Login
[x]
Log in using an account from:
Fedora Account System
Red Hat Associate
Red Hat Customer
Or login using a Red Hat Bugzilla account
Forgot Password
Login:
Hide Forgot
Create an Account
Red Hat Bugzilla – Attachment 950846 Details for
Bug 1157268
RDO - selinux keystone-all denied
[?]
New
Simple Search
Advanced Search
My Links
Browse
Requests
Reports
Current State
Search
Tabular reports
Graphical reports
Duplicates
Other Reports
User Changes
Plotly Reports
Bug Status
Bug Severity
Non-Defaults
|
Product Dashboard
Help
Page Help!
Bug Writing Guidelines
What's new
Browser Support Policy
5.0.4.rh83 Release notes
FAQ
Guides index
User guide
Web Services
Contact
Legal
This site requires JavaScript to be enabled to function correctly, please enable it.
audit.log
audit.log (text/plain), 3.32 MB, created by
bkopilov
on 2014-10-26 20:08:39 UTC
(
hide
)
Description:
audit.log
Filename:
MIME Type:
Creator:
bkopilov
Created:
2014-10-26 20:08:39 UTC
Size:
3.32 MB
patch
obsolete
>type=DAEMON_START msg=audit(1414326762.017:8700): auditd start, ver=2.3.3 format=raw kernel=3.10.0-123.8.1.el7.x86_64 auid=4294967295 pid=424 subj=system_u:system_r:auditd_t:s0 res=success >type=CONFIG_CHANGE msg=audit(1414326762.064:6): audit_backlog_limit=320 old=64 auid=4294967295 ses=4294967295 subj=system_u:system_r:auditctl_t:s0 res=1 >type=SERVICE_START msg=audit(1414326762.105:7): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="auditd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SYSTEM_BOOT msg=audit(1414326762.118:8): pid=526 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='init exe="/usr/lib/systemd/systemd-update-utmp" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1414326762.122:9): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="systemd-update-utmp" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1414326762.146:10): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="irqbalance" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1414326762.159:11): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="dbus" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1414326762.171:12): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="rhel-dmesg" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1414326762.180:13): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="systemd-user-sessions" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1414326762.184:14): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="crond" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1414326762.186:15): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="serial-getty@ttyS0" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1414326762.190:16): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="getty@tty1" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1414326762.196:17): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="rsyslog" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1414326762.200:18): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="chronyd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1414326762.249:19): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="avahi-daemon" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1414326762.259:20): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="ovirt-guest-agent" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1414326762.260:21): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="systemd-logind" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1414326762.281:22): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="polkit" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1414326762.306:23): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="NetworkManager" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1414326762.420:24): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="ovirt-guest-agent" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=SERVICE_START msg=audit(1414326762.451:25): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="NetworkManager-dispatcher" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1414326762.486:26): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="tuned" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1414326762.760:27): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="cloud-init-local" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1414326762.799:28): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="network" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1414326762.814:29): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="rhnsd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=SERVICE_START msg=audit(1414326762.815:30): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="rpcbind" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1414326762.882:31): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="nfs-lock" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1414326763.002:32): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="sshd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1414326763.192:33): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="postfix" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1414326768.111:34): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="systemd-hostnamed" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=ADD_GROUP msg=audit(1414326768.139:35): pid=1029 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cloud_init_t:s0 msg='op=adding group acct="cloud-user" exe="/usr/sbin/useradd" hostname=? addr=? terminal=? res=success' >type=ADD_USER msg=audit(1414326768.140:36): pid=1029 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cloud_init_t:s0 msg='op=adding user id=1000 exe="/usr/sbin/useradd" hostname=? addr=? terminal=? res=success' >type=ADD_USER msg=audit(1414326768.140:37): pid=1029 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cloud_init_t:s0 msg='op=adding user to group acct="cloud-user" exe="/usr/sbin/useradd" hostname=? addr=? terminal=? res=success' >type=ADD_USER msg=audit(1414326768.140:38): pid=1029 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cloud_init_t:s0 msg='op=adding user to group acct="cloud-user" exe="/usr/sbin/useradd" hostname=? addr=? terminal=? res=success' >type=ADD_USER msg=audit(1414326768.140:39): pid=1029 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cloud_init_t:s0 msg='op=adding user to group acct="cloud-user" exe="/usr/sbin/useradd" hostname=? addr=? terminal=? res=success' >type=ADD_USER msg=audit(1414326768.140:40): pid=1029 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cloud_init_t:s0 msg='op=adding user to shadow group acct="cloud-user" exe="/usr/sbin/useradd" hostname=? addr=? terminal=? res=success' >type=ADD_USER msg=audit(1414326768.140:41): pid=1029 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cloud_init_t:s0 msg='op=adding user to shadow group acct="cloud-user" exe="/usr/sbin/useradd" hostname=? addr=? terminal=? res=success' >type=ADD_USER msg=audit(1414326768.140:42): pid=1029 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cloud_init_t:s0 msg='op=adding user to shadow group acct="cloud-user" exe="/usr/sbin/useradd" hostname=? addr=? terminal=? res=success' >type=ADD_USER msg=audit(1414326768.142:43): pid=1029 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cloud_init_t:s0 msg='op=adding home directory id=1000 exe="/usr/sbin/useradd" hostname=? addr=? terminal=? res=success' >type=USER_CHAUTHTOK msg=audit(1414326768.160:44): pid=1034 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:passwd_t:s0 msg='op=lock password id=1000 exe="/usr/bin/passwd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1414326768.200:45): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="cloud-init" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414326768.508:46): pid=904 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=904 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414326768.508:47): pid=904 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=904 