3e:34:8a:e0:bf:ca:69:94:eb:59:f0:19 rport=42235 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=USER_ACCT msg=audit(1398701062.506:2866): user pid=10272 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701062.507:2867): user pid=10272 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=10273 suid=74 rport=42235 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=USER_AUTH msg=audit(1398701062.508:2868): user pid=10272 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=ssh res=success'
>type=CRED_ACQ msg=audit(1398701062.508:2869): user pid=10272 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=LOGIN msg=audit(1398701062.508:2870): pid=10272 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=115
>type=USER_ROLE_CHANGE msg=audit(1398701062.606:2871): user pid=10272 uid=0 auid=0 ses=115 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_START msg=audit(1398701062.611:2872): user pid=10272 uid=0 auid=0 ses=115 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_LOGIN msg=audit(1398701062.619:2873): user pid=10272 uid=0 auid=0 ses=115 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_START msg=audit(1398701062.619:2874): user pid=10272 uid=0 auid=0 ses=115 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701062.620:2875): user pid=10275 uid=0 auid=0 ses=115 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=10275 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701062.620:2876): user pid=10275 uid=0 auid=0 ses=115 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=10275 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRED_REFR msg=audit(1398701062.622:2877): user pid=10275 uid=0 auid=0 ses=115 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_END msg=audit(1398701062.672:2878): user pid=10272 uid=0 auid=0 ses=115 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=CRED_DISP msg=audit(1398701062.673:2879): user pid=10272 uid=0 auid=0 ses=115 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_END msg=audit(1398701062.673:2880): user pid=10272 uid=0 auid=0 ses=115 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_LOGOUT msg=audit(1398701062.674:2881): user pid=10272 uid=0 auid=0 ses=115 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701062.674:2882): user pid=10272 uid=0 auid=0 ses=115 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=10272 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701062.674:2883): user pid=10272 uid=0 auid=0 ses=115 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=10272 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701062.674:2884): user pid=10272 uid=0 auid=0 ses=115 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=10272 suid=0 rport=42235 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701062.692:2885): user pid=10284 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=10284 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701062.693:2886): user pid=10284 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=10284 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_SESSION msg=audit(1398701062.693:2887): user pid=10283 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 spid=10284 suid=74 rport=42236 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_SESSION msg=audit(1398701062.693:2888): user pid=10283 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 spid=10284 suid=74 rport=42236 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=USER_AUTH msg=audit(1398701062.755:2889): user pid=10283 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=42236 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=USER_AUTH msg=audit(1398701062.756:2890): user pid=10283 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=8b:2d:a5:06:3e:34:8a:e0:bf:ca:69:94:eb:59:f0:19 rport=42236 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=USER_ACCT msg=audit(1398701062.762:2891): user pid=10283 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701062.762:2892): user pid=10283 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=10284 suid=74 rport=42236 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=USER_AUTH msg=audit(1398701062.763:2893): user pid=10283 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=ssh res=success'
>type=CRED_ACQ msg=audit(1398701062.764:2894): user pid=10283 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=LOGIN msg=audit(1398701062.764:2895): pid=10283 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=116
>type=USER_ROLE_CHANGE msg=audit(1398701062.879:2896): user pid=10283 uid=0 auid=0 ses=116 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_START msg=audit(1398701062.886:2897): user pid=10283 uid=0 auid=0 ses=116 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_LOGIN msg=audit(1398701062.893:2898): user pid=10283 uid=0 auid=0 ses=116 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_START msg=audit(1398701062.893:2899): user pid=10283 uid=0 auid=0 ses=116 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701062.894:2900): user pid=10286 uid=0 auid=0 ses=116 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=10286 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701062.894:2901): user pid=10286 uid=0 auid=0 ses=116 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=10286 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRED_REFR msg=audit(1398701062.896:2902): user pid=10286 uid=0 auid=0 ses=116 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_END msg=audit(1398701063.100:2903): user pid=10283 uid=0 auid=0 ses=116 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=CRED_DISP msg=audit(1398701063.100:2904): user pid=10283 uid=0 auid=0 ses=116 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_END msg=audit(1398701063.101:2905): user pid=10283 uid=0 auid=0 ses=116 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_LOGOUT msg=audit(1398701063.101:2906): user pid=10283 uid=0 auid=0 ses=116 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701063.101:2907): user pid=10283 uid=0 auid=0 ses=116 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=10283 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701063.101:2908): user pid=10283 uid=0 auid=0 ses=116 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=10283 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701063.101:2909): user pid=10283 uid=0 auid=0 ses=116 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=10283 suid=0 rport=42236 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701063.122:2910): user pid=10293 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=10293 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701063.122:2911): user pid=10293 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=10293 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_SESSION msg=audit(1398701063.122:2912): user pid=10292 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 spid=10293 suid=74 rport=42237 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_SESSION msg=audit(1398701063.122:2913): user pid=10292 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 spid=10293 suid=74 rport=42237 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=USER_AUTH msg=audit(1398701063.181:2914): user pid=10292 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=42237 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=USER_AUTH msg=audit(1398701063.181:2915): user pid=10292 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=8b:2d:a5:06:3e:34:8a:e0:bf:ca:69:94:eb:59:f0:19 rport=42237 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=USER_ACCT msg=audit(1398701063.188:2916): user pid=10292 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701063.188:2917): user pid=10292 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=10293 suid=74 rport=42237 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=USER_AUTH msg=audit(1398701063.188:2918): user pid=10292 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=ssh res=success'
>type=CRED_ACQ msg=audit(1398701063.189:2919): user pid=10292 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=LOGIN msg=audit(1398701063.189:2920): pid=10292 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=117
>type=USER_ROLE_CHANGE msg=audit(1398701063.283:2921): user pid=10292 uid=0 auid=0 ses=117 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_START msg=audit(1398701063.287:2922): user pid=10292 uid=0 auid=0 ses=117 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_LOGIN msg=audit(1398701063.295:2923): user pid=10292 uid=0 auid=0 ses=117 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_START msg=audit(1398701063.295:2924): user pid=10292 uid=0 auid=0 ses=117 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701063.296:2925): user pid=10295 uid=0 auid=0 ses=117 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=10295 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701063.296:2926): user pid=10295 uid=0 auid=0 ses=117 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=10295 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRED_REFR msg=audit(1398701063.298:2927): user pid=10295 uid=0 auid=0 ses=117 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_END msg=audit(1398701063.343:2928): user pid=10292 uid=0 auid=0 ses=117 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=CRED_DISP msg=audit(1398701063.343:2929): user pid=10292 uid=0 auid=0 ses=117 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_END msg=audit(1398701063.344:2930): user pid=10292 uid=0 auid=0 ses=117 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_LOGOUT msg=audit(1398701063.344:2931): user pid=10292 uid=0 auid=0 ses=117 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701063.344:2932): user pid=10292 uid=0 auid=0 ses=117 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=10292 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701063.344:2933): user pid=10292 uid=0 auid=0 ses=117 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=10292 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701063.344:2934): user pid=10292 uid=0 auid=0 ses=117 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=10292 suid=0 rport=42237 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701063.368:2935): user pid=10307 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=10307 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701063.369:2936): user pid=10307 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=10307 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_SESSION msg=audit(1398701063.369:2937): user pid=10306 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 spid=10307 suid=74 rport=42238 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_SESSION msg=audit(1398701063.369:2938): user pid=10306 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 spid=10307 suid=74 rport=42238 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=USER_AUTH msg=audit(1398701063.436:2939): user pid=10306 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=42238 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=USER_AUTH msg=audit(1398701063.436:2940): user pid=10306 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=8b:2d:a5:06:3e:34:8a:e0:bf:ca:69:94:eb:59:f0:19 rport=42238 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=USER_ACCT msg=audit(1398701063.443:2941): user pid=10306 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701063.443:2942): user pid=10306 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=10307 suid=74 rport=42238 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=USER_AUTH msg=audit(1398701063.444:2943): user pid=10306 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=ssh res=success'
>type=CRED_ACQ msg=audit(1398701063.444:2944): user pid=10306 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=LOGIN msg=audit(1398701063.444:2945): pid=10306 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=118
>type=USER_ROLE_CHANGE msg=audit(1398701063.555:2946): user pid=10306 uid=0 auid=0 ses=118 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_START msg=audit(1398701063.560:2947): user pid=10306 uid=0 auid=0 ses=118 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_LOGIN msg=audit(1398701063.569:2948): user pid=10306 uid=0 auid=0 ses=118 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_START msg=audit(1398701063.569:2949): user pid=10306 uid=0 auid=0 ses=118 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701063.570:2950): user pid=10320 uid=0 auid=0 ses=118 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=10320 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701063.570:2951): user pid=10320 uid=0 auid=0 ses=118 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=10320 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRED_REFR msg=audit(1398701063.571:2952): user pid=10320 uid=0 auid=0 ses=118 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_END msg=audit(1398701063.624:2953): user pid=10306 uid=0 auid=0 ses=118 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=CRED_DISP msg=audit(1398701063.624:2954): user pid=10306 uid=0 auid=0 ses=118 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_END msg=audit(1398701063.625:2955): user pid=10306 uid=0 auid=0 ses=118 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_LOGOUT msg=audit(1398701063.625:2956): user pid=10306 uid=0 auid=0 ses=118 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701063.625:2957): user pid=10306 uid=0 auid=0 ses=118 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=10306 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701063.625:2958): user pid=10306 uid=0 auid=0 ses=118 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=10306 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701063.625:2959): user pid=10306 uid=0 auid=0 ses=118 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=10306 suid=0 rport=42238 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=NETFILTER_CFG msg=audit(1398701064.084:2960): table=filter family=2 entries=0
>type=SYSCALL msg=audit(1398701064.084:2960): arch=c000003e syscall=272 success=yes exit=0 a0=40000000 a1=c0 a2=0 a3=7fff8b375fb0 items=0 ppid=10494 pid=10501 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=117 comm="ip" exe="/sbin/ip" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null)
>type=NETFILTER_CFG msg=audit(1398701064.113:2961): table=filter family=2 entries=0
>type=SYSCALL msg=audit(1398701064.113:2961): arch=c000003e syscall=272 success=yes exit=0 a0=40000000 a1=c0 a2=0 a3=7ffff7db7560 items=0 ppid=10494 pid=10505 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=117 comm="ip" exe="/sbin/ip" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null)
>type=NETFILTER_CFG msg=audit(1398701064.443:2962): table=filter family=2 entries=0
>type=SYSCALL msg=audit(1398701064.443:2962): arch=c000003e syscall=272 success=yes exit=0 a0=40000000 a1=c0 a2=0 a3=7ffffefb7890 items=0 ppid=10494 pid=10507 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=117 comm="ip" exe="/sbin/ip" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null)
>type=NETFILTER_CFG msg=audit(1398701065.957:2963): table=filter family=2 entries=0
>type=SYSCALL msg=audit(1398701065.957:2963): arch=c000003e syscall=272 success=yes exit=0 a0=40000000 a1=c0 a2=0 a3=7fff0e4c9080 items=0 ppid=10802 pid=10809 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=117 comm="ip" exe="/sbin/ip" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null)
>type=NETFILTER_CFG msg=audit(1398701066.226:2964): table=filter family=2 entries=0
>type=SYSCALL msg=audit(1398701066.226:2964): arch=c000003e syscall=272 success=yes exit=0 a0=40000000 a1=c0 a2=0 a3=7fff7bab5140 items=0 ppid=10802 pid=10813 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=117 comm="ip" exe="/sbin/ip" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null)
>type=NETFILTER_CFG msg=audit(1398701066.552:2965): table=filter family=2 entries=0
>type=SYSCALL msg=audit(1398701066.552:2965): arch=c000003e syscall=272 success=yes exit=0 a0=40000000 a1=c0 a2=0 a3=7fff658aa970 items=0 ppid=10802 pid=10815 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=117 comm="ip" exe="/sbin/ip" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null)
>type=CRYPTO_KEY_USER msg=audit(1398701066.636:2966): user pid=10829 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=10829 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701066.637:2967): user pid=10829 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=10829 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_SESSION msg=audit(1398701066.637:2968): user pid=10828 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 spid=10829 suid=74 rport=42239 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_SESSION msg=audit(1398701066.637:2969): user pid=10828 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 spid=10829 suid=74 rport=42239 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=USER_AUTH msg=audit(1398701066.713:2970): user pid=10828 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=42239 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=USER_AUTH msg=audit(1398701066.713:2971): user pid=10828 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=8b:2d:a5:06:3e:34:8a:e0:bf:ca:69:94:eb:59:f0:19 rport=42239 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=USER_ACCT msg=audit(1398701066.720:2972): user pid=10828 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701066.720:2973): user pid=10828 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=10829 suid=74 rport=42239 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=USER_AUTH msg=audit(1398701066.721:2974): user pid=10828 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=ssh res=success'
>type=CRED_ACQ msg=audit(1398701066.721:2975): user pid=10828 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=LOGIN msg=audit(1398701066.722:2976): pid=10828 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=119
>type=USER_ROLE_CHANGE msg=audit(1398701066.840:2977): user pid=10828 uid=0 auid=0 ses=119 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_START msg=audit(1398701066.844:2978): user pid=10828 uid=0 auid=0 ses=119 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_LOGIN msg=audit(1398701066.851:2979): user pid=10828 uid=0 auid=0 ses=119 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_START msg=audit(1398701066.851:2980): user pid=10828 uid=0 auid=0 ses=119 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701066.853:2981): user pid=10883 uid=0 auid=0 ses=119 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=10883 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701066.853:2982): user pid=10883 uid=0 auid=0 ses=119 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=10883 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRED_REFR msg=audit(1398701066.854:2983): user pid=10883 uid=0 auid=0 ses=119 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_END msg=audit(1398701066.896:2984): user pid=10828 uid=0 auid=0 ses=119 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=CRED_DISP msg=audit(1398701066.897:2985): user pid=10828 uid=0 auid=0 ses=119 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_END msg=audit(1398701066.897:2986): user pid=10828 uid=0 auid=0 ses=119 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_LOGOUT msg=audit(1398701066.897:2987): user pid=10828 uid=0 auid=0 ses=119 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701066.898:2988): user pid=10828 uid=0 auid=0 ses=119 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=10828 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701066.898:2989): user pid=10828 uid=0 auid=0 ses=119 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=10828 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701066.898:2990): user pid=10828 uid=0 auid=0 ses=119 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=10828 suid=0 rport=42239 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701069.931:2991): user pid=10955 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=10955 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701069.931:2992): user pid=10955 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=10955 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_SESSION msg=audit(1398701069.931:2993): user pid=10954 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 spid=10955 suid=74 rport=42241 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_SESSION msg=audit(1398701069.931:2994): user pid=10954 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 spid=10955 suid=74 rport=42241 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=USER_AUTH msg=audit(1398701069.987:2995): user pid=10954 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=42241 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=USER_AUTH msg=audit(1398701069.987:2996): user pid=10954 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=8b:2d:a5:06:3e:34:8a:e0:bf:ca:69:94:eb:59:f0:19 rport=42241 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=USER_ACCT msg=audit(1398701069.994:2997): user pid=10954 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701069.995:2998): user pid=10954 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=10955 suid=74 rport=42241 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=USER_AUTH msg=audit(1398701069.996:2999): user pid=10954 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=ssh res=success'