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1414326768.510:48): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="sshd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1414326768.518:49): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="sshd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1414326768.555:50): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="cloud-config" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1414326768.882:51): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="cloud-final" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SYSTEM_RUNLEVEL msg=audit(1414326768.885:52): pid=1076 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='old-level=N new-level=3 exe="/usr/lib/systemd/systemd-update-utmp" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1414326768.886:53): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="systemd-update-utmp-runlevel" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1414326768.886:54): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="systemd-update-utmp-runlevel" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1414326779.649:55): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="NetworkManager-dispatcher" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414326786.656:56): pid=1091 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=1091 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.34.60.204 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414326786.656:57): pid=1091 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=1091 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.34.60.204 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414326786.778:58): pid=1090 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-sha1 spid=1091 suid=74 rport=33774 laddr=192.168.2.159 lpor exe="/usr/sbin/sshd" hostname=? addr=10.34.60.204 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414326786.778:59): pid=1090 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-sha1 spid=1091 suid=74 rport=33774 laddr=192.168.2.159 lpor exe="/usr/sbin/sshd" hostname=? addr=10.34.60.204 terminal=? res=success' >type=USER_AUTH msg=audit(1414326787.832:60): pid=1090 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=33774 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.34.60.204 terminal=? res=success' >type=USER_AUTH msg=audit(1414326787.832:61): pid=1090 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=e7:e2:3d:94:48:cf:f5:8c:5e:54:98:bd:89:a5:29:a9 rport=33774 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.34.60.204 terminal=? res=success' >type=USER_ACCT msg=audit(1414326787.836:62): pid=1090 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414326787.837:63): pid=1090 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=1091 suid=74 rport=33774 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.34.60.204 terminal=? res=success' >type=USER_AUTH msg=audit(1414326787.838:64): pid=1090 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.34.60.204 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1414326787.838:65): pid=1090 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=LOGIN msg=audit(1414326787.839:66): pid=1090 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=1 res=1 >type=USER_ROLE_CHANGE msg=audit(1414326787.914:67): pid=1090 uid=0 auid=0 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_START msg=audit(1414326787.934:68): pid=1090 uid=0 auid=0 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1414326788.097:69): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_START msg=audit(1414326788.097:70): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414326788.099:71): pid=1093 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=1093 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.34.60.204 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414326788.099:72): pid=1093 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=1093 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.34.60.204 terminal=? res=success' >type=CRED_REFR msg=audit(1414326788.100:73): pid=1093 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_END msg=audit(1414326789.423:74): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1414326789.423:75): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1414326789.652:76): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_START msg=audit(1414326789.652:77): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414326789.652:78): pid=1096 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=1096 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.34.60.204 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414326789.653:79): pid=1096 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=1096 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.34.60.204 terminal=? res=success' >type=CRED_REFR msg=audit(1414326789.653:80): pid=1096 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_END msg=audit(1414326789.938:81): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1414326789.938:82): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1414326790.083:83): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_START msg=audit(1414326790.083:84): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414326790.083:85): pid=1100 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=1100 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.34.60.204 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414326790.084:86): pid=1100 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=1100 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.34.60.204 terminal=? res=success' >type=CRED_REFR msg=audit(1414326790.084:87): pid=1100 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_END msg=audit(1414326790.370:88): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1414326790.370:89): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1414326790.513:90): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_START msg=audit(1414326790.513:91): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414326790.514:92): pid=1104 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=1104 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.34.60.204 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414326790.514:93): pid=1104 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=1104 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.34.60.204 terminal=? res=success' >type=CRED_REFR msg=audit(1414326790.514:94): pid=1104 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_END msg=audit(1414326790.802:95): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1414326790.802:96): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1414326790.955:97): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_START msg=audit(1414326790.955:98): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414326790.955:99): pid=1108 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=1108 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.34.60.204 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414326790.955:100): pid=1108 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=1108 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.34.60.204 terminal=? res=success' >type=CRED_REFR msg=audit(1414326790.956:101): pid=1108 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=MAC_STATUS msg=audit(1414326790.962:102): enforcing=0 old_enforcing=1 auid=0 ses=1 >type=SYSCALL msg=audit(1414326790.962:102): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7fffaafa4d50 a2=1 a3=7fffaafa4b10 items=0 ppid=1108 pid=1111 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="setenforce" exe="/usr/sbin/setenforce" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null) >type=USER_END msg=audit(1414326791.242:103): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1414326791.242:104): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1414326791.386:105): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_START msg=audit(1414326791.386:106): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414326791.386:107): pid=1112 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=1112 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.34.60.204 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414326791.386:108): pid=1112 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=1112 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.34.60.204 terminal=? res=success' >type=CRED_REFR msg=audit(1414326791.387:109): pid=1112 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_END msg=audit(1414326797.641:110): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1414326797.641:111): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1414326797.800:112): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_START msg=audit(1414326797.800:113): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414326797.801:114): pid=1116 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=1116 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.34.60.204 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414326797.801:115): pid=1116 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=1116 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.34.60.204 terminal=? res=success' >type=CRED_REFR msg=audit(1414326797.801:116): pid=1116 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_END msg=audit(1414326798.220:117): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1414326798.220:118): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1414326798.378:119): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_START msg=audit(1414326798.378:120): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414326798.379:121): pid=1122 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=1122 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.34.60.204 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414326798.379:122): pid=1122 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=1122 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.34.60.204 terminal=? res=success' >type=CRED_REFR msg=audit(1414326798.379:123): pid=1122 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_END msg=audit(1414326798.784:124): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1414326798.784:125): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1414326798.942:126): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_START msg=audit(1414326798.942:127): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414326798.943:128): pid=1127 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=1127 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.34.60.204 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414326798.943:129): pid=1127 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=1127 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.34.60.204 terminal=? res=success' >type=CRED_REFR msg=audit(1414326798.943:130): pid=1127 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_END msg=audit(1414326799.385:131): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1414326799.385:132): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1414326799.530:133): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_START msg=audit(1414326799.530:134): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414326799.530:135): pid=1132 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=1132 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.34.60.204 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414326799.530:136): pid=1132 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=1132 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.34.60.204 terminal=? res=success' >type=CRED_REFR msg=audit(1414326799.530:137): pid=1132 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_END msg=audit(1414326799.816:138): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1414326799.816:139): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1414326799.961:140): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_START msg=audit(1414326799.961:141): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414326799.961:142): pid=1136 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=1136 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.34.60.204 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414326799.961:143): pid=1136 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=1136 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.34.60.204 terminal=? res=success' >type=CRED_REFR msg=audit(1414326799.961:144): pid=1136 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_END msg=audit(1414326800.249:145): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1414326800.249:146): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1414326800.389:147): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_START msg=audit(1414326800.389:148): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414326800.389:149): pid=1141 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=1141 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.34.60.204 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414326800.390:150): pid=1141 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=1141 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.34.60.204 terminal=? res=success' >type=CRED_REFR msg=audit(1414326800.390:151): pid=1141 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_AVC msg=audit(1414326836.900:152): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='avc: received setenforce notice (enforcing=0) exe="/usr/lib/systemd/systemd" sauid=0 hostname=? addr=? terminal=?' >type=SERVICE_STOP msg=audit(1414326836.909:153): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="systemd-udevd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1414326837.736:154): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="systemd-udevd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=MAC_POLICY_LOAD msg=audit(1414326866.868:155): policy loaded auid=0 ses=1 >type=SYSCALL msg=audit(1414326866.868:155): arch=c000003e syscall=1 success=yes exit=3591531 a0=4 a1=7f588804c010 a2=36cd6b a3=7fff910af260 items=0 ppid=1258 pid=1268 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="load_policy" exe="/usr/sbin/load_policy" subj=unconfined_u:system_r:load_policy_t:s0-s0:c0.c1023 key=(null) >type=USER_AVC msg=audit(1414326869.714:156): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='avc: received policyload notice (seqno=2) exe="/usr/lib/systemd/systemd" sauid=0 hostname=? addr=? terminal=?' >type=SERVICE_START msg=audit(1414326871.098:157): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="rsyslog" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1414326871.098:158): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="rsyslog" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1414326872.023:159): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="rsyslog" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1414326872.225:160): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="systemd-logind" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1414326872.225:161): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="systemd-logind" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1414326872.281:162): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="systemd-logind" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1414326872.868:163): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1414326872.869:164): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1414326873.011:165): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_START msg=audit(1414326873.011:166): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414326873.011:167): pid=1898 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=1898 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.34.60.204 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414326873.011:168): pid=1898 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=1898 