>type=CRED_ACQ msg=audit(1398701069.997:3000): user pid=10954 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=LOGIN msg=audit(1398701069.997:3001): pid=10954 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=120
>type=USER_ROLE_CHANGE msg=audit(1398701070.097:3002): user pid=10954 uid=0 auid=0 ses=120 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_START msg=audit(1398701070.100:3003): user pid=10954 uid=0 auid=0 ses=120 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_LOGIN msg=audit(1398701070.106:3004): user pid=10954 uid=0 auid=0 ses=120 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_START msg=audit(1398701070.106:3005): user pid=10954 uid=0 auid=0 ses=120 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701070.107:3006): user pid=10957 uid=0 auid=0 ses=120 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=10957 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701070.108:3007): user pid=10957 uid=0 auid=0 ses=120 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=10957 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRED_REFR msg=audit(1398701070.108:3008): user pid=10957 uid=0 auid=0 ses=120 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_END msg=audit(1398701070.155:3009): user pid=10954 uid=0 auid=0 ses=120 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=CRED_DISP msg=audit(1398701070.156:3010): user pid=10954 uid=0 auid=0 ses=120 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_END msg=audit(1398701070.160:3011): user pid=10954 uid=0 auid=0 ses=120 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_LOGOUT msg=audit(1398701070.160:3012): user pid=10954 uid=0 auid=0 ses=120 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701070.160:3013): user pid=10954 uid=0 auid=0 ses=120 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=10954 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701070.160:3014): user pid=10954 uid=0 auid=0 ses=120 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=10954 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701070.161:3015): user pid=10954 uid=0 auid=0 ses=120 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=10954 suid=0 rport=42241 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701073.187:3016): user pid=10964 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=10964 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701073.187:3017): user pid=10964 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=10964 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_SESSION msg=audit(1398701073.187:3018): user pid=10963 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 spid=10964 suid=74 rport=42242 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_SESSION msg=audit(1398701073.188:3019): user pid=10963 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 spid=10964 suid=74 rport=42242 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=USER_AUTH msg=audit(1398701073.254:3020): user pid=10963 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=42242 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=USER_AUTH msg=audit(1398701073.254:3021): user pid=10963 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=8b:2d:a5:06:3e:34:8a:e0:bf:ca:69:94:eb:59:f0:19 rport=42242 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=USER_ACCT msg=audit(1398701073.268:3022): user pid=10963 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701073.268:3023): user pid=10963 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=10964 suid=74 rport=42242 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=USER_AUTH msg=audit(1398701073.269:3024): user pid=10963 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=ssh res=success'
>type=CRED_ACQ msg=audit(1398701073.270:3025): user pid=10963 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=LOGIN msg=audit(1398701073.270:3026): pid=10963 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=121
>type=USER_ROLE_CHANGE msg=audit(1398701073.381:3027): user pid=10963 uid=0 auid=0 ses=121 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_START msg=audit(1398701073.386:3028): user pid=10963 uid=0 auid=0 ses=121 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_LOGIN msg=audit(1398701073.393:3029): user pid=10963 uid=0 auid=0 ses=121 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_START msg=audit(1398701073.394:3030): user pid=10963 uid=0 auid=0 ses=121 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701073.397:3031): user pid=10966 uid=0 auid=0 ses=121 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=10966 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701073.397:3032): user pid=10966 uid=0 auid=0 ses=121 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=10966 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRED_REFR msg=audit(1398701073.398:3033): user pid=10966 uid=0 auid=0 ses=121 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_END msg=audit(1398701073.437:3034): user pid=10963 uid=0 auid=0 ses=121 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=CRED_DISP msg=audit(1398701073.438:3035): user pid=10963 uid=0 auid=0 ses=121 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_END msg=audit(1398701073.438:3036): user pid=10963 uid=0 auid=0 ses=121 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_LOGOUT msg=audit(1398701073.439:3037): user pid=10963 uid=0 auid=0 ses=121 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701073.439:3038): user pid=10963 uid=0 auid=0 ses=121 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=10963 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701073.439:3039): user pid=10963 uid=0 auid=0 ses=121 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=10963 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701073.439:3040): user pid=10963 uid=0 auid=0 ses=121 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=10963 suid=0 rport=42242 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701076.479:3041): user pid=10974 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=10974 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701076.479:3042): user pid=10974 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=10974 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_SESSION msg=audit(1398701076.479:3043): user pid=10973 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 spid=10974 suid=74 rport=42243 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_SESSION msg=audit(1398701076.479:3044): user pid=10973 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 spid=10974 suid=74 rport=42243 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=USER_AUTH msg=audit(1398701076.540:3045): user pid=10973 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=42243 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=USER_AUTH msg=audit(1398701076.541:3046): user pid=10973 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=8b:2d:a5:06:3e:34:8a:e0:bf:ca:69:94:eb:59:f0:19 rport=42243 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=USER_ACCT msg=audit(1398701076.547:3047): user pid=10973 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701076.548:3048): user pid=10973 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=10974 suid=74 rport=42243 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=USER_AUTH msg=audit(1398701076.549:3049): user pid=10973 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=ssh res=success'
>type=CRED_ACQ msg=audit(1398701076.550:3050): user pid=10973 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=LOGIN msg=audit(1398701076.550:3051): pid=10973 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=122
>type=USER_ROLE_CHANGE msg=audit(1398701076.660:3052): user pid=10973 uid=0 auid=0 ses=122 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_START msg=audit(1398701076.663:3053): user pid=10973 uid=0 auid=0 ses=122 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_LOGIN msg=audit(1398701076.671:3054): user pid=10973 uid=0 auid=0 ses=122 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_START msg=audit(1398701076.671:3055): user pid=10973 uid=0 auid=0 ses=122 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701076.673:3056): user pid=10976 uid=0 auid=0 ses=122 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=10976 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701076.673:3057): user pid=10976 uid=0 auid=0 ses=122 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=10976 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRED_REFR msg=audit(1398701076.675:3058): user pid=10976 uid=0 auid=0 ses=122 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_END msg=audit(1398701076.714:3059): user pid=10973 uid=0 auid=0 ses=122 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=CRED_DISP msg=audit(1398701076.714:3060): user pid=10973 uid=0 auid=0 ses=122 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_END msg=audit(1398701076.715:3061): user pid=10973 uid=0 auid=0 ses=122 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_LOGOUT msg=audit(1398701076.715:3062): user pid=10973 uid=0 auid=0 ses=122 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701076.715:3063): user pid=10973 uid=0 auid=0 ses=122 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=10973 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701076.716:3064): user pid=10973 uid=0 auid=0 ses=122 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=10973 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701076.716:3065): user pid=10973 uid=0 auid=0 ses=122 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=10973 suid=0 rport=42243 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701076.748:3066): user pid=10981 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=10981 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701076.748:3067): user pid=10981 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=10981 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_SESSION msg=audit(1398701076.749:3068): user pid=10980 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 spid=10981 suid=74 rport=42244 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_SESSION msg=audit(1398701076.749:3069): user pid=10980 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 spid=10981 suid=74 rport=42244 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=USER_AUTH msg=audit(1398701076.809:3070): user pid=10980 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=42244 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=USER_AUTH msg=audit(1398701076.809:3071): user pid=10980 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=8b:2d:a5:06:3e:34:8a:e0:bf:ca:69:94:eb:59:f0:19 rport=42244 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=USER_ACCT msg=audit(1398701076.816:3072): user pid=10980 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701076.816:3073): user pid=10980 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=10981 suid=74 rport=42244 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=USER_AUTH msg=audit(1398701076.817:3074): user pid=10980 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=ssh res=success'
>type=CRED_ACQ msg=audit(1398701076.817:3075): user pid=10980 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=LOGIN msg=audit(1398701076.818:3076): pid=10980 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=123
>type=USER_ROLE_CHANGE msg=audit(1398701076.918:3077): user pid=10980 uid=0 auid=0 ses=123 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_START msg=audit(1398701076.922:3078): user pid=10980 uid=0 auid=0 ses=123 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_LOGIN msg=audit(1398701076.930:3079): user pid=10980 uid=0 auid=0 ses=123 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_START msg=audit(1398701076.930:3080): user pid=10980 uid=0 auid=0 ses=123 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701076.931:3081): user pid=10983 uid=0 auid=0 ses=123 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=10983 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701076.931:3082): user pid=10983 uid=0 auid=0 ses=123 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=10983 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRED_REFR msg=audit(1398701076.933:3083): user pid=10983 uid=0 auid=0 ses=123 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_END msg=audit(1398701076.977:3084): user pid=10980 uid=0 auid=0 ses=123 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=CRED_DISP msg=audit(1398701076.977:3085): user pid=10980 uid=0 auid=0 ses=123 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_END msg=audit(1398701076.978:3086): user pid=10980 uid=0 auid=0 ses=123 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_LOGOUT msg=audit(1398701076.978:3087): user pid=10980 uid=0 auid=0 ses=123 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701076.978:3088): user pid=10980 uid=0 auid=0 ses=123 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=10980 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701076.979:3089): user pid=10980 uid=0 auid=0 ses=123 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=10980 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701076.979:3090): user pid=10980 uid=0 auid=0 ses=123 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=10980 suid=0 rport=42244 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701077.003:3091): user pid=10993 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=10993 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701077.004:3092): user pid=10993 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=10993 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_SESSION msg=audit(1398701077.004:3093): user pid=10992 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 spid=10993 suid=74 rport=42245 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_SESSION msg=audit(1398701077.004:3094): user pid=10992 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 spid=10993 suid=74 rport=42245 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=USER_AUTH msg=audit(1398701077.080:3095): user pid=10992 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=42245 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=USER_AUTH msg=audit(1398701077.080:3096): user pid=10992 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=8b:2d:a5:06:3e:34:8a:e0:bf:ca:69:94:eb:59:f0:19 rport=42245 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=USER_ACCT msg=audit(1398701077.089:3097): user pid=10992 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701077.089:3098): user pid=10992 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=10993 suid=74 rport=42245 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=USER_AUTH msg=audit(1398701077.090:3099): user pid=10992 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=ssh res=success'
>type=CRED_ACQ msg=audit(1398701077.090:3100): user pid=10992 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=LOGIN msg=audit(1398701077.090:3101): pid=10992 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=124
>type=USER_ROLE_CHANGE msg=audit(1398701077.196:3102): user pid=10992 uid=0 auid=0 ses=124 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_START msg=audit(1398701077.201:3103): user pid=10992 uid=0 auid=0 ses=124 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_LOGIN msg=audit(1398701077.209:3104): user pid=10992 uid=0 auid=0 ses=124 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_START msg=audit(1398701077.209:3105): user pid=10992 uid=0 auid=0 ses=124 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701077.211:3106): user pid=11006 uid=0 auid=0 ses=124 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=11006 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701077.211:3107): user pid=11006 uid=0 auid=0 ses=124 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=11006 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRED_REFR msg=audit(1398701077.212:3108): user pid=11006 uid=0 auid=0 ses=124 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_END msg=audit(1398701077.248:3109): user pid=10992 uid=0 auid=0 ses=124 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=CRED_DISP msg=audit(1398701077.248:3110): user pid=10992 uid=0 auid=0 ses=124 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_END msg=audit(1398701077.249:3111): user pid=10992 uid=0 auid=0 ses=124 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_LOGOUT msg=audit(1398701077.249:3112): user pid=10992 uid=0 auid=0 ses=124 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701077.249:3113): user pid=10992 uid=0 auid=0 ses=124 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=10992 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701077.249:3114): user pid=10992 uid=0 auid=0 ses=124 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=10992 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701077.249:3115): user pid=10992 uid=0 auid=0 ses=124 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=10992 suid=0 rport=42245 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701077.276:3116): user pid=11017 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=11017 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701077.277:3117): user pid=11017 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=11017 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_SESSION msg=audit(1398701077.277:3118): user pid=11016 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 spid=11017 suid=74 rport=42246 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_SESSION msg=audit(1398701077.277:3119): user pid=11016 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 spid=11017 suid=74 rport=42246 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=USER_AUTH msg=audit(1398701077.337:3120): user pid=11016 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=42246 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=USER_AUTH msg=audit(1398701077.337:3121): user pid=11016 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=8b:2d:a5:06:3e:34:8a:e0:bf:ca:69:94:eb:59:f0:19 rport=42246 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=USER_ACCT msg=audit(1398701077.345:3122): user pid=11016 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701077.346:3123): user pid=11016 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=11017 suid=74 rport=42246 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=USER_AUTH msg=audit(1398701077.346:3124): user pid=11016 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=ssh res=success'
>type=CRED_ACQ msg=audit(1398701077.347:3125): user pid=11016 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=LOGIN msg=audit(1398701077.347:3126): pid=11016 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=125
>type=USER_ROLE_CHANGE msg=audit(1398701077.453:3127): user pid=11016 uid=0 auid=0 ses=125 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_START msg=audit(1398701077.458:3128): user pid=11016 uid=0 auid=0 ses=125 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_LOGIN msg=audit(1398701077.466:3129): user pid=11016 uid=0 auid=0 ses=125 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_START msg=audit(1398701077.466:3130): user pid=11016 uid=0 auid=0 ses=125 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701077.468:3131): user pid=11023 uid=0 auid=0 ses=125 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=11023 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701077.468:3132): user pid=11023 uid=0 auid=0 ses=125 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=11023 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRED_REFR msg=audit(1398701077.469:3133): user pid=11023 uid=0 auid=0 ses=125 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_END msg=audit(1398701077.504:3134): user pid=11016 uid=0 auid=0 ses=125 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=CRED_DISP msg=audit(1398701077.505:3135): user pid=11016 uid=0 auid=0 ses=125 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_END msg=audit(1398701077.505:3136): user pid=11016 uid=0 auid=0 ses=125 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_LOGOUT msg=audit(1398701077.506:3137): user pid=11016 uid=0 auid=0 ses=125 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701077.506:3138): user pid=11016 uid=0 auid=0 ses=125 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=11016 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701077.506:3139): user pid=11016 uid=0 auid=0 ses=125 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=11016 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701077.506:3140): user pid=11016 uid=0 auid=0 ses=125 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=11016 suid=0 rport=42246 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=NETFILTER_CFG msg=audit(1398701077.833:3141): table=filter family=2 entries=0
>type=SYSCALL msg=audit(1398701077.833:3141): arch=c000003e syscall=272 success=yes exit=0 a0=40000000 a1=c0 a2=0 a3=7fffe4aa9820 items=0 ppid=11193 pid=11200 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=123 comm="ip" exe="/sbin/ip" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null)
>type=NETFILTER_CFG msg=audit(1398701077.866:3142): table=filter family=2 entries=0
>type=SYSCALL msg=audit(1398701077.866:3142): arch=c000003e syscall=272 success=yes exit=0 a0=40000000 a1=c0 a2=0 a3=7fffd8dd1a60 items=0 ppid=11193 pid=11204 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=123 comm="ip" exe="/sbin/ip" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null)
>type=NETFILTER_CFG msg=audit(1398701078.201:3143): table=filter family=2 entries=0
>type=SYSCALL msg=audit(1398701078.201:3143): arch=c000003e syscall=272 success=yes exit=0 a0=40000000 a1=c0 a2=0 a3=7fffc7365dc0 items=0 ppid=11193 pid=11206 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=123 comm="ip" exe="/sbin/ip" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null)
>type=CRYPTO_KEY_USER msg=audit(1398701080.535:3144): user pid=11334 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=11334 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701080.535:3145): user pid=11334 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=11334 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_SESSION msg=audit(1398701080.535:3146): user pid=11333 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 spid=11334 suid=74 rport=42247 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_SESSION msg=audit(1398701080.536:3147): user pid=11333 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 spid=11334 suid=74 rport=42247 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=USER_AUTH msg=audit(1398701080.604:3148): user pid=11333 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=42247 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=USER_AUTH msg=audit(1398701080.604:3149): user pid=11333 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=8b:2d:a5:06:3e:34:8a:e0:bf:ca:69:94:eb:59:f0:19 rport=42247 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=USER_ACCT msg=audit(1398701080.618:3150): user pid=11333 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701080.619:3151): user pid=11333 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=11334 suid=74 rport=42247 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=USER_AUTH msg=audit(1398701080.620:3152): user pid=11333 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=ssh res=success'
>type=CRED_ACQ msg=audit(1398701080.620:3153): user pid=11333 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=LOGIN msg=audit(1398701080.620:3154): pid=11333 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=126
>type=USER_ROLE_CHANGE msg=audit(1398701080.753:3155): user pid=11333 uid=0 auid=0 ses=126 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_START msg=audit(1398701080.758:3156): user pid=11333 uid=0 auid=0 ses=126 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_LOGIN msg=audit(1398701080.761:3157): user pid=11333 uid=0 auid=0 ses=126 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_START msg=audit(1398701080.762:3158): user pid=11333 uid=0 auid=0 ses=126 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701080.765:3159): user pid=11336 uid=0 auid=0 ses=126 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=11336 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701080.765:3160): user pid=11336 uid=0 auid=0 ses=126 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=11336 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRED_REFR msg=audit(1398701080.766:3161): user pid=11336 uid=0 auid=0 ses=126 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_END msg=audit(1398701080.793:3162): user pid=11333 uid=0 auid=0 ses=126 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=CRED_DISP msg=audit(1398701080.794:3163): user pid=11333 uid=0 auid=0 ses=126 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_END msg=audit(1398701080.794:3164): user pid=11333 uid=0 auid=0 ses=126 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_LOGOUT msg=audit(1398701080.795:3165): user pid=11333 uid=0 auid=0 ses=126 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701080.795:3166): user pid=11333 uid=0 auid=0 ses=126 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=11333 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701080.795:3167): user pid=11333 uid=0 auid=0 ses=126 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=11333 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701080.795:3168): user pid=11333 uid=0 auid=0 ses=126 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=11333 suid=0 rport=42247 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=NETFILTER_CFG msg=audit(1398701081.308:3169): table=filter family=2 entries=0
>type=SYSCALL msg=audit(1398701081.308:3169): arch=c000003e syscall=272 success=yes exit=0 a0=40000000 a1=c0 a2=0 a3=7fff05e0e3b0 items=0 ppid=11510 pid=11517 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=123 comm="ip" exe="/sbin/ip" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null)
>type=NETFILTER_CFG msg=audit(1398701081.334:3170): table=filter family=2 entries=0
>type=SYSCALL msg=audit(1398701081.334:3170): arch=c000003e syscall=272 success=yes exit=0 a0=40000000 a1=c0 a2=0 a3=7fff69ad7ae0 items=0 ppid=11510 pid=11521 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=123 comm="ip" exe="/sbin/ip" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null)
>type=NETFILTER_CFG msg=audit(1398701081.654:3171): table=filter family=2 entries=0
>type=SYSCALL msg=audit(1398701081.654:3171): arch=c000003e syscall=272 success=yes exit=0 a0=40000000 a1=c0 a2=0 a3=7fff5e81e000 items=0 ppid=11510 pid=11523 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=123 comm="ip" exe="/sbin/ip" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null)
>type=CRYPTO_KEY_USER msg=audit(1398701083.823:3172): user pid=11731 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=11731 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701083.823:3173): user pid=11731 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=11731 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_SESSION msg=audit(1398701083.824:3174): user pid=11729 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 spid=11731 suid=74 rport=42248 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_SESSION msg=audit(1398701083.824:3175): user pid=11729 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 spid=11731 suid=74 rport=42248 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=USER_AUTH msg=audit(1398701083.879:3176): user pid=11729 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=42248 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=USER_AUTH msg=audit(1398701083.879:3177): user pid=11729 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=8b:2d:a5:06:3e:34:8a:e0:bf:ca:69:94:eb:59:f0:19 rport=42248 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=USER_ACCT msg=audit(1398701083.885:3178): user pid=11729 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701083.886:3179): user pid=11729 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=11731 suid=74 rport=42248 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=USER_AUTH msg=audit(1398701083.886:3180): user pid=11729 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=ssh res=success'
>type=CRED_ACQ msg=audit(1398701083.887:3181): user pid=11729 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=LOGIN msg=audit(1398701083.887:3182): pid=11729 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=127
>type=USER_ROLE_CHANGE msg=audit(1398701083.991:3183): user pid=11729 uid=0 auid=0 ses=127 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_START msg=audit(1398701083.997:3184): user pid=11729 uid=0 auid=0 ses=127 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_LOGIN msg=audit(1398701084.005:3185): user pid=11729 uid=0 auid=0 ses=127 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_START msg=audit(1398701084.005:3186): user pid=11729 uid=0 auid=0 ses=127 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701084.009:3187): user pid=11740 uid=0 auid=0 ses=127 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=11740 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701084.009:3188): user pid=11740 uid=0 auid=0 ses=127 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=11740 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRED_REFR msg=audit(1398701084.010:3189): user pid=11740 uid=0 auid=0 ses=127 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_END msg=audit(1398701084.041:3190): user pid=11729 uid=0 auid=0 ses=127 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=CRED_DISP msg=audit(1398701084.041:3191): user pid=11729 uid=0 auid=0 ses=127 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_END msg=audit(1398701084.042:3192): user pid=11729 uid=0 auid=0 ses=127 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_LOGOUT msg=audit(1398701084.042:3193): user pid=11729 uid=0 auid=0 ses=127 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701084.042:3194): user pid=11729 uid=0 auid=0 ses=127 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=11729 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701084.042:3195): user pid=11729 uid=0 auid=0 ses=127 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=11729 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701084.042:3196): user pid=11729 uid=0 auid=0 ses=127 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=11729 suid=0 rport=42248 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=NETFILTER_CFG msg=audit(1398701085.451:3197): table=filter family=2 entries=0
>type=SYSCALL msg=audit(1398701085.451:3197): arch=c000003e syscall=272 success=yes exit=0 a0=40000000 a1=c0 a2=0 a3=7fff9975fe20 items=0 ppid=11966 pid=11973 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=124 comm="ip" exe="/sbin/ip" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null)
>type=NETFILTER_CFG msg=audit(1398701085.478:3198): table=filter family=2 entries=0
>type=SYSCALL msg=audit(1398701085.478:3198): arch=c000003e syscall=272 success=yes exit=0 a0=40000000 a1=c0 a2=0 a3=7fff70c46370 items=0 ppid=11966 pid=11977 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=124 comm="ip" exe="/sbin/ip" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null)
>type=NETFILTER_CFG msg=audit(1398701085.806:3199): table=filter family=2 entries=0
>type=SYSCALL msg=audit(1398701085.806:3199): arch=c000003e syscall=272 success=yes exit=0 a0=40000000 a1=c0 a2=0 a3=7fffe422e6f0 items=0 ppid=11966 pid=11979 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=124 comm="ip" exe="/sbin/ip" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null)
>type=CRYPTO_KEY_USER msg=audit(1398701087.066:3200): user pid=12077 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=12077 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701087.066:3201): user pid=12077 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=12077 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_SESSION msg=audit(1398701087.068:3202): user pid=12076 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 spid=12077 suid=74 rport=42249 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_SESSION msg=audit(1398701087.068:3203): user pid=12076 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 spid=12077 suid=74 rport=42249 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=USER_AUTH msg=audit(1398701087.123:3204): user pid=12076 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=42249 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=USER_AUTH msg=audit(1398701087.123:3205): user pid=12076 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=8b:2d:a5:06:3e:34:8a:e0:bf:ca:69:94:eb:59:f0:19 rport=42249 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=USER_ACCT msg=audit(1398701087.131:3206): user pid=12076 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701087.133:3207): user pid=12076 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=12077 suid=74 rport=42249 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=USER_AUTH msg=audit(1398701087.134:3208): user pid=12076 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=ssh res=success'
>type=CRED_ACQ msg=audit(1398701087.134:3209): user pid=12076 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=LOGIN msg=audit(1398701087.134:3210): pid=12076 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=128
>type=USER_ROLE_CHANGE msg=audit(1398701087.248:3211): user pid=12076 uid=0 auid=0 ses=128 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_START msg=audit(1398701087.253:3212): user pid=12076 uid=0 auid=0 ses=128 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_LOGIN msg=audit(1398701087.261:3213): user pid=12076 uid=0 auid=0 ses=128 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_START msg=audit(1398701087.262:3214): user pid=12076 uid=0 auid=0 ses=128 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701087.263:3215): user pid=12087 uid=0 auid=0 ses=128 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=12087 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701087.263:3216): user pid=12087 uid=0 auid=0 ses=128 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=12087 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRED_REFR msg=audit(1398701087.264:3217): user pid=12087 uid=0 auid=0 ses=128 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_END msg=audit(1398701087.311:3218): user pid=12076 uid=0 auid=0 ses=128 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=CRED_DISP msg=audit(1398701087.311:3219): user pid=12076 uid=0 auid=0 ses=128 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_END msg=audit(1398701087.312:3220): user pid=12076 uid=0 auid=0 ses=128 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_LOGOUT msg=audit(1398701087.312:3221): user pid=12076 uid=0 auid=0 ses=128 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701087.312:3222): user pid=12076 uid=0 auid=0 ses=128 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=12076 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701087.313:3223): user pid=12076 uid=0 auid=0 ses=128 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=12076 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701087.313:3224): user pid=12076 uid=0 auid=0 ses=128 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=12076 suid=0 rport=42249 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=NETFILTER_CFG msg=audit(1398701087.679:3225): table=filter family=2 entries=0
>type=SYSCALL msg=audit(1398701087.679:3225): arch=c000003e syscall=272 success=yes exit=0 a0=40000000 a1=c0 a2=0 a3=7fff64f926d0 items=0 ppid=12283 pid=12290 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=124 comm="ip" exe="/sbin/ip" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null)
>type=NETFILTER_CFG msg=audit(1398701087.718:3226): table=filter family=2 entries=0
>type=SYSCALL msg=audit(1398701087.718:3226): arch=c000003e syscall=272 success=yes exit=0 a0=40000000 a1=c0 a2=0 a3=7fffe0598d60 items=0 ppid=12283 pid=12294 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=124 comm="ip" exe="/sbin/ip" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null)
>type=NETFILTER_CFG msg=audit(1398701088.052:3227): table=filter family=2 entries=0
>type=SYSCALL msg=audit(1398701088.052:3227): arch=c000003e syscall=272 success=yes exit=0 a0=40000000 a1=c0 a2=0 a3=7fff001fb6f0 items=0 ppid=12283 pid=12296 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=124 comm="ip" exe="/sbin/ip" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null)
>type=USER_START msg=audit(1398701088.795:3228): user pid=12399 uid=0 auid=0 ses=124 subj=unconfined_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="qpidd" exe="/sbin/runuser" hostname=? addr=? terminal=? res=success'
>type=CRED_ACQ msg=audit(1398701088.795:3229): user pid=12399 uid=0 auid=0 ses=124 subj=unconfined_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="qpidd" exe="/sbin/runuser" hostname=? addr=? terminal=? res=success'
>type=CRED_DISP msg=audit(1398701088.798:3230): user pid=12399 uid=0 auid=0 ses=124 subj=unconfined_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="qpidd" exe="/sbin/runuser" hostname=? addr=? terminal=? res=success'
>type=USER_END msg=audit(1398701088.798:3231): user pid=12399 uid=0 auid=0 ses=124 subj=unconfined_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="qpidd" exe="/sbin/runuser" hostname=? addr=? terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701090.317:3232): user pid=12408 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=12408 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701090.317:3233): user pid=12408 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=12408 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_SESSION msg=audit(1398701090.318:3234): user pid=12407 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 spid=12408 suid=74 rport=42250 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_SESSION msg=audit(1398701090.318:3235): user pid=12407 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 spid=12408 suid=74 rport=42250 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=USER_AUTH msg=audit(1398701090.371:3236): user pid=12407 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=42250 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=USER_AUTH msg=audit(1398701090.372:3237): user pid=12407 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=8b:2d:a5:06:3e:34:8a:e0:bf:ca:69:94:eb:59:f0:19 rport=42250 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=USER_ACCT msg=audit(1398701090.379:3238): user pid=12407 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701090.379:3239): user pid=12407 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=12408 suid=74 rport=42250 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=USER_AUTH msg=audit(1398701090.380:3240): user pid=12407 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=ssh res=success'
>type=CRED_ACQ msg=audit(1398701090.381:3241): user pid=12407 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=LOGIN msg=audit(1398701090.381:3242): pid=12407 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=129
>type=USER_ROLE_CHANGE msg=audit(1398701090.480:3243): user pid=12407 uid=0 auid=0 ses=129 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_START msg=audit(1398701090.483:3244): user pid=12407 uid=0 auid=0 ses=129 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_LOGIN msg=audit(1398701090.489:3245): user pid=12407 uid=0 auid=0 ses=129 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_START msg=audit(1398701090.489:3246): user pid=12407 uid=0 auid=0 ses=129 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701090.490:3247): user pid=12410 uid=0 auid=0 ses=129 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=12410 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701090.490:3248): user pid=12410 uid=0 auid=0 ses=129 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=12410 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRED_REFR msg=audit(1398701090.492:3249): user pid=12410 uid=0 auid=0 ses=129 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_END msg=audit(1398701090.535:3250): user pid=12407 uid=0 auid=0 ses=129 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_LOGOUT msg=audit(1398701090.535:3251): user pid=12407 uid=0 auid=0 ses=129 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_END msg=audit(1398701090.541:3252): user pid=12407 uid=0 auid=0 ses=129 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=CRED_DISP msg=audit(1398701090.541:3253): user pid=12407 uid=0 auid=0 ses=129 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701090.541:3254): user pid=12407 uid=0 auid=0 ses=129 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=12407 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701090.541:3255): user pid=12407 uid=0 auid=0 ses=129 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=12407 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701090.543:3256): user pid=12407 uid=0 auid=0 ses=129 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=12407 suid=0 rport=42250 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701090.598:3257): user pid=12417 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=12417 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701090.598:3258): user pid=12417 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=12417 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_SESSION msg=audit(1398701090.599:3259): user pid=12416 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 spid=12417 suid=74 rport=42251 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_SESSION msg=audit(1398701090.599:3260): user pid=12416 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 spid=12417 suid=74 rport=42251 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=USER_AUTH msg=audit(1398701090.658:3261): user pid=12416 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=42251 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=USER_AUTH msg=audit(1398701090.659:3262): user pid=12416 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=8b:2d:a5:06:3e:34:8a:e0:bf:ca:69:94:eb:59:f0:19 rport=42251 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=USER_ACCT msg=audit(1398701090.664:3263): user pid=12416 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701090.664:3264): user pid=12416 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=12417 suid=74 rport=42251 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=USER_AUTH msg=audit(1398701090.666:3265): user pid=12416 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=ssh res=success'