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.34.60.204 terminal=? res=success' >type=CRED_REFR msg=audit(1414326873.012:169): pid=1898 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_END msg=audit(1414326888.648:170): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1414326888.648:171): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1414326888.801:172): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_START msg=audit(1414326888.801:173): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414326888.801:174): pid=1914 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=1914 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.34.60.204 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414326888.801:175): pid=1914 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=1914 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.34.60.204 terminal=? res=success' >type=CRED_REFR msg=audit(1414326888.801:176): pid=1914 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414326889.021:177): pid=1953 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=1953 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414326889.021:178): pid=1954 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=1954 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414326889.021:179): pid=1953 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=1953 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414326889.021:180): pid=1954 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=1954 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414326889.036:181): pid=1959 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=1959 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414326889.037:182): pid=1959 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=1959 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414326889.038:183): pid=1958 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=1959 suid=74 rport=59030 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414326889.038:184): pid=1958 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=1959 suid=74 rport=59030 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414326889.685:185): pid=1958 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=59030 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414326889.685:186): pid=1958 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=e7:e2:3d:94:48:cf:f5:8c:5e:54:98:bd:89:a5:29:a9 rport=59030 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_ACCT msg=audit(1414326889.689:187): pid=1958 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414326889.689:188): pid=1958 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=1959 suid=74 rport=59030 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414326889.690:189): pid=1958 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1414326889.690:190): pid=1958 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=LOGIN msg=audit(1414326889.691:191): pid=1958 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=2 res=1 >type=USER_ROLE_CHANGE msg=audit(1414326889.764:192): pid=1958 uid=0 auid=0 ses=2 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_START msg=audit(1414326889.785:193): pid=1958 uid=0 auid=0 ses=2 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1414326889.789:194): pid=1958 uid=0 auid=0 ses=2 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_START msg=audit(1414326889.789:195): pid=1958 uid=0 auid=0 ses=2 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414326889.790:196): pid=1961 uid=0 auid=0 ses=2 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=1961 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414326889.791:197): pid=1961 uid=0 auid=0 ses=2 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=1961 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRED_REFR msg=audit(1414326889.791:198): pid=1961 uid=0 auid=0 ses=2 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_END msg=audit(1414326889.816:199): pid=1958 uid=0 auid=0 ses=2 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRED_DISP msg=audit(1414326889.816:200): pid=1958 uid=0 auid=0 ses=2 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_END msg=audit(1414326889.817:201): pid=1958 uid=0 auid=0 ses=2 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1414326889.817:202): pid=1958 uid=0 auid=0 ses=2 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414326889.817:203): pid=1958 uid=0 auid=0 ses=2 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=1958 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414326889.817:204): pid=1958 uid=0 auid=0 ses=2 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=1958 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414326889.817:205): pid=1958 uid=0 auid=0 ses=2 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=1958 suid=0 rport=59030 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414326889.828:206): pid=1970 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=1970 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414326889.828:207): pid=1970 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=1970 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414326889.829:208): pid=1969 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=1970 suid=74 rport=49846 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414326889.829:209): pid=1969 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=1970 suid=74 rport=49846 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=USER_AUTH msg=audit(1414326890.562:210): pid=1969 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=49846 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=USER_AUTH msg=audit(1414326890.562:211): pid=1969 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=e7:e2:3d:94:48:cf:f5:8c:5e:54:98:bd:89:a5:29:a9 rport=49846 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=USER_ACCT msg=audit(1414326890.928:212): pid=1969 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414326890.928:213): pid=1969 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=1970 suid=74 rport=49846 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=USER_AUTH msg=audit(1414326890.929:214): pid=1969 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1414326891.292:215): pid=1969 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=LOGIN msg=audit(1414326891.292:216): pid=1969 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=3 res=1 >type=USER_ROLE_CHANGE msg=audit(1414326891.720:217): pid=1969 uid=0 auid=0 ses=3 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=USER_START msg=audit(1414326892.095:218): pid=1969 uid=0 auid=0 ses=3 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1414326892.458:219): pid=1969 uid=0 auid=0 ses=3 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=USER_START msg=audit(1414326892.819:220): pid=1969 uid=0 auid=0 ses=3 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414326892.820:221): pid=1972 uid=0 auid=0 ses=3 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=1972 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414326892.820:222): pid=1972 uid=0 auid=0 ses=3 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=1972 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRED_REFR msg=audit(1414326893.183:223): pid=1972 uid=0 auid=0 ses=3 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414326893.224:224): pid=1980 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=1980 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414326893.224:225): pid=1980 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=1980 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414326893.225:226): pid=1979 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=1980 suid=74 rport=59032 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414326893.225:227): pid=1979 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=1980 suid=74 rport=59032 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_END msg=audit(1414326893.573:228): pid=1969 uid=0 auid=0 