>type=CRED_ACQ msg=audit(1398701090.667:3266): user pid=12416 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=LOGIN msg=audit(1398701090.667:3267): pid=12416 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=130
>type=USER_ROLE_CHANGE msg=audit(1398701090.771:3268): user pid=12416 uid=0 auid=0 ses=130 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_START msg=audit(1398701090.774:3269): user pid=12416 uid=0 auid=0 ses=130 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_LOGIN msg=audit(1398701090.775:3270): user pid=12416 uid=0 auid=0 ses=130 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_START msg=audit(1398701090.775:3271): user pid=12416 uid=0 auid=0 ses=130 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701090.776:3272): user pid=12419 uid=0 auid=0 ses=130 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=12419 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701090.777:3273): user pid=12419 uid=0 auid=0 ses=130 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=12419 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRED_REFR msg=audit(1398701090.777:3274): user pid=12419 uid=0 auid=0 ses=130 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_END msg=audit(1398701090.823:3275): user pid=12416 uid=0 auid=0 ses=130 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_LOGOUT msg=audit(1398701090.824:3276): user pid=12416 uid=0 auid=0 ses=130 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_END msg=audit(1398701090.824:3277): user pid=12416 uid=0 auid=0 ses=130 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=CRED_DISP msg=audit(1398701090.825:3278): user pid=12416 uid=0 auid=0 ses=130 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701090.826:3279): user pid=12416 uid=0 auid=0 ses=130 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=12416 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701090.826:3280): user pid=12416 uid=0 auid=0 ses=130 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=12416 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701090.826:3281): user pid=12416 uid=0 auid=0 ses=130 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=12416 suid=0 rport=42251 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701090.865:3282): user pid=12424 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=12424 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701090.865:3283): user pid=12424 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=12424 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_SESSION msg=audit(1398701090.865:3284): user pid=12423 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 spid=12424 suid=74 rport=42252 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_SESSION msg=audit(1398701090.866:3285): user pid=12423 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 spid=12424 suid=74 rport=42252 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=USER_AUTH msg=audit(1398701090.927:3286): user pid=12423 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=42252 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=USER_AUTH msg=audit(1398701090.927:3287): user pid=12423 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=8b:2d:a5:06:3e:34:8a:e0:bf:ca:69:94:eb:59:f0:19 rport=42252 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=USER_ACCT msg=audit(1398701090.934:3288): user pid=12423 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701090.934:3289): user pid=12423 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=12424 suid=74 rport=42252 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=USER_AUTH msg=audit(1398701090.935:3290): user pid=12423 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=ssh res=success'
>type=CRED_ACQ msg=audit(1398701090.935:3291): user pid=12423 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=LOGIN msg=audit(1398701090.936:3292): pid=12423 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=131
>type=USER_ROLE_CHANGE msg=audit(1398701091.031:3293): user pid=12423 uid=0 auid=0 ses=131 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_START msg=audit(1398701091.033:3294): user pid=12423 uid=0 auid=0 ses=131 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_LOGIN msg=audit(1398701091.038:3295): user pid=12423 uid=0 auid=0 ses=131 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_START msg=audit(1398701091.038:3296): user pid=12423 uid=0 auid=0 ses=131 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701091.039:3297): user pid=12426 uid=0 auid=0 ses=131 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=12426 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701091.040:3298): user pid=12426 uid=0 auid=0 ses=131 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=12426 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRED_REFR msg=audit(1398701091.040:3299): user pid=12426 uid=0 auid=0 ses=131 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_END msg=audit(1398701091.082:3300): user pid=12423 uid=0 auid=0 ses=131 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=CRED_DISP msg=audit(1398701091.082:3301): user pid=12423 uid=0 auid=0 ses=131 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_END msg=audit(1398701091.083:3302): user pid=12423 uid=0 auid=0 ses=131 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_LOGOUT msg=audit(1398701091.083:3303): user pid=12423 uid=0 auid=0 ses=131 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701091.083:3304): user pid=12423 uid=0 auid=0 ses=131 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=12423 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701091.084:3305): user pid=12423 uid=0 auid=0 ses=131 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=12423 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701091.084:3306): user pid=12423 uid=0 auid=0 ses=131 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=12423 suid=0 rport=42252 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701091.108:3307): user pid=12436 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=12436 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701091.108:3308): user pid=12436 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=12436 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_SESSION msg=audit(1398701091.108:3309): user pid=12435 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 spid=12436 suid=74 rport=42253 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_SESSION msg=audit(1398701091.109:3310): user pid=12435 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 spid=12436 suid=74 rport=42253 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=USER_AUTH msg=audit(1398701091.176:3311): user pid=12435 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=42253 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=USER_AUTH msg=audit(1398701091.176:3312): user pid=12435 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=8b:2d:a5:06:3e:34:8a:e0:bf:ca:69:94:eb:59:f0:19 rport=42253 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=USER_ACCT msg=audit(1398701091.182:3313): user pid=12435 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701091.183:3314): user pid=12435 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=12436 suid=74 rport=42253 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=USER_AUTH msg=audit(1398701091.184:3315): user pid=12435 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=ssh res=success'
>type=CRED_ACQ msg=audit(1398701091.184:3316): user pid=12435 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=LOGIN msg=audit(1398701091.184:3317): pid=12435 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=132
>type=USER_ROLE_CHANGE msg=audit(1398701091.296:3318): user pid=12435 uid=0 auid=0 ses=132 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_START msg=audit(1398701091.300:3319): user pid=12435 uid=0 auid=0 ses=132 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_LOGIN msg=audit(1398701091.307:3320): user pid=12435 uid=0 auid=0 ses=132 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_START msg=audit(1398701091.308:3321): user pid=12435 uid=0 auid=0 ses=132 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701091.311:3322): user pid=12449 uid=0 auid=0 ses=132 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=12449 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701091.311:3323): user pid=12449 uid=0 auid=0 ses=132 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=12449 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRED_REFR msg=audit(1398701091.312:3324): user pid=12449 uid=0 auid=0 ses=132 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_END msg=audit(1398701091.345:3325): user pid=12435 uid=0 auid=0 ses=132 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=CRED_DISP msg=audit(1398701091.345:3326): user pid=12435 uid=0 auid=0 ses=132 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_END msg=audit(1398701091.346:3327): user pid=12435 uid=0 auid=0 ses=132 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_LOGOUT msg=audit(1398701091.346:3328): user pid=12435 uid=0 auid=0 ses=132 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701091.346:3329): user pid=12435 uid=0 auid=0 ses=132 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=12435 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701091.346:3330): user pid=12435 uid=0 auid=0 ses=132 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=12435 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701091.346:3331): user pid=12435 uid=0 auid=0 ses=132 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=12435 suid=0 rport=42253 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701091.369:3332): user pid=12458 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=12458 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701091.369:3333): user pid=12458 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=12458 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_SESSION msg=audit(1398701091.370:3334): user pid=12457 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 spid=12458 suid=74 rport=42254 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_SESSION msg=audit(1398701091.370:3335): user pid=12457 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 spid=12458 suid=74 rport=42254 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=USER_AUTH msg=audit(1398701091.430:3336): user pid=12457 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=42254 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=USER_AUTH msg=audit(1398701091.430:3337): user pid=12457 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=8b:2d:a5:06:3e:34:8a:e0:bf:ca:69:94:eb:59:f0:19 rport=42254 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=USER_ACCT msg=audit(1398701091.443:3338): user pid=12457 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701091.443:3339): user pid=12457 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=12458 suid=74 rport=42254 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=USER_AUTH msg=audit(1398701091.444:3340): user pid=12457 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=ssh res=success'
>type=CRED_ACQ msg=audit(1398701091.444:3341): user pid=12457 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=LOGIN msg=audit(1398701091.444:3342): pid=12457 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=133
>type=USER_ROLE_CHANGE msg=audit(1398701091.551:3343): user pid=12457 uid=0 auid=0 ses=133 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_START msg=audit(1398701091.556:3344): user pid=12457 uid=0 auid=0 ses=133 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_LOGIN msg=audit(1398701091.564:3345): user pid=12457 uid=0 auid=0 ses=133 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_START msg=audit(1398701091.564:3346): user pid=12457 uid=0 auid=0 ses=133 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701091.566:3347): user pid=12461 uid=0 auid=0 ses=133 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=12461 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701091.566:3348): user pid=12461 uid=0 auid=0 ses=133 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=12461 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRED_REFR msg=audit(1398701091.567:3349): user pid=12461 uid=0 auid=0 ses=133 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_END msg=audit(1398701091.595:3350): user pid=12457 uid=0 auid=0 ses=133 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=CRED_DISP msg=audit(1398701091.595:3351): user pid=12457 uid=0 auid=0 ses=133 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_END msg=audit(1398701091.596:3352): user pid=12457 uid=0 auid=0 ses=133 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_LOGOUT msg=audit(1398701091.596:3353): user pid=12457 uid=0 auid=0 ses=133 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701091.596:3354): user pid=12457 uid=0 auid=0 ses=133 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=12457 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701091.596:3355): user pid=12457 uid=0 auid=0 ses=133 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=12457 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701091.596:3356): user pid=12457 uid=0 auid=0 ses=133 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=12457 suid=0 rport=42254 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701091.615:3357): user pid=12481 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=12481 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701091.615:3358): user pid=12481 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=12481 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_SESSION msg=audit(1398701091.615:3359): user pid=12479 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 spid=12481 suid=74 rport=42255 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_SESSION msg=audit(1398701091.616:3360): user pid=12479 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 spid=12481 suid=74 rport=42255 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=USER_AUTH msg=audit(1398701091.671:3361): user pid=12479 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=42255 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=USER_AUTH msg=audit(1398701091.671:3362): user pid=12479 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=8b:2d:a5:06:3e:34:8a:e0:bf:ca:69:94:eb:59:f0:19 rport=42255 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=USER_ACCT msg=audit(1398701091.677:3363): user pid=12479 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701091.678:3364): user pid=12479 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=12481 suid=74 rport=42255 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=USER_AUTH msg=audit(1398701091.679:3365): user pid=12479 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=ssh res=success'
>type=CRED_ACQ msg=audit(1398701091.679:3366): user pid=12479 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=LOGIN msg=audit(1398701091.679:3367): pid=12479 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=134
>type=USER_ROLE_CHANGE msg=audit(1398701091.786:3368): user pid=12479 uid=0 auid=0 ses=134 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_START msg=audit(1398701091.790:3369): user pid=12479 uid=0 auid=0 ses=134 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_LOGIN msg=audit(1398701091.797:3370): user pid=12479 uid=0 auid=0 ses=134 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_START msg=audit(1398701091.798:3371): user pid=12479 uid=0 auid=0 ses=134 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701091.799:3372): user pid=12607 uid=0 auid=0 ses=134 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=12607 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701091.799:3373): user pid=12607 uid=0 auid=0 ses=134 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=12607 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRED_REFR msg=audit(1398701091.801:3374): user pid=12607 uid=0 auid=0 ses=134 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_END msg=audit(1398701091.824:3375): user pid=12479 uid=0 auid=0 ses=134 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=CRED_DISP msg=audit(1398701091.824:3376): user pid=12479 uid=0 auid=0 ses=134 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_END msg=audit(1398701091.825:3377): user pid=12479 uid=0 auid=0 ses=134 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_LOGOUT msg=audit(1398701091.825:3378): user pid=12479 uid=0 auid=0 ses=134 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701091.825:3379): user pid=12479 uid=0 auid=0 ses=134 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=12479 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701091.825:3380): user pid=12479 uid=0 auid=0 ses=134 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=12479 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701091.825:3381): user pid=12479 uid=0 auid=0 ses=134 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=12479 suid=0 rport=42255 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=NETFILTER_CFG msg=audit(1398701092.002:3382): table=filter family=2 entries=0
>type=SYSCALL msg=audit(1398701092.002:3382): arch=c000003e syscall=272 success=yes exit=0 a0=40000000 a1=c0 a2=0 a3=7fff46462230 items=0 ppid=12677 pid=12684 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=131 comm="ip" exe="/sbin/ip" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null)
>type=NETFILTER_CFG msg=audit(1398701092.028:3383): table=filter family=2 entries=0
>type=SYSCALL msg=audit(1398701092.028:3383): arch=c000003e syscall=272 success=yes exit=0 a0=40000000 a1=c0 a2=0 a3=7fff406164b0 items=0 ppid=12677 pid=12688 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=131 comm="ip" exe="/sbin/ip" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null)
>type=NETFILTER_CFG msg=audit(1398701092.359:3384): table=filter family=2 entries=0
>type=SYSCALL msg=audit(1398701092.359:3384): arch=c000003e syscall=272 success=yes exit=0 a0=40000000 a1=c0 a2=0 a3=7fff9c942da0 items=0 ppid=12677 pid=12690 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=131 comm="ip" exe="/sbin/ip" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null)
>type=CRYPTO_KEY_USER msg=audit(1398701094.855:3385): user pid=12788 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=12788 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701094.855:3386): user pid=12788 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=12788 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_SESSION msg=audit(1398701094.855:3387): user pid=12787 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 spid=12788 suid=74 rport=42256 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_SESSION msg=audit(1398701094.855:3388): user pid=12787 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 spid=12788 suid=74 rport=42256 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=USER_AUTH msg=audit(1398701094.916:3389): user pid=12787 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=42256 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=USER_AUTH msg=audit(1398701094.916:3390): user pid=12787 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=8b:2d:a5:06:3e:34:8a:e0:bf:ca:69:94:eb:59:f0:19 rport=42256 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=USER_ACCT msg=audit(1398701094.922:3391): user pid=12787 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701094.924:3392): user pid=12787 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=12788 suid=74 rport=42256 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=USER_AUTH msg=audit(1398701094.925:3393): user pid=12787 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=ssh res=success'
>type=CRED_ACQ msg=audit(1398701094.926:3394): user pid=12787 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=LOGIN msg=audit(1398701094.926:3395): pid=12787 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=135
>type=USER_ROLE_CHANGE msg=audit(1398701095.042:3396): user pid=12787 uid=0 auid=0 ses=135 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_START msg=audit(1398701095.047:3397): user pid=12787 uid=0 auid=0 ses=135 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_LOGIN msg=audit(1398701095.055:3398): user pid=12787 uid=0 auid=0 ses=135 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_START msg=audit(1398701095.056:3399): user pid=12787 uid=0 auid=0 ses=135 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701095.057:3400): user pid=12800 uid=0 auid=0 ses=135 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=12800 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701095.057:3401): user pid=12800 uid=0 auid=0 ses=135 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=12800 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRED_REFR msg=audit(1398701095.064:3402): user pid=12800 uid=0 auid=0 ses=135 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_END msg=audit(1398701095.108:3403): user pid=12787 uid=0 auid=0 ses=135 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=CRED_DISP msg=audit(1398701095.108:3404): user pid=12787 uid=0 auid=0 ses=135 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_END msg=audit(1398701095.109:3405): user pid=12787 uid=0 auid=0 ses=135 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_LOGOUT msg=audit(1398701095.109:3406): user pid=12787 uid=0 auid=0 ses=135 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701095.109:3407): user pid=12787 uid=0 auid=0 ses=135 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=12787 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701095.109:3408): user pid=12787 uid=0 auid=0 ses=135 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=12787 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701095.109:3409): user pid=12787 uid=0 auid=0 ses=135 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=12787 suid=0 rport=42256 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=NETFILTER_CFG msg=audit(1398701095.573:3410): table=filter family=2 entries=0
>type=SYSCALL msg=audit(1398701095.573:3410): arch=c000003e syscall=272 success=yes exit=0 a0=40000000 a1=c0 a2=0 a3=7fff6113c850 items=0 ppid=13007 pid=13014 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=131 comm="ip" exe="/sbin/ip" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null)
>type=NETFILTER_CFG msg=audit(1398701095.601:3411): table=filter family=2 entries=0
>type=SYSCALL msg=audit(1398701095.601:3411): arch=c000003e syscall=272 success=yes exit=0 a0=40000000 a1=c0 a2=0 a3=7fff183d6310 items=0 ppid=13007 pid=13018 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=131 comm="ip" exe="/sbin/ip" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null)
>type=NETFILTER_CFG msg=audit(1398701095.933:3412): table=filter family=2 entries=0
>type=SYSCALL msg=audit(1398701095.933:3412): arch=c000003e syscall=272 success=yes exit=0 a0=40000000 a1=c0 a2=0 a3=7fff6c6e4590 items=0 ppid=13007 pid=13020 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=131 comm="ip" exe="/sbin/ip" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null)
>type=USER_ACCT msg=audit(1398701096.743:3413): user pid=13116 uid=0 auid=0 ses=131 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/bin/crontab" hostname=? addr=? terminal=cron res=success'
>type=CRED_ACQ msg=audit(1398701096.743:3414): user pid=13116 uid=0 auid=0 ses=131 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/bin/crontab" hostname=? addr=? terminal=cron res=success'
>type=USER_START msg=audit(1398701097.050:3415): user pid=13146 uid=0 auid=0 ses=131 subj=unconfined_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="keystone" exe="/sbin/runuser" hostname=? addr=? terminal=? res=success'
>type=CRED_ACQ msg=audit(1398701097.050:3416): user pid=13146 uid=0 auid=0 ses=131 subj=unconfined_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="keystone" exe="/sbin/runuser" hostname=? addr=? terminal=? res=success'
>type=CRED_DISP msg=audit(1398701098.077:3417): user pid=13146 uid=0 auid=0 ses=131 subj=unconfined_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="keystone" exe="/sbin/runuser" hostname=? addr=? terminal=? res=success'
>type=USER_END msg=audit(1398701098.077:3418): user pid=13146 uid=0 auid=0 ses=131 subj=unconfined_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="keystone" exe="/sbin/runuser" hostname=? addr=? terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701098.149:3419): user pid=13167 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=13167 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701098.149:3420): user pid=13167 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=13167 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_SESSION msg=audit(1398701098.150:3421): user pid=13166 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 spid=13167 suid=74 rport=42257 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_SESSION msg=audit(1398701098.150:3422): user pid=13166 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 spid=13167 suid=74 rport=42257 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=USER_AUTH msg=audit(1398701098.211:3423): user pid=13166 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=42257 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=USER_AUTH msg=audit(1398701098.211:3424): user pid=13166 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=8b:2d:a5:06:3e:34:8a:e0:bf:ca:69:94:eb:59:f0:19 rport=42257 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=USER_ACCT msg=audit(1398701098.220:3425): user pid=13166 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701098.221:3426): user pid=13166 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=13167 suid=74 rport=42257 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=USER_AUTH msg=audit(1398701098.222:3427): user pid=13166 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=ssh res=success'
>type=CRED_ACQ msg=audit(1398701098.223:3428): user pid=13166 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=LOGIN msg=audit(1398701098.223:3429): pid=13166 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=136
>type=USER_ROLE_CHANGE msg=audit(1398701098.338:3430): user pid=13166 uid=0 auid=0 ses=136 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_START msg=audit(1398701098.342:3431): user pid=13166 uid=0 auid=0 ses=136 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_LOGIN msg=audit(1398701098.350:3432): user pid=13166 uid=0 auid=0 ses=136 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_START msg=audit(1398701098.351:3433): user pid=13166 uid=0 auid=0 ses=136 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701098.354:3434): user pid=13169 uid=0 auid=0 ses=136 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=13169 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701098.354:3435): user pid=13169 uid=0 auid=0 ses=136 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=13169 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRED_REFR msg=audit(1398701098.355:3436): user pid=13169 uid=0 auid=0 ses=136 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_END msg=audit(1398701098.380:3437): user pid=13166 uid=0 auid=0 ses=136 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=CRED_DISP msg=audit(1398701098.381:3438): user pid=13166 uid=0 auid=0 ses=136 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_END msg=audit(1398701098.382:3439): user pid=13166 uid=0 auid=0 ses=136 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_LOGOUT msg=audit(1398701098.382:3440): user pid=13166 uid=0 auid=0 ses=136 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701098.382:3441): user pid=13166 uid=0 auid=0 ses=136 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=13166 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701098.382:3442): user pid=13166 uid=0 auid=0 ses=136 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=13166 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701098.382:3443): user pid=13166 uid=0 auid=0 ses=136 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=13166 suid=0 rport=42257 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701101.414:3444): user pid=13237 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=13237 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701101.414:3445): user pid=13237 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=13237 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_SESSION msg=audit(1398701101.415:3446): user pid=13234 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 spid=13237 suid=74 rport=42267 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_SESSION msg=audit(1398701101.415:3447): user pid=13234 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 spid=13237 suid=74 rport=42267 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=USER_AUTH msg=audit(1398701101.483:3448): user pid=13234 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=42267 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=USER_AUTH msg=audit(1398701101.483:3449): user pid=13234 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=8b:2d:a5:06:3e:34:8a:e0:bf:ca:69:94:eb:59:f0:19 rport=42267 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=USER_ACCT msg=audit(1398701101.490:3450): user pid=13234 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701101.491:3451): user pid=13234 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=13237 suid=74 rport=42267 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=USER_AUTH msg=audit(1398701101.492:3452): user pid=13234 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=ssh res=success'
>type=CRED_ACQ msg=audit(1398701101.493:3453): user pid=13234 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=LOGIN msg=audit(1398701101.493:3454): pid=13234 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=137
>type=USER_ROLE_CHANGE msg=audit(1398701101.610:3455): user pid=13234 uid=0 auid=0 ses=137 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_START msg=audit(1398701101.616:3456): user pid=13234 uid=0 auid=0 ses=137 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_LOGIN msg=audit(1398701101.625:3457): user pid=13234 uid=0 auid=0 ses=137 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_START msg=audit(1398701101.625:3458): user pid=13234 uid=0 auid=0 ses=137 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701101.629:3459): user pid=13242 uid=0 auid=0 ses=137 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=13242 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701101.629:3460): user pid=13242 uid=0 auid=0 ses=137 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=13242 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRED_REFR msg=audit(1398701101.630:3461): user pid=13242 uid=0 auid=0 ses=137 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_END msg=audit(1398701101.681:3462): user pid=13234 uid=0 auid=0 ses=137 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=CRED_DISP msg=audit(1398701101.681:3463): user pid=13234 uid=0 auid=0 ses=137 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_END msg=audit(1398701101.682:3464): user pid=13234 uid=0 auid=0 ses=137 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_LOGOUT msg=audit(1398701101.682:3465): user pid=13234 uid=0 auid=0 ses=137 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701101.683:3466): user pid=13234 uid=0 auid=0 ses=137 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=13234 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701101.683:3467): user pid=13234 uid=0 auid=0 ses=137 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=13234 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701101.683:3468): user pid=13234 uid=0 auid=0 ses=137 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=13234 suid=0 rport=42267 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=USER_ACCT msg=audit(1398701101.925:3469): user pid=13253 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=USER_ACCT msg=audit(1398701101.925:3470): user pid=13252 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=CRED_ACQ msg=audit(1398701101.925:3471): user pid=13253 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=CRED_ACQ msg=audit(1398701101.925:3472): user pid=13252 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=LOGIN msg=audit(1398701101.933:3473): pid=13252 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=138
>type=LOGIN msg=audit(1398701101.933:3474): pid=13253 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=139
>type=USER_START msg=audit(1398701101.936:3475): user pid=13253 uid=0 auid=0 ses=139 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=USER_START msg=audit(1398701101.936:3476): user pid=13252 uid=0 auid=0 ses=138 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=CRED_DISP msg=audit(1398701101.973:3477): user pid=13252 uid=0 auid=0 ses=138 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=USER_END msg=audit(1398701101.973:3478): user pid=13252 uid=0 auid=0 ses=138 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=CRED_DISP msg=audit(1398701102.456:3479): user pid=13253 uid=0 auid=0 ses=139 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=USER_END msg=audit(1398701102.457:3480): user pid=13253 uid=0 auid=0 ses=139 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701104.704:3481): user pid=13328 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=13328 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701104.704:3482): user pid=13328 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=13328 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_SESSION msg=audit(1398701104.706:3483): user pid=13327 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 spid=13328 suid=74 rport=42279 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_SESSION msg=audit(1398701104.706:3484): user pid=13327 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 spid=13328 suid=74 rport=42279 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=USER_AUTH msg=audit(1398701104.767:3485): user pid=13327 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=42279 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=USER_AUTH msg=audit(1398701104.767:3486): user pid=13327 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=8b:2d:a5:06:3e:34:8a:e0:bf:ca:69:94:eb:59:f0:19 rport=42279 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=USER_ACCT msg=audit(1398701104.779:3487): user pid=13327 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701104.780:3488): user pid=13327 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=13328 suid=74 rport=42279 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=USER_AUTH msg=audit(1398701104.781:3489): user pid=13327 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=ssh res=success'
>type=CRED_ACQ msg=audit(1398701104.781:3490): user pid=13327 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=LOGIN msg=audit(1398701104.781:3491): pid=13327 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=140
>type=USER_ROLE_CHANGE msg=audit(1398701104.887:3492): user pid=13327 uid=0 auid=0 ses=140 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_START msg=audit(1398701104.891:3493): user pid=13327 uid=0 auid=0 ses=140 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_LOGIN msg=audit(1398701104.899:3494): user pid=13327 uid=0 auid=0 ses=140 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_START msg=audit(1398701104.900:3495): user pid=13327 uid=0 auid=0 ses=140 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701104.903:3496): user pid=13332 uid=0 auid=0 ses=140 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=13332 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701104.903:3497): user pid=13332 uid=0 auid=0 ses=140 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=13332 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRED_REFR msg=audit(1398701104.906:3498): user pid=13332 uid=0 auid=0 ses=140 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_END msg=audit(1398701104.939:3499): user pid=13327 uid=0 auid=0 ses=140 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=CRED_DISP msg=audit(1398701104.940:3500): user pid=13327 uid=0 auid=0 ses=140 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_END msg=audit(1398701104.941:3501): user pid=13327 uid=0 auid=0 ses=140 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_LOGOUT msg=audit(1398701104.941:3502): user pid=13327 uid=0 auid=0 ses=140 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701104.941:3503): user pid=13327 uid=0 auid=0 ses=140 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=13327 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701104.941:3504): user pid=13327 uid=0 auid=0 ses=140 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=13327 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701104.941:3505): user pid=13327 uid=0 auid=0 ses=140 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=13327 suid=0 rport=42279 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=NETFILTER_CFG msg=audit(1398701106.103:3506): table=filter family=2 entries=0
>type=SYSCALL msg=audit(1398701106.103:3506): arch=c000003e syscall=272 success=yes exit=0 a0=40000000 a1=c0 a2=0 a3=7fff80f82d30 items=0 ppid=13519 pid=13526 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=132 comm="ip" exe="/sbin/ip" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null)
>type=NETFILTER_CFG msg=audit(1398701106.136:3507): table=filter family=2 entries=0
>type=SYSCALL msg=audit(1398701106.136:3507): arch=c000003e syscall=272 success=yes exit=0 a0=40000000 a1=c0 a2=0 a3=7fff9f765130 items=0 ppid=13519 pid=13530 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=132 comm="ip" exe="/sbin/ip" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null)
>type=NETFILTER_CFG msg=audit(1398701106.465:3508): table=filter family=2 entries=0
>type=SYSCALL msg=audit(1398701106.465:3508): arch=c000003e syscall=272 success=yes exit=0 a0=40000000 a1=c0 a2=0 a3=7fff4e522e60 items=0 ppid=13519 pid=13532 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=132 comm="ip" exe="/sbin/ip" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null)
>type=CRYPTO_KEY_USER msg=audit(1398701107.970:3509): user pid=13660 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=13660 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701107.970:3510): user pid=13660 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=13660 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_SESSION msg=audit(1398701107.971:3511): user pid=13659 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 spid=13660 suid=74 rport=42281 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_SESSION msg=audit(1398701107.971:3512): user pid=13659 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 spid=13660 suid=74 rport=42281 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=USER_AUTH msg=audit(1398701108.034:3513): user pid=13659 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=42281 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=USER_AUTH msg=audit(1398701108.034:3514): user pid=13659 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=8b:2d:a5:06:3e:34:8a:e0:bf:ca:69:94:eb:59:f0:19 rport=42281 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=USER_ACCT msg=audit(1398701108.039:3515): user pid=13659 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701108.040:3516): user pid=13659 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=13660 suid=74 rport=42281 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=USER_AUTH msg=audit(1398701108.041:3517): user pid=13659 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=ssh res=success'
>type=CRED_ACQ msg=audit(1398701108.041:3518): user pid=13659 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=LOGIN msg=audit(1398701108.041:3519): pid=13659 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=141
>type=USER_ROLE_CHANGE msg=audit(1398701108.139:3520): user pid=13659 uid=0 auid=0 ses=141 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_START msg=audit(1398701108.142:3521): user pid=13659 uid=0 auid=0 ses=141 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_LOGIN msg=audit(1398701108.150:3522): user pid=13659 uid=0 auid=0 ses=141 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_START msg=audit(1398701108.151:3523): user pid=13659 uid=0 auid=0 ses=141 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701108.154:3524): user pid=13662 uid=0 auid=0 ses=141 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=13662 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701108.154:3525): user pid=13662 uid=0 auid=0 ses=141 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=13662 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRED_REFR msg=audit(1398701108.156:3526): user pid=13662 uid=0 auid=0 ses=141 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_END msg=audit(1398701108.194:3527): user pid=13659 uid=0 auid=0 ses=141 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=CRED_DISP msg=audit(1398701108.195:3528): user pid=13659 uid=0 auid=0 ses=141 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_END msg=audit(1398701108.196:3529): user pid=13659 uid=0 auid=0 ses=141 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_LOGOUT msg=audit(1398701108.196:3530): user pid=13659 uid=0 auid=0 ses=141 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701108.196:3531): user pid=13659 uid=0 auid=0 ses=141 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=13659 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701108.196:3532): user pid=13659 uid=0 auid=0 ses=141 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=13659 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701108.196:3533): user pid=13659 uid=0 auid=0 ses=141 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=13659 suid=0 rport=42281 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=NETFILTER_CFG msg=audit(1398701108.931:3534): table=filter family=2 entries=0