ses=3 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=USER_AUTH msg=audit(1414326893.760:229): pid=1979 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=59032 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414326893.760:230): pid=1979 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=e7:e2:3d:94:48:cf:f5:8c:5e:54:98:bd:89:a5:29:a9 rport=59032 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_ACCT msg=audit(1414326893.764:231): pid=1979 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414326893.765:232): pid=1979 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=1980 suid=74 rport=59032 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414326893.766:233): pid=1979 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1414326893.766:234): pid=1979 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=LOGIN msg=audit(1414326893.766:235): pid=1979 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=4 res=1 >type=USER_ROLE_CHANGE msg=audit(1414326893.829:236): pid=1979 uid=0 auid=0 ses=4 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_START msg=audit(1414326893.845:237): pid=1979 uid=0 auid=0 ses=4 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1414326893.848:238): pid=1979 uid=0 auid=0 ses=4 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_START msg=audit(1414326893.848:239): pid=1979 uid=0 auid=0 ses=4 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414326893.850:240): pid=1982 uid=0 auid=0 ses=4 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=1982 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414326893.850:241): pid=1982 uid=0 auid=0 ses=4 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=1982 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRED_REFR msg=audit(1414326893.851:242): pid=1982 uid=0 auid=0 ses=4 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_END msg=audit(1414326893.866:243): pid=1979 uid=0 auid=0 ses=4 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRED_DISP msg=audit(1414326893.866:244): pid=1979 uid=0 auid=0 ses=4 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_END msg=audit(1414326893.867:245): pid=1979 uid=0 auid=0 ses=4 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1414326893.867:246): pid=1979 uid=0 auid=0 ses=4 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414326893.867:247): pid=1979 uid=0 auid=0 ses=4 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=1979 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414326893.867:248): pid=1979 uid=0 auid=0 ses=4 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=1979 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414326893.867:249): pid=1979 uid=0 auid=0 ses=4 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=1979 suid=0 rport=59032 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414326893.879:250): pid=1987 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=1987 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414326893.880:251): pid=1987 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=1987 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414326893.880:252): pid=1986 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=1987 suid=74 rport=59033 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414326893.882:253): pid=1986 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=1987 suid=74 rport=59033 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRED_DISP msg=audit(1414326893.934:254): pid=1969 uid=0 auid=0 ses=3 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=USER_END msg=audit(1414326894.295:255): pid=1969 uid=0 auid=0 ses=3 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=USER_AUTH msg=audit(1414326894.416:256): pid=1986 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=59033 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414326894.417:257): pid=1986 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=e7:e2:3d:94:48:cf:f5:8c:5e:54:98:bd:89:a5:29:a9 rport=59033 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_ACCT msg=audit(1414326894.421:258): pid=1986 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414326894.421:259): pid=1986 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=1987 suid=74 rport=59033 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414326894.422:260): pid=1986 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1414326894.423:261): pid=1986 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=LOGIN msg=audit(1414326894.423:262): pid=1986 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=5 res=1 >type=USER_ROLE_CHANGE msg=audit(1414326894.487:263): pid=1986 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_START msg=audit(1414326894.502:264): pid=1986 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1414326894.505:265): pid=1986 uid=0 auid=0 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_START msg=audit(1414326894.506:266): pid=1986 uid=0 auid=0 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414326894.507:267): pid=1989 uid=0 auid=0 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=1989 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414326894.507:268): pid=1989 uid=0 auid=0 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=1989 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRED_REFR msg=audit(1414326894.508:269): pid=1989 uid=0 auid=0 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_END msg=audit(1414326894.525:270): pid=1986 uid=0 auid=0 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRED_DISP msg=audit(1414326894.525:271): pid=1986 uid=0 auid=0 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_END msg=audit(1414326894.526:272): pid=1986 uid=0 auid=0 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1414326894.526:273): pid=1986 uid=0 auid=0 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414326894.526:274): pid=1986 uid=0 auid=0 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=1986 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414326894.526:275): pid=1986 uid=0 auid=0 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=1986 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414326894.526:276): pid=1986 uid=0 auid=0 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=1986 suid=0 rport=59033 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414326894.536:277): pid=1997 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=1997 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414326894.536:278): pid=1997 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=1997 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414326894.537:279): pid=1996 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=1997 suid=74 rport=49849 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414326894.537:280): pid=1996 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=1997 suid=74 rport=49849 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=USER_LOGOUT msg=audit(1414326894.657:281): pid=1969 uid=0 auid=0 ses=3 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414326894.657:282): pid=1969 uid=0 auid=0 ses=3 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=1969 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414326894.657:283): pid=1969 uid=0 auid=0 ses=3 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=1969 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414326894.657:284): pid=1969 uid=0 auid=0 ses=3 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=1969 suid=0 rport=49846 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=USER_AUTH msg=audit(1414326895.071:285): pid=1996 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=49849 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=USER_AUTH msg=audit(1414326895.071:286): pid=1996 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=e7:e2:3d:94:48:cf:f5:8c:5e:54:98:bd:89:a5:29:a9 rport=49849 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=USER_ACCT msg=audit(1414326895.438:287): pid=1996 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414326895.439:288): pid=1996 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=1997 suid=74 rport=49849 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=USER_AUTH msg=audit(1414326895.440:289): pid=1996 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1414326895.802:290): pid=1996 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=LOGIN msg=audit(1414326895.802:291): pid=1996 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=6 res=1 >type=USER_ROLE_CHANGE msg=audit(1414326896.230:292): pid=1996 uid=0 auid=0 ses=6 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=USER_START msg=audit(1414326896.608:293): pid=1996 uid=0 auid=0 ses=6 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1414326896.973:294): pid=1996 uid=0 auid=0 ses=6 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=USER_START msg=audit(1414326897.336:295): pid=1996 uid=0 auid=0 ses=6 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414326897.338:296): pid=2000 uid=0 auid=0 ses=6 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=2000 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414326897.338:297): pid=2000 uid=0 auid=0 ses=6 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=2000 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRED_REFR msg=audit(1414326897.702:298): pid=2000 uid=0 auid=0 ses=6 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414326897.728:299): pid=2004 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=2004 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414326897.728:300): pid=2004 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=2004 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414326897.729:301): pid=2003 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=2004 suid=74 rport=49850 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414326897.730:302): pid=2003 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=2004 suid=74 rport=49850 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=USER_END msg=audit(1414326898.078:303): pid=1996 uid=0 auid=0 ses=6 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=USER_AUTH msg=audit(1414326898.263:304): pid=2003 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=49850 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=USER_AUTH msg=audit(1414326898.263:305): pid=2003 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=e7:e2:3d:94:48:cf:f5:8c:5e:54:98:bd:89:a5:29:a9 rport=49850 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRED_DISP msg=audit(1414326898.439:306): pid=1996 uid=0 auid=0 ses=6 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=USER_ACCT msg=audit(1414326898.628:307): pid=2003 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414326898.628:308): pid=2003 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=2004 suid=74 rport=49850 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=USER_AUTH msg=audit(1414326898.629:309): pid=2003 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=ssh res=success' >type=USER_END msg=audit(1414326898.800:310): pid=1996 uid=0 auid=0 ses=6 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1414326898.990:311): pid=2003 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=LOGIN msg=audit(1414326898.990:312): pid=2003 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=7 res=1 >type=USER_LOGOUT msg=audit(1414326899.163:313): pid=1996 uid=0 auid=0 ses=6 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414326899.164:314): pid=1996 uid=0 auid=0 ses=6 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=1996 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414326899.164:315): pid=1996 uid=0 auid=0 ses=6 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=1996 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414326899.165:316): pid=1996 uid=0 auid=0 ses=6 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=1996 suid=0 rport=49849 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=USER_ROLE_CHANGE msg=audit(1414326899.416:317): pid=2003 uid=0 auid=0 ses=7 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=USER_START msg=audit(1414326899.790:318): pid=2003 uid=0 auid=0 ses=7 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1414326900.154:319): pid=2003 uid=0 auid=0 ses=7 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=USER_START msg=audit(1414326900.518:320): pid=2003 uid=0 auid=0 ses=7 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414326900.520:321): pid=2007 uid=0 auid=0 ses=7 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=2007 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414326900.520:322): pid=2007 uid=0 auid=0 ses=7 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=2007 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRED_REFR msg=audit(1414326900.882:323): pid=2007 uid=0 auid=0 ses=7 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414326900.914:324): pid=2014 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=2014 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414326900.914:325): pid=2014 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=2014 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414326900.915:326): pid=2013 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=2014 suid=74 rport=59036 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414326900.917:327): pid=2013 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=2014 suid=74 rport=59036 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_END msg=audit(1414326901.263:328): pid=2003 uid=0 auid=0 ses=7 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=USER_AUTH msg=audit(1414326901.454:329): pid=2013 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=59036 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414326901.454:330): pid=2013 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=e7:e2:3d:94:48:cf:f5:8c:5e:54:98:bd:89:a5:29:a9 rport=59036 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_ACCT msg=audit(1414326901.458:331): pid=2013 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414326901.458:332): pid=2013 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=2014 suid=74 rport=59036 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414326901.460:333): pid=2013 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1414326901.460:334): pid=2013 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=LOGIN msg=audit(1414326901.460:335): pid=2013 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=8 res=1 >type=USER_ROLE_CHANGE msg=audit(1414326901.526:336): pid=2013 uid=0 auid=0 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_START msg=audit(1414326901.542:337): pid=2013 uid=0 auid=0 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1414326901.547:338): pid=2013 uid=0 auid=0 ses=8 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_START msg=audit(1414326901.547:339): pid=2013 uid=0 auid=0 ses=8 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414326901.549:340): pid=2016 uid=0 auid=0 ses=8 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=2016 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414326901.549:341): pid=2016 uid=0 auid=0 ses=8 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=2016 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRED_REFR msg=audit(1414326901.550:342): pid=2016 uid=0 auid=0 ses=8 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRED_DISP msg=audit(1414326901.625:343): pid=2003 uid=0 auid=0 ses=7 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=USER_END msg=audit(1414326901.937:344): pid=2013 uid=0 auid=0 ses=8 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRED_DISP msg=audit(1414326901.937:345): pid=2013 uid=0 auid=0 ses=8 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_END msg=audit(1414326901.938:346): pid=2013 uid=0 auid=0 ses=8 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1414326901.938:347): pid=2013 uid=0 auid=0 ses=8 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414326901.938:348): pid=2013 uid=0 auid=0 ses=8 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=2013 