>type=SYSCALL msg=audit(1398701108.931:3534): arch=c000003e syscall=272 success=yes exit=0 a0=40000000 a1=c0 a2=0 a3=7fff0cad6b80 items=0 ppid=13836 pid=13843 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=132 comm="ip" exe="/sbin/ip" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null)
>type=NETFILTER_CFG msg=audit(1398701108.970:3535): table=filter family=2 entries=0
>type=SYSCALL msg=audit(1398701108.970:3535): arch=c000003e syscall=272 success=yes exit=0 a0=40000000 a1=c0 a2=0 a3=7fff4d8944c0 items=0 ppid=13836 pid=13847 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=132 comm="ip" exe="/sbin/ip" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null)
>type=NETFILTER_CFG msg=audit(1398701109.299:3536): table=filter family=2 entries=0
>type=SYSCALL msg=audit(1398701109.299:3536): arch=c000003e syscall=272 success=yes exit=0 a0=40000000 a1=c0 a2=0 a3=7fff06bf7020 items=0 ppid=13836 pid=13849 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=132 comm="ip" exe="/sbin/ip" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null)
>type=CRYPTO_KEY_USER msg=audit(1398701111.213:3537): user pid=14011 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=14011 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701111.213:3538): user pid=14011 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=14011 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_SESSION msg=audit(1398701111.213:3539): user pid=14010 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 spid=14011 suid=74 rport=42282 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_SESSION msg=audit(1398701111.214:3540): user pid=14010 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 spid=14011 suid=74 rport=42282 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=USER_AUTH msg=audit(1398701111.281:3541): user pid=14010 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=42282 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=USER_AUTH msg=audit(1398701111.281:3542): user pid=14010 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=8b:2d:a5:06:3e:34:8a:e0:bf:ca:69:94:eb:59:f0:19 rport=42282 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=USER_ACCT msg=audit(1398701111.287:3543): user pid=14010 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701111.288:3544): user pid=14010 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=14011 suid=74 rport=42282 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=USER_AUTH msg=audit(1398701111.289:3545): user pid=14010 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=ssh res=success'
>type=CRED_ACQ msg=audit(1398701111.289:3546): user pid=14010 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=LOGIN msg=audit(1398701111.290:3547): pid=14010 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=142
>type=USER_ROLE_CHANGE msg=audit(1398701111.405:3548): user pid=14010 uid=0 auid=0 ses=142 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_START msg=audit(1398701111.410:3549): user pid=14010 uid=0 auid=0 ses=142 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_LOGIN msg=audit(1398701111.419:3550): user pid=14010 uid=0 auid=0 ses=142 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_START msg=audit(1398701111.419:3551): user pid=14010 uid=0 auid=0 ses=142 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701111.420:3552): user pid=14060 uid=0 auid=0 ses=142 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=14060 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701111.420:3553): user pid=14060 uid=0 auid=0 ses=142 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=14060 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRED_REFR msg=audit(1398701111.421:3554): user pid=14060 uid=0 auid=0 ses=142 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_END msg=audit(1398701111.455:3555): user pid=14010 uid=0 auid=0 ses=142 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=CRED_DISP msg=audit(1398701111.455:3556): user pid=14010 uid=0 auid=0 ses=142 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_END msg=audit(1398701111.456:3557): user pid=14010 uid=0 auid=0 ses=142 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_LOGOUT msg=audit(1398701111.456:3558): user pid=14010 uid=0 auid=0 ses=142 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701111.456:3559): user pid=14010 uid=0 auid=0 ses=142 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=14010 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701111.456:3560): user pid=14010 uid=0 auid=0 ses=142 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=14010 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701111.456:3561): user pid=14010 uid=0 auid=0 ses=142 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=14010 suid=0 rport=42282 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701111.512:3562): user pid=14123 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=14123 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701111.512:3563): user pid=14123 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=14123 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_SESSION msg=audit(1398701111.512:3564): user pid=14118 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 spid=14123 suid=74 rport=42283 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_SESSION msg=audit(1398701111.513:3565): user pid=14118 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 spid=14123 suid=74 rport=42283 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=USER_AUTH msg=audit(1398701111.568:3566): user pid=14118 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=42283 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=USER_AUTH msg=audit(1398701111.569:3567): user pid=14118 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=8b:2d:a5:06:3e:34:8a:e0:bf:ca:69:94:eb:59:f0:19 rport=42283 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=USER_ACCT msg=audit(1398701111.575:3568): user pid=14118 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701111.575:3569): user pid=14118 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=14123 suid=74 rport=42283 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=USER_AUTH msg=audit(1398701111.576:3570): user pid=14118 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=ssh res=success'
>type=CRED_ACQ msg=audit(1398701111.576:3571): user pid=14118 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=LOGIN msg=audit(1398701111.577:3572): pid=14118 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=143
>type=USER_ROLE_CHANGE msg=audit(1398701111.683:3573): user pid=14118 uid=0 auid=0 ses=143 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_START msg=audit(1398701111.688:3574): user pid=14118 uid=0 auid=0 ses=143 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_LOGIN msg=audit(1398701111.695:3575): user pid=14118 uid=0 auid=0 ses=143 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_START msg=audit(1398701111.696:3576): user pid=14118 uid=0 auid=0 ses=143 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701111.697:3577): user pid=14196 uid=0 auid=0 ses=143 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=14196 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701111.697:3578): user pid=14196 uid=0 auid=0 ses=143 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=14196 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRED_REFR msg=audit(1398701111.698:3579): user pid=14196 uid=0 auid=0 ses=143 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=NETFILTER_CFG msg=audit(1398701111.717:3580): table=filter family=2 entries=0
>type=SYSCALL msg=audit(1398701111.717:3580): arch=c000003e syscall=272 success=yes exit=0 a0=40000000 a1=c0 a2=0 a3=7fffc792f780 items=0 ppid=14191 pid=14199 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=133 comm="ip" exe="/sbin/ip" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null)
>type=USER_END msg=audit(1398701111.768:3581): user pid=14118 uid=0 auid=0 ses=143 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=CRED_DISP msg=audit(1398701111.769:3582): user pid=14118 uid=0 auid=0 ses=143 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_END msg=audit(1398701111.769:3583): user pid=14118 uid=0 auid=0 ses=143 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_LOGOUT msg=audit(1398701111.770:3584): user pid=14118 uid=0 auid=0 ses=143 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701111.770:3585): user pid=14118 uid=0 auid=0 ses=143 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=14118 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701111.770:3586): user pid=14118 uid=0 auid=0 ses=143 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=14118 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701111.770:3587): user pid=14118 uid=0 auid=0 ses=143 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=14118 suid=0 rport=42283 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=USER_END msg=audit(1398701111.792:3588): user pid=9934 uid=0 auid=0 ses=97 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'
>type=USER_END msg=audit(1398701111.800:3589): user pid=9934 uid=0 auid=0 ses=97 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=USER_LOGOUT msg=audit(1398701111.800:3590): user pid=9934 uid=0 auid=0 ses=97 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=USER_END msg=audit(1398701111.802:3591): user pid=9934 uid=0 auid=0 ses=97 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=CRED_DISP msg=audit(1398701111.803:3592): user pid=9934 uid=0 auid=0 ses=97 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701111.803:3593): user pid=9934 uid=0 auid=0 ses=97 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=9934 suid=0 rport=38274 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701111.803:3594): user pid=9934 uid=0 auid=0 ses=97 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=9934 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701111.803:3595): user pid=9934 uid=0 auid=0 ses=97 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=9934 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701111.816:3596): user pid=14208 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=14208 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701111.816:3597): user pid=14208 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=14208 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=CRYPTO_SESSION msg=audit(1398701111.817:3598): user pid=14207 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 spid=14208 suid=74 rport=38281 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=CRYPTO_SESSION msg=audit(1398701111.817:3599): user pid=14207 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 spid=14208 suid=74 rport=38281 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=USER_AUTH msg=audit(1398701112.010:3600): user pid=14207 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=38281 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=USER_AUTH msg=audit(1398701112.012:3601): user pid=14207 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=e7:e2:3d:94:48:cf:f5:8c:5e:54:98:bd:89:a5:29:a9 rport=38281 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=USER_ACCT msg=audit(1398701112.019:3602): user pid=14207 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701112.019:3603): user pid=14207 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=14208 suid=74 rport=38281 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=USER_AUTH msg=audit(1398701112.020:3604): user pid=14207 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=ssh res=success'
>type=CRED_ACQ msg=audit(1398701112.021:3605): user pid=14207 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=LOGIN msg=audit(1398701112.021:3606): pid=14207 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=144
>type=USER_ROLE_CHANGE msg=audit(1398701112.134:3607): user pid=14207 uid=0 auid=0 ses=144 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=NETFILTER_CFG msg=audit(1398701111.787:3608): table=filter family=2 entries=0
>type=SYSCALL msg=audit(1398701111.787:3608): arch=c000003e syscall=272 success=yes exit=0 a0=40000000 a1=c0 a2=0 a3=7fff058d2e60 items=0 ppid=14191 pid=14206 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=133 comm="ip" exe="/sbin/ip" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null)
>type=USER_START msg=audit(1398701112.143:3609): user pid=14207 uid=0 auid=0 ses=144 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=USER_LOGIN msg=audit(1398701112.154:3610): user pid=14207 uid=0 auid=0 ses=144 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=USER_START msg=audit(1398701112.154:3611): user pid=14207 uid=0 auid=0 ses=144 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701112.158:3612): user pid=14210 uid=0 auid=0 ses=144 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=14210 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701112.158:3613): user pid=14210 uid=0 auid=0 ses=144 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=14210 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=CRED_REFR msg=audit(1398701112.160:3614): user pid=14210 uid=0 auid=0 ses=144 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=NETFILTER_CFG msg=audit(1398701112.179:3615): table=filter family=2 entries=0
>type=SYSCALL msg=audit(1398701112.179:3615): arch=c000003e syscall=272 success=yes exit=0 a0=40000000 a1=c0 a2=0 a3=7fffdb736f00 items=0 ppid=14191 pid=14216 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=133 comm="ip" exe="/sbin/ip" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null)
>type=USER_END msg=audit(1398701113.187:3616): user pid=14207 uid=0 auid=0 ses=144 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=USER_LOGOUT msg=audit(1398701113.187:3617): user pid=14207 uid=0 auid=0 ses=144 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=USER_END msg=audit(1398701113.284:3618): user pid=14207 uid=0 auid=0 ses=144 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=CRED_DISP msg=audit(1398701113.285:3619): user pid=14207 uid=0 auid=0 ses=144 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701113.285:3620): user pid=14207 uid=0 auid=0 ses=144 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=14207 suid=0 rport=38281 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701113.285:3621): user pid=14207 uid=0 auid=0 ses=144 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=14207 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701113.286:3622): user pid=14207 uid=0 auid=0 ses=144 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=14207 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701113.293:3623): user pid=14338 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=14338 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701113.293:3624): user pid=14338 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=14338 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=CRYPTO_SESSION msg=audit(1398701113.294:3625): user pid=14337 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 spid=14338 suid=74 rport=38283 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=CRYPTO_SESSION msg=audit(1398701113.294:3626): user pid=14337 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 spid=14338 suid=74 rport=38283 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=USER_AUTH msg=audit(1398701113.483:3627): user pid=14337 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=38283 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=USER_AUTH msg=audit(1398701113.483:3628): user pid=14337 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=e7:e2:3d:94:48:cf:f5:8c:5e:54:98:bd:89:a5:29:a9 rport=38283 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=USER_ACCT msg=audit(1398701113.490:3629): user pid=14337 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701113.491:3630): user pid=14337 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=14338 suid=74 rport=38283 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=USER_AUTH msg=audit(1398701113.491:3631): user pid=14337 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=ssh res=success'
>type=CRED_ACQ msg=audit(1398701113.492:3632): user pid=14337 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=LOGIN msg=audit(1398701113.492:3633): pid=14337 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=145
>type=USER_ROLE_CHANGE msg=audit(1398701113.588:3634): user pid=14337 uid=0 auid=0 ses=145 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=USER_START msg=audit(1398701113.594:3635): user pid=14337 uid=0 auid=0 ses=145 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=USER_LOGIN msg=audit(1398701113.598:3636): user pid=14337 uid=0 auid=0 ses=145 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=USER_START msg=audit(1398701113.599:3637): user pid=14337 uid=0 auid=0 ses=145 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701113.600:3638): user pid=14340 uid=0 auid=0 ses=145 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=14340 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701113.600:3639): user pid=14340 uid=0 auid=0 ses=145 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=14340 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=CRED_REFR msg=audit(1398701113.601:3640): user pid=14340 uid=0 auid=0 ses=145 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=USER_END msg=audit(1398701113.643:3641): user pid=14337 uid=0 auid=0 ses=145 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=USER_LOGOUT msg=audit(1398701113.644:3642): user pid=14337 uid=0 auid=0 ses=145 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=USER_END msg=audit(1398701113.744:3643): user pid=14337 uid=0 auid=0 ses=145 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=CRED_DISP msg=audit(1398701113.744:3644): user pid=14337 uid=0 auid=0 ses=145 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701113.745:3645): user pid=14337 uid=0 auid=0 ses=145 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=14337 suid=0 rport=38283 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701113.745:3646): user pid=14337 uid=0 auid=0 ses=145 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=14337 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701113.745:3647): user pid=14337 uid=0 auid=0 ses=145 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=14337 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701113.753:3648): user pid=14346 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=14346 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701113.753:3649): user pid=14346 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=14346 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=CRYPTO_SESSION msg=audit(1398701113.754:3650): user pid=14345 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 spid=14346 suid=74 rport=38284 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=CRYPTO_SESSION msg=audit(1398701113.754:3651): user pid=14345 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 spid=14346 suid=74 rport=38284 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=USER_AUTH msg=audit(1398701113.943:3652): user pid=14345 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=38284 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=USER_AUTH msg=audit(1398701113.943:3653): user pid=14345 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=e7:e2:3d:94:48:cf:f5:8c:5e:54:98:bd:89:a5:29:a9 rport=38284 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=USER_ACCT msg=audit(1398701113.951:3654): user pid=14345 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701113.952:3655): user pid=14345 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=14346 suid=74 rport=38284 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=USER_AUTH msg=audit(1398701113.953:3656): user pid=14345 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=ssh res=success'
>type=CRED_ACQ msg=audit(1398701113.953:3657): user pid=14345 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=LOGIN msg=audit(1398701113.953:3658): pid=14345 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=146