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414326901.938:349): pid=2013 uid=0 auid=0 ses=8 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=2013 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414326901.939:350): pid=2013 uid=0 auid=0 ses=8 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=2013 suid=0 rport=59036 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414326901.951:351): pid=2022 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=2022 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414326901.951:352): pid=2022 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=2022 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414326901.952:353): pid=2021 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=2022 suid=74 rport=59037 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414326901.952:354): pid=2021 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=2022 suid=74 rport=59037 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_END msg=audit(1414326901.988:355): pid=2003 uid=0 auid=0 ses=7 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1414326902.349:356): pid=2003 uid=0 auid=0 ses=7 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414326902.349:357): pid=2003 uid=0 auid=0 ses=7 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=2003 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414326902.349:358): pid=2003 uid=0 auid=0 ses=7 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=2003 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414326902.349:359): pid=2003 uid=0 auid=0 ses=7 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=2003 suid=0 rport=49850 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=USER_AUTH msg=audit(1414326902.487:360): pid=2021 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=59037 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414326902.487:361): pid=2021 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=e7:e2:3d:94:48:cf:f5:8c:5e:54:98:bd:89:a5:29:a9 rport=59037 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_ACCT msg=audit(1414326902.491:362): pid=2021 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414326902.492:363): pid=2021 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=2022 suid=74 rport=59037 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414326902.493:364): pid=2021 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1414326902.493:365): pid=2021 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=LOGIN msg=audit(1414326902.493:366): pid=2021 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=9 res=1 >type=USER_ROLE_CHANGE msg=audit(1414326902.560:367): pid=2021 uid=0 auid=0 ses=9 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_START msg=audit(1414326902.576:368): pid=2021 uid=0 auid=0 ses=9 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1414326902.580:369): pid=2021 uid=0 auid=0 ses=9 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_START msg=audit(1414326902.580:370): pid=2021 uid=0 auid=0 ses=9 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414326902.582:371): pid=2025 uid=0 auid=0 ses=9 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=2025 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414326902.582:372): pid=2025 uid=0 auid=0 ses=9 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=2025 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRED_REFR msg=audit(1414326902.583:373): pid=2025 uid=0 auid=0 ses=9 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_END msg=audit(1414326929.846:374): pid=2021 uid=0 auid=0 ses=9 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRED_DISP msg=audit(1414326929.846:375): pid=2021 uid=0 auid=0 ses=9 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_END msg=audit(1414326929.847:376): pid=2021 uid=0 auid=0 ses=9 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1414326929.847:377): pid=2021 uid=0 auid=0 ses=9 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414326929.847:378): pid=2021 uid=0 auid=0 ses=9 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=2021 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414326929.847:379): pid=2021 uid=0 auid=0 ses=9 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=2021 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414326929.847:380): pid=2021 uid=0 auid=0 ses=9 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=2021 suid=0 rport=59037 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414326929.857:381): pid=2051 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=2051 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414326929.858:382): pid=2051 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=2051 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414326929.859:383): pid=2050 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=2051 suid=74 rport=59049 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414326929.859:384): pid=2050 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=2051 suid=74 rport=59049 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414326930.396:385): pid=2050 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=59049 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414326930.396:386): pid=2050 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=e7:e2:3d:94:48:cf:f5:8c:5e:54:98:bd:89:a5:29:a9 rport=59049 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_ACCT msg=audit(1414326930.399:387): pid=2050 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414326930.400:388): pid=2050 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=2051 suid=74 rport=59049 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414326930.401:389): pid=2050 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1414326930.401:390): pid=2050 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=LOGIN msg=audit(1414326930.401:391): pid=2050 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=10 res=1 >type=USER_ROLE_CHANGE msg=audit(1414326930.467:392): pid=2050 uid=0 auid=0 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_START msg=audit(1414326930.481:393): pid=2050 uid=0 auid=0 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1414326930.485:394): pid=2050 uid=0 auid=0 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_START msg=audit(1414326930.485:395): pid=2050 uid=0 auid=0 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414326930.487:396): pid=2053 uid=0 auid=0 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=2053 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414326930.487:397): pid=2053 uid=0 auid=0 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=2053 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRED_REFR msg=audit(1414326930.488:398): pid=2053 uid=0 auid=0 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_END msg=audit(1414326930.626:399): pid=2050 uid=0 auid=0 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRED_DISP msg=audit(1414326930.627:400): pid=2050 uid=0 auid=0 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_END msg=audit(1414326930.627:401): pid=2050 uid=0 auid=0 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1414326930.627:402): pid=2050 uid=0 auid=0 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414326930.627:403): pid=2050 uid=0 auid=0 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=2050 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414326930.627:404): pid=2050 uid=0 auid=0 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=2050 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414326930.628:405): pid=2050 uid=0 auid=0 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=2050 suid=0 rport=59049 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414326930.658:406): pid=2059 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=2059 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414326930.658:407): pid=2059 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=2059 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414326930.659:408): pid=2058 