>type=USER_ROLE_CHANGE msg=audit(1398701114.060:3659): user pid=14345 uid=0 auid=0 ses=146 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=USER_START msg=audit(1398701114.065:3660): user pid=14345 uid=0 auid=0 ses=146 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=USER_LOGIN msg=audit(1398701114.071:3661): user pid=14345 uid=0 auid=0 ses=146 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=USER_START msg=audit(1398701114.072:3662): user pid=14345 uid=0 auid=0 ses=146 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701114.073:3663): user pid=14348 uid=0 auid=0 ses=146 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=14348 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701114.073:3664): user pid=14348 uid=0 auid=0 ses=146 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=14348 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=CRED_REFR msg=audit(1398701114.074:3665): user pid=14348 uid=0 auid=0 ses=146 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=USER_END msg=audit(1398701114.701:3666): user pid=14345 uid=0 auid=0 ses=146 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=USER_LOGOUT msg=audit(1398701114.702:3667): user pid=14345 uid=0 auid=0 ses=146 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=USER_END msg=audit(1398701114.804:3668): user pid=14345 uid=0 auid=0 ses=146 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=CRED_DISP msg=audit(1398701114.805:3669): user pid=14345 uid=0 auid=0 ses=146 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701114.805:3670): user pid=14345 uid=0 auid=0 ses=146 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=14345 suid=0 rport=38284 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701114.805:3671): user pid=14345 uid=0 auid=0 ses=146 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=14345 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701114.805:3672): user pid=14345 uid=0 auid=0 ses=146 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=14345 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701114.817:3673): user pid=14355 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=14355 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701114.818:3674): user pid=14355 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=14355 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=CRYPTO_SESSION msg=audit(1398701114.818:3675): user pid=14354 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 spid=14355 suid=74 rport=38285 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=CRYPTO_SESSION msg=audit(1398701114.818:3676): user pid=14354 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 spid=14355 suid=74 rport=38285 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=USER_AUTH msg=audit(1398701115.014:3677): user pid=14354 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=38285 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=USER_AUTH msg=audit(1398701115.014:3678): user pid=14354 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=e7:e2:3d:94:48:cf:f5:8c:5e:54:98:bd:89:a5:29:a9 rport=38285 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=USER_ACCT msg=audit(1398701115.025:3679): user pid=14354 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701115.026:3680): user pid=14354 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=14355 suid=74 rport=38285 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=USER_AUTH msg=audit(1398701115.027:3681): user pid=14354 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=ssh res=success'
>type=CRED_ACQ msg=audit(1398701115.028:3682): user pid=14354 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=LOGIN msg=audit(1398701115.028:3683): pid=14354 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=147
>type=USER_ROLE_CHANGE msg=audit(1398701115.231:3684): user pid=14354 uid=0 auid=0 ses=147 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=USER_START msg=audit(1398701115.238:3685): user pid=14354 uid=0 auid=0 ses=147 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=USER_LOGIN msg=audit(1398701115.260:3686): user pid=14354 uid=0 auid=0 ses=147 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=USER_START msg=audit(1398701115.260:3687): user pid=14354 uid=0 auid=0 ses=147 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701115.262:3688): user pid=14357 uid=0 auid=0 ses=147 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=14357 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701115.262:3689): user pid=14357 uid=0 auid=0 ses=147 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=14357 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=CRED_REFR msg=audit(1398701115.263:3690): user pid=14357 uid=0 auid=0 ses=147 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=USER_END msg=audit(1398701117.245:3691): user pid=14354 uid=0 auid=0 ses=147 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=USER_LOGOUT msg=audit(1398701117.245:3692): user pid=14354 uid=0 auid=0 ses=147 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=USER_END msg=audit(1398701117.343:3693): user pid=14354 uid=0 auid=0 ses=147 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=CRED_DISP msg=audit(1398701117.344:3694): user pid=14354 uid=0 auid=0 ses=147 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701117.344:3695): user pid=14354 uid=0 auid=0 ses=147 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=14354 suid=0 rport=38285 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701117.344:3696): user pid=14354 uid=0 auid=0 ses=147 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=14354 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701117.344:3697): user pid=14354 uid=0 auid=0 ses=147 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=14354 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701117.352:3698): user pid=14364 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=14364 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701117.352:3699): user pid=14364 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=14364 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=CRYPTO_SESSION msg=audit(1398701117.353:3700): user pid=14363 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 spid=14364 suid=74 rport=38286 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=CRYPTO_SESSION msg=audit(1398701117.353:3701): user pid=14363 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 spid=14364 suid=74 rport=38286 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=USER_AUTH msg=audit(1398701117.542:3702): user pid=14363 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=38286 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=USER_AUTH msg=audit(1398701117.543:3703): user pid=14363 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=e7:e2:3d:94:48:cf:f5:8c:5e:54:98:bd:89:a5:29:a9 rport=38286 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=USER_ACCT msg=audit(1398701117.550:3704): user pid=14363 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701117.550:3705): user pid=14363 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=14364 suid=74 rport=38286 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=USER_AUTH msg=audit(1398701117.551:3706): user pid=14363 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=ssh res=success'
>type=CRED_ACQ msg=audit(1398701117.551:3707): user pid=14363 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=LOGIN msg=audit(1398701117.551:3708): pid=14363 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=148
>type=USER_ROLE_CHANGE msg=audit(1398701117.641:3709): user pid=14363 uid=0 auid=0 ses=148 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=USER_START msg=audit(1398701117.645:3710): user pid=14363 uid=0 auid=0 ses=148 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=USER_LOGIN msg=audit(1398701117.655:3711): user pid=14363 uid=0 auid=0 ses=148 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=USER_START msg=audit(1398701117.655:3712): user pid=14363 uid=0 auid=0 ses=148 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701117.656:3713): user pid=14366 uid=0 auid=0 ses=148 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=14366 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701117.656:3714): user pid=14366 uid=0 auid=0 ses=148 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=14366 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=CRED_REFR msg=audit(1398701117.657:3715): user pid=14366 uid=0 auid=0 ses=148 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=USER_END msg=audit(1398701117.700:3716): user pid=14363 uid=0 auid=0 ses=148 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=USER_LOGOUT msg=audit(1398701117.700:3717): user pid=14363 uid=0 auid=0 ses=148 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=USER_END msg=audit(1398701117.701:3718): user pid=14363 uid=0 auid=0 ses=148 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=CRED_DISP msg=audit(1398701117.702:3719): user pid=14363 uid=0 auid=0 ses=148 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701117.702:3720): user pid=14363 uid=0 auid=0 ses=148 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=14363 suid=0 rport=38286 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701117.702:3721): user pid=14363 uid=0 auid=0 ses=148 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=14363 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701117.702:3722): user pid=14363 uid=0 auid=0 ses=148 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=14363 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701117.708:3723): user pid=14372 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=14372 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701117.709:3724): user pid=14372 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=14372 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=CRYPTO_SESSION msg=audit(1398701117.710:3725): user pid=14371 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 spid=14372 suid=74 rport=38287 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=CRYPTO_SESSION msg=audit(1398701117.710:3726): user pid=14371 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 spid=14372 suid=74 rport=38287 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=USER_AUTH msg=audit(1398701117.903:3727): user pid=14371 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=38287 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=USER_AUTH msg=audit(1398701117.903:3728): user pid=14371 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=e7:e2:3d:94:48:cf:f5:8c:5e:54:98:bd:89:a5:29:a9 rport=38287 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=USER_ACCT msg=audit(1398701117.910:3729): user pid=14371 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701117.911:3730): user pid=14371 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=14372 suid=74 rport=38287 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=USER_AUTH msg=audit(1398701117.911:3731): user pid=14371 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=ssh res=success'
>type=CRED_ACQ msg=audit(1398701117.912:3732): user pid=14371 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=LOGIN msg=audit(1398701117.912:3733): pid=14371 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=149
>type=USER_ROLE_CHANGE msg=audit(1398701118.004:3734): user pid=14371 uid=0 auid=0 ses=149 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=USER_START msg=audit(1398701118.007:3735): user pid=14371 uid=0 auid=0 ses=149 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=USER_LOGIN msg=audit(1398701118.016:3736): user pid=14371 uid=0 auid=0 ses=149 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=USER_START msg=audit(1398701118.019:3737): user pid=14371 uid=0 auid=0 ses=149 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701118.020:3738): user pid=14374 uid=0 auid=0 ses=149 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=14374 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701118.020:3739): user pid=14374 uid=0 auid=0 ses=149 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=14374 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=CRED_REFR msg=audit(1398701118.021:3740): user pid=14374 uid=0 auid=0 ses=149 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=USER_START msg=audit(1398701120.495:3741): user pid=14605 uid=0 auid=0 ses=149 subj=unconfined_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="qpidd" exe="/sbin/runuser" hostname=? addr=? terminal=? res=success'
>type=CRED_ACQ msg=audit(1398701120.495:3742): user pid=14605 uid=0 auid=0 ses=149 subj=unconfined_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="qpidd" exe="/sbin/runuser" hostname=? addr=? terminal=? res=success'
>type=CRED_DISP msg=audit(1398701120.498:3743): user pid=14605 uid=0 auid=0 ses=149 subj=unconfined_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="qpidd" exe="/sbin/runuser" hostname=? addr=? terminal=? res=success'
>type=USER_END msg=audit(1398701120.498:3744): user pid=14605 uid=0 auid=0 ses=149 subj=unconfined_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="qpidd" exe="/sbin/runuser" hostname=? addr=? terminal=? res=success'
>type=USER_START msg=audit(1398701121.019:3745): user pid=14864 uid=0 auid=0 ses=149 subj=unconfined_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="qpidd" exe="/sbin/runuser" hostname=? addr=? terminal=? res=success'
>type=CRED_ACQ msg=audit(1398701121.020:3746): user pid=14864 uid=0 auid=0 ses=149 subj=unconfined_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="qpidd" exe="/sbin/runuser" hostname=? addr=? terminal=? res=success'
>type=CRED_DISP msg=audit(1398701121.022:3747): user pid=14864 uid=0 auid=0 ses=149 subj=unconfined_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="qpidd" exe="/sbin/runuser" hostname=? addr=? terminal=? res=success'
>type=USER_END msg=audit(1398701121.022:3748): user pid=14864 uid=0 auid=0 ses=149 subj=unconfined_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="qpidd" exe="/sbin/runuser" hostname=? addr=? terminal=? res=success'
>type=USER_END msg=audit(1398701121.227:3749): user pid=14371 uid=0 auid=0 ses=149 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=USER_LOGOUT msg=audit(1398701121.228:3750): user pid=14371 uid=0 auid=0 ses=149 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=USER_END msg=audit(1398701121.324:3751): user pid=14371 uid=0 auid=0 ses=149 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=CRED_DISP msg=audit(1398701121.324:3752): user pid=14371 uid=0 auid=0 ses=149 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701121.325:3753): user pid=14371 uid=0 auid=0 ses=149 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=14371 suid=0 rport=38287 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701121.325:3754): user pid=14371 uid=0 auid=0 ses=149 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=14371 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701121.325:3755): user pid=14371 uid=0 auid=0 ses=149 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=14371 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701121.332:3756): user pid=14931 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=14931 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701121.332:3757): user pid=14931 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=14931 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=CRYPTO_SESSION msg=audit(1398701121.333:3758): user pid=14930 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 spid=14931 suid=74 rport=38288 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=CRYPTO_SESSION msg=audit(1398701121.333:3759): user pid=14930 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 spid=14931 suid=74 rport=38288 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=USER_AUTH msg=audit(1398701121.523:3760): user pid=14930 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=38288 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=USER_AUTH msg=audit(1398701121.523:3761): user pid=14930 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=e7:e2:3d:94:48:cf:f5:8c:5e:54:98:bd:89:a5:29:a9 rport=38288 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=USER_ACCT msg=audit(1398701121.531:3762): user pid=14930 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701121.533:3763): user pid=14930 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=14931 suid=74 rport=38288 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=USER_AUTH msg=audit(1398701121.534:3764): user pid=14930 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=ssh res=success'
>type=CRED_ACQ msg=audit(1398701121.535:3765): user pid=14930 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=LOGIN msg=audit(1398701121.535:3766): pid=14930 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=150
>type=USER_ROLE_CHANGE msg=audit(1398701121.644:3767): user pid=14930 uid=0 auid=0 ses=150 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=USER_START msg=audit(1398701121.647:3768): user pid=14930 uid=0 auid=0 ses=150 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=USER_LOGIN msg=audit(1398701121.669:3769): user pid=14930 uid=0 auid=0 ses=150 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=USER_START msg=audit(1398701121.670:3770): user pid=14930 uid=0 auid=0 ses=150 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701121.672:3771): user pid=14933 uid=0 auid=0 ses=150 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=14933 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701121.672:3772): user pid=14933 uid=0 auid=0 ses=150 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=14933 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=CRED_REFR msg=audit(1398701121.673:3773): user pid=14933 uid=0 auid=0 ses=150 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=USER_END msg=audit(1398701121.708:3774): user pid=14930 uid=0 auid=0 ses=150 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=USER_LOGOUT msg=audit(1398701121.708:3775): user pid=14930 uid=0 auid=0 ses=150 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=USER_END msg=audit(1398701121.808:3776): user pid=14930 uid=0 auid=0 ses=150 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=CRED_DISP msg=audit(1398701121.809:3777): user pid=14930 uid=0 auid=0 ses=150 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701121.809:3778): user pid=14930 uid=0 auid=0 ses=150 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=14930 suid=0 rport=38288 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701121.809:3779): user pid=14930 uid=0 auid=0 ses=150 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=14930 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701121.810:3780): user pid=14930 uid=0 auid=0 ses=150 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=14930 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701121.816:3781): user pid=14939 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=14939 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701121.816:3782): user pid=14939 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=14939 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=CRYPTO_SESSION msg=audit(1398701121.817:3783): user pid=14938 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 spid=14939 suid=74 rport=38289 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=CRYPTO_SESSION msg=audit(1398701121.817:3784): user pid=14938 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 spid=14939 suid=74 rport=38289 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=USER_AUTH msg=audit(1398701122.012:3785): user pid=14938 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=38289 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=USER_AUTH msg=audit(1398701122.013:3786): user pid=14938 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=e7:e2:3d:94:48:cf:f5:8c:5e:54:98:bd:89:a5:29:a9 rport=38289 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=USER_ACCT msg=audit(1398701122.020:3787): user pid=14938 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701122.020:3788): user pid=14938 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=14939 suid=74 rport=38289 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=USER_AUTH msg=audit(1398701122.021:3789): user pid=14938 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=ssh res=success'
>type=CRED_ACQ msg=audit(1398701122.022:3790): user pid=14938 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=LOGIN msg=audit(1398701122.022:3791): pid=14938 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=151
>type=USER_ROLE_CHANGE msg=audit(1398701122.117:3792): user pid=14938 uid=0 auid=0 ses=151 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=USER_START msg=audit(1398701122.120:3793): user pid=14938 uid=0 auid=0 ses=151 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=USER_LOGIN msg=audit(1398701122.157:3794): user pid=14938 uid=0 auid=0 ses=151 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=USER_START msg=audit(1398701122.157:3795): user pid=14938 uid=0 auid=0 ses=151 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701122.158:3796): user pid=14941 uid=0 auid=0 ses=151 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=14941 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701122.158:3797): user pid=14941 uid=0 auid=0 ses=151 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=14941 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=CRED_REFR msg=audit(1398701122.159:3798): user pid=14941 uid=0 auid=0 ses=151 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=USER_END msg=audit(1398701122.195:3799): user pid=14938 uid=0 auid=0 ses=151 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=USER_LOGOUT msg=audit(1398701122.196:3800): user pid=14938 uid=0 auid=0 ses=151 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=USER_END msg=audit(1398701122.296:3801): user pid=14938 uid=0 auid=0 ses=151 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=CRED_DISP msg=audit(1398701122.298:3802): user pid=14938 uid=0 auid=0 ses=151 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701122.299:3803): user pid=14938 uid=0 auid=0 ses=151 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=14938 suid=0 rport=38289 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701122.299:3804): user pid=14938 uid=0 auid=0 ses=151 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=14938 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701122.299:3805): user pid=14938 uid=0 auid=0 ses=151 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=14938 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701122.312:3806): user pid=14947 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=14947 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701122.312:3807): user pid=14947 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=14947 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=CRYPTO_SESSION msg=audit(1398701122.313:3808): user pid=14946 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 spid=14947 suid=74 rport=38290 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=CRYPTO_SESSION msg=audit(1398701122.313:3809): user pid=14946 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 spid=14947 suid=74 rport=38290 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=USER_AUTH msg=audit(1398701122.510:3810): user pid=14946 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=38290 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=USER_AUTH msg=audit(1398701122.510:3811): user pid=14946 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=e7:e2:3d:94:48:cf:f5:8c:5e:54:98:bd:89:a5:29:a9 rport=38290 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=USER_ACCT msg=audit(1398701122.522:3812): user pid=14946 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701122.522:3813): user pid=14946 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=14947 suid=74 rport=38290 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=USER_AUTH msg=audit(1398701122.524:3814): user pid=14946 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=ssh res=success'
>type=CRED_ACQ msg=audit(1398701122.524:3815): user pid=14946 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=LOGIN msg=audit(1398701122.525:3816): pid=14946 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=152
>type=USER_ROLE_CHANGE msg=audit(1398701122.732:3817): user pid=14946 uid=0 auid=0 ses=152 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=USER_START msg=audit(1398701122.738:3818): user pid=14946 uid=0 auid=0 ses=152 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=USER_LOGIN msg=audit(1398701122.756:3819): user pid=14946 uid=0 auid=0 ses=152 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=USER_START msg=audit(1398701122.758:3820): user pid=14946 uid=0 auid=0 ses=152 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701122.759:3821): user pid=14949 uid=0 auid=0 ses=152 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=14949 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701122.759:3822): user pid=14949 uid=0 auid=0 ses=152 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=14949 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=CRED_REFR msg=audit(1398701122.760:3823): user pid=14949 uid=0 auid=0 ses=152 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=USER_END msg=audit(1398701122.805:3824): user pid=14946 uid=0 auid=0 ses=152 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=USER_LOGOUT msg=audit(1398701122.805:3825): user pid=14946 uid=0 auid=0 ses=152 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=USER_END msg=audit(1398701122.904:3826): user pid=14946 uid=0 auid=0 ses=152 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=CRED_DISP msg=audit(1398701122.905:3827): user pid=14946 uid=0 auid=0 ses=152 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701122.905:3828): user pid=14946 uid=0 auid=0 ses=152 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=14946 suid=0 rport=38290 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701122.905:3829): user pid=14946 uid=0 auid=0 ses=152 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=14946 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701122.905:3830): user pid=14946 uid=0 auid=0 ses=152 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=14946 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701122.913:3831): user pid=14955 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=14955 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701122.913:3832): user pid=14955 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=14955 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=CRYPTO_SESSION msg=audit(1398701122.914:3833): user pid=14954 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 spid=14955 suid=74 rport=38292 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=CRYPTO_SESSION msg=audit(1398701122.914:3834): user pid=14954 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 spid=14955 suid=74 rport=38292 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=USER_AUTH msg=audit(1398701123.111:3835): user pid=14954 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=38292 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=USER_AUTH msg=audit(1398701123.111:3836): user pid=14954 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=e7:e2:3d:94:48:cf:f5:8c:5e:54:98:bd:89:a5:29:a9 rport=38292 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=USER_ACCT msg=audit(1398701123.118:3837): user pid=14954 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701123.118:3838): user pid=14954 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=14955 suid=74 rport=38292 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=USER_AUTH msg=audit(1398701123.119:3839): user pid=14954 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=ssh res=success'
>type=CRED_ACQ msg=audit(1398701123.119:3840): user pid=14954 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=LOGIN msg=audit(1398701123.120:3841): pid=14954 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=153
>type=USER_ROLE_CHANGE msg=audit(1398701123.213:3842): user pid=14954 uid=0 auid=0 ses=153 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=USER_START msg=audit(1398701123.218:3843): user pid=14954 uid=0 auid=0 ses=153 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=USER_LOGIN msg=audit(1398701123.221:3844): user pid=14954 uid=0 auid=0 ses=153 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=USER_START msg=audit(1398701123.222:3845): user pid=14954 uid=0 auid=0 ses=153 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701123.223:3846): user pid=14957 uid=0 auid=0 ses=153 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=14957 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701123.223:3847): user pid=14957 uid=0 auid=0 ses=153 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=14957 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=CRED_REFR msg=audit(1398701123.224:3848): user pid=14957 uid=0 auid=0 ses=153 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=USER_END msg=audit(1398701123.268:3849): user pid=14954 uid=0 auid=0 ses=153 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=USER_LOGOUT msg=audit(1398701123.269:3850): user pid=14954 uid=0 auid=0 ses=153 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=USER_END msg=audit(1398701123.367:3851): user pid=14954 uid=0 auid=0 ses=153 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=CRED_DISP msg=audit(1398701123.369:3852): user pid=14954 uid=0 auid=0 ses=153 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701123.369:3853): user pid=14954 uid=0 auid=0 ses=153 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=14954 suid=0 rport=38292 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701123.369:3854): user pid=14954 uid=0 auid=0 ses=153 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=14954 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701123.369:3855): user pid=14954 uid=0 auid=0 ses=153 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=14954 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701123.377:3856): user pid=14963 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=14963 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701123.377:3857): user pid=14963 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=14963 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=CRYPTO_SESSION msg=audit(1398701123.378:3858): user pid=14962 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 spid=14963 suid=74 rport=38293 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=CRYPTO_SESSION msg=audit(1398701123.378:3859): user pid=14962 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 spid=14963 suid=74 rport=38293 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=USER_AUTH msg=audit(1398701123.585:3860): user pid=14962 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=38293 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=USER_AUTH msg=audit(1398701123.586:3861): user pid=14962 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=e7:e2:3d:94:48:cf:f5:8c:5e:54:98:bd:89:a5:29:a9 rport=38293 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=USER_ACCT msg=audit(1398701123.593:3862): user pid=14962 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701123.593:3863): user pid=14962 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=14963 suid=74 rport=38293 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=USER_AUTH msg=audit(1398701123.594:3864): user pid=14962 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=ssh res=success'
>type=CRED_ACQ msg=audit(1398701123.595:3865): user pid=14962 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=LOGIN msg=audit(1398701123.595:3866): pid=14962 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=154
>type=USER_ROLE_CHANGE msg=audit(1398701123.689:3867): user pid=14962 uid=0 auid=0 ses=154 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=USER_START msg=audit(1398701123.693:3868): user pid=14962 uid=0 auid=0 ses=154 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=USER_LOGIN msg=audit(1398701123.697:3869): user pid=14962 uid=0 auid=0 ses=154 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=USER_START msg=audit(1398701123.697:3870): user pid=14962 uid=0 auid=0 ses=154 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701123.698:3871): user pid=14965 uid=0 auid=0 ses=154 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=14965 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701123.699:3872): user pid=14965 uid=0 auid=0 ses=154 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=14965 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=CRED_REFR msg=audit(1398701123.700:3873): user pid=14965 uid=0 auid=0 ses=154 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701123.760:3874): user pid=14972 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=14972 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701123.761:3875): user pid=14972 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=14972 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_SESSION msg=audit(1398701123.761:3876): user pid=14971 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 spid=14972 suid=74 rport=42284 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_SESSION msg=audit(1398701123.761:3877): user pid=14971 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 spid=14972 suid=74 rport=42284 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=USER_AUTH msg=audit(1398701123.823:3878): user pid=14971 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=42284 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=USER_AUTH msg=audit(1398701123.823:3879): user pid=14971 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=8b:2d:a5:06:3e:34:8a:e0:bf:ca:69:94:eb:59:f0:19 rport=42284 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=USER_ACCT msg=audit(1398701123.829:3880): user pid=14971 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701123.829:3881): user pid=14971 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=14972 suid=74 rport=42284 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=USER_AUTH msg=audit(1398701123.830:3882): user pid=14971 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=ssh res=success'
>type=CRED_ACQ msg=audit(1398701123.830:3883): user pid=14971 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=LOGIN msg=audit(1398701123.831:3884): pid=14971 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=155
>type=USER_ROLE_CHANGE msg=audit(1398701123.923:3885): user pid=14971 uid=0 auid=0 ses=155 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_START msg=audit(1398701123.926:3886): user pid=14971 uid=0 auid=0 ses=155 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_LOGIN msg=audit(1398701123.931:3887): user pid=14971 uid=0 auid=0 ses=155 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_START msg=audit(1398701123.932:3888): user pid=14971 uid=0 auid=0 ses=155 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701123.933:3889): user pid=14974 uid=0 auid=0 ses=155 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=14974 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701123.933:3890): user pid=14974 uid=0 auid=0 ses=155 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=14974 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRED_REFR msg=audit(1398701123.936:3891): user pid=14974 uid=0 auid=0 ses=155 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_END msg=audit(1398701124.017:3892): user pid=14971 uid=0 auid=0 ses=155 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_END msg=audit(1398701124.018:3893): user pid=14962 uid=0 auid=0 ses=154 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=CRED_DISP msg=audit(1398701124.018:3894): user pid=14971 uid=0 auid=0 ses=155 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_LOGOUT msg=audit(1398701124.018:3895): user pid=14962 uid=0 auid=0 ses=154 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=USER_END msg=audit(1398701124.019:3896): user pid=14971 uid=0 auid=0 ses=155 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_LOGOUT msg=audit(1398701124.019:3897): user pid=14971 uid=0 auid=0 ses=155 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701124.019:3898): user pid=14971 uid=0 auid=0 ses=155 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=14971 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701124.019:3899): user pid=14971 uid=0 auid=0 ses=155 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=14971 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701124.020:3900): user pid=14971 uid=0 auid=0 ses=155 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=14971 suid=0 rport=42284 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=USER_END msg=audit(1398701124.118:3901): user pid=14962 uid=0 auid=0 ses=154 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=CRED_DISP msg=audit(1398701124.119:3902): user pid=14962 uid=0 auid=0 ses=154 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701124.120:3903): user pid=14962 uid=0 auid=0 ses=154 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=14962 suid=0 rport=38293 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701124.120:3904): user pid=14962 uid=0 auid=0 ses=154 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=14962 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701124.120:3905): user pid=14962 uid=0 auid=0 ses=154 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=14962 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701124.129:3906): user pid=14980 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=14980 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701124.129:3907): user pid=14980 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=14980 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=CRYPTO_SESSION msg=audit(1398701124.130:3908): user pid=14979 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 spid=14980 suid=74 rport=38294 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=CRYPTO_SESSION msg=audit(1398701124.130:3909): user pid=14979 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 spid=14980 suid=74 rport=38294 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=USER_AUTH msg=audit(1398701124.319:3910): user pid=14979 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=38294 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=USER_AUTH msg=audit(1398701124.319:3911): user pid=14979 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=e7:e2:3d:94:48:cf:f5:8c:5e:54:98:bd:89:a5:29:a9 rport=38294 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=USER_ACCT msg=audit(1398701124.325:3912): user pid=14979 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701124.326:3913): user pid=14979 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=14980 suid=74 rport=38294 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=USER_AUTH msg=audit(1398701124.326:3914): user pid=14979 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=ssh res=success'
>type=CRED_ACQ msg=audit(1398701124.327:3915): user pid=14979 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=LOGIN msg=audit(1398701124.327:3916): pid=14979 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=156
>type=USER_ROLE_CHANGE msg=audit(1398701124.426:3917): user pid=14979 uid=0 auid=0 ses=156 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=USER_START msg=audit(1398701124.429:3918): user pid=14979 uid=0 auid=0 ses=156 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=USER_LOGIN msg=audit(1398701124.433:3919): user pid=14979 uid=0 auid=0 ses=156 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=USER_START msg=audit(1398701124.434:3920): user pid=14979 uid=0 auid=0 ses=156 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701124.435:3921): user pid=14982 uid=0 auid=0 ses=156 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=14982 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701124.435:3922): user pid=14982 uid=0 auid=0 ses=156 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=14982 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.11 terminal=? res=success'
>type=CRED_REFR msg=audit(1398701124.436:3923): user pid=14982 uid=0 auid=0 ses=156 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=test.hostname addr=10.0.0.11 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701124.487:3924): user pid=14990 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=14990 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701124.487:3925): user pid=14990 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=14990 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_SESSION msg=audit(1398701124.488:3926): user pid=14989 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 spid=14990 suid=74 rport=42285 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_SESSION msg=audit(1398701124.488:3927): user pid=14989 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 spid=14990 suid=74 rport=42285 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=USER_AUTH msg=audit(1398701124.550:3928): user pid=14989 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=42285 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=USER_AUTH msg=audit(1398701124.550:3929): user pid=14989 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=8b:2d:a5:06:3e:34:8a:e0:bf:ca:69:94:eb:59:f0:19 rport=42285 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=USER_ACCT msg=audit(1398701124.556:3930): user pid=14989 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701124.557:3931): user pid=14989 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=14990 suid=74 rport=42285 laddr=192.168.1.8 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=USER_AUTH msg=audit(1398701124.557:3932): user pid=14989 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=ssh res=success'
>type=CRED_ACQ msg=audit(1398701124.558:3933): user pid=14989 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=LOGIN msg=audit(1398701124.558:3934): pid=14989 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=157
>type=USER_ROLE_CHANGE msg=audit(1398701124.655:3935): user pid=14989 uid=0 auid=0 ses=157 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_START msg=audit(1398701124.660:3936): user pid=14989 uid=0 auid=0 ses=157 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_LOGIN msg=audit(1398701124.666:3937): user pid=14989 uid=0 auid=0 ses=157 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=USER_START msg=audit(1398701124.667:3938): user pid=14989 uid=0 auid=0 ses=157 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701124.668:3939): user pid=14992 uid=0 auid=0 ses=157 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=04:1c:23:f0:a9:e6:4e:59:63:a9:97:28:77:91:27:3a direction=? spid=14992 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398701124.668:3940): user pid=14992 uid=0 auid=0 ses=157 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:84:22:03:95:64:bf:93:70:04:68:ff:13:57:4f:02 direction=? spid=14992 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.8 terminal=? res=success'
>type=CRED_REFR msg=audit(1398701124.673:3941): user pid=14992 uid=0 auid=0 ses=157 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=jenkins-1b07544f-1405.novalocal addr=192.168.1.8 terminal=ssh res=success'

Actions: View

Attachments on bug 1071674: 869678 | 890537 | 890967