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=2059 suid=74 rport=59050 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414326930.659:409): pid=2058 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=2059 suid=74 rport=59050 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414326931.195:410): pid=2058 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=59050 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414326931.195:411): pid=2058 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=e7:e2:3d:94:48:cf:f5:8c:5e:54:98:bd:89:a5:29:a9 rport=59050 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_ACCT msg=audit(1414326931.199:412): pid=2058 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414326931.199:413): pid=2058 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=2059 suid=74 rport=59050 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414326931.201:414): pid=2058 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1414326931.201:415): pid=2058 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=LOGIN msg=audit(1414326931.201:416): pid=2058 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=11 res=1 >type=USER_ROLE_CHANGE msg=audit(1414326931.268:417): pid=2058 uid=0 auid=0 ses=11 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_START msg=audit(1414326931.284:418): pid=2058 uid=0 auid=0 ses=11 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1414326931.288:419): pid=2058 uid=0 auid=0 ses=11 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_START msg=audit(1414326931.288:420): pid=2058 uid=0 auid=0 ses=11 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414326931.289:421): pid=2061 uid=0 auid=0 ses=11 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=2061 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414326931.290:422): pid=2061 uid=0 auid=0 ses=11 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=2061 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRED_REFR msg=audit(1414326931.290:423): pid=2061 uid=0 auid=0 ses=11 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_END msg=audit(1414326934.942:424): pid=2058 uid=0 auid=0 ses=11 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRED_DISP msg=audit(1414326934.943:425): pid=2058 uid=0 auid=0 ses=11 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_END msg=audit(1414326934.943:426): pid=2058 uid=0 auid=0 ses=11 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1414326934.943:427): pid=2058 uid=0 auid=0 ses=11 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414326934.944:428): pid=2058 uid=0 auid=0 ses=11 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=2058 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414326934.944:429): pid=2058 uid=0 auid=0 ses=11 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=2058 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414326934.944:430): pid=2058 uid=0 auid=0 ses=11 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=2058 suid=0 rport=59050 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414326934.956:431): pid=2071 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=2071 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414326934.956:432): pid=2071 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=2071 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414326934.957:433): pid=2070 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=2071 suid=74 rport=49868 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414326934.958:434): pid=2070 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=2071 suid=74 rport=49868 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=USER_AUTH msg=audit(1414326935.491:435): pid=2070 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=49868 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=USER_AUTH msg=audit(1414326935.491:436): pid=2070 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=e7:e2:3d:94:48:cf:f5:8c:5e:54:98:bd:89:a5:29:a9 rport=49868 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=USER_ACCT msg=audit(1414326935.858:437): pid=2070 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414326935.859:438): pid=2070 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=2071 suid=74 rport=49868 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=USER_AUTH msg=audit(1414326935.859:439): pid=2070 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1414326936.223:440): pid=2070 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=LOGIN msg=audit(1414326936.223:441): pid=2070 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=12 res=1 >type=USER_ROLE_CHANGE msg=audit(1414326936.654:442): pid=2070 uid=0 auid=0 ses=12 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=USER_START msg=audit(1414326937.033:443): pid=2070 uid=0 auid=0 ses=12 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1414326937.397:444): pid=2070 uid=0 auid=0 ses=12 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=USER_START msg=audit(1414326937.758:445): pid=2070 uid=0 auid=0 ses=12 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414326937.760:446): pid=2073 uid=0 auid=0 ses=12 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=2073 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414326937.760:447): pid=2073 uid=0 auid=0 ses=12 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=2073 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRED_REFR msg=audit(1414326938.122:448): pid=2073 uid=0 auid=0 ses=12 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414326961.828:449): pid=2105 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=2105 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414326961.829:450): pid=2105 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=2105 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414326961.830:451): pid=2104 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=2105 suid=74 rport=49887 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414326961.830:452): pid=2104 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=2105 suid=74 rport=49887 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=USER_END msg=audit(1414326962.182:453): pid=2070 uid=0 auid=0 ses=12 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=USER_AUTH msg=audit(1414326962.364:454): pid=2104 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=49887 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=USER_AUTH msg=audit(1414326962.364:455): pid=2104 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=e7:e2:3d:94:48:cf:f5:8c:5e:54:98:bd:89:a5:29:a9 rport=49887 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRED_DISP msg=audit(1414326962.543:456): pid=2070 uid=0 auid=0 ses=12 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=USER_ACCT msg=audit(1414326962.729:457): pid=2104 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414326962.730:458): pid=2104 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=2105 suid=74 rport=49887 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=USER_AUTH msg=audit(1414326962.731:459): pid=2104 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=ssh res=success' >type=USER_END msg=audit(1414326962.906:460): pid=2070 uid=0 auid=0 ses=12 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1414326963.093:461): pid=2104 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=LOGIN msg=audit(1414326963.093:462): pid=2104 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=13 res=1 >type=USER_LOGOUT msg=audit(1414326963.269:463): pid=2070 uid=0 auid=0 ses=12 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414326963.269:464): pid=2070 uid=0 auid=0 ses=12 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=2070 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414326963.270:465): pid=2070 uid=0 auid=0 ses=12 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=2070 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414326963.270:466): pid=2070 uid=0 auid=0 ses=12 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=2070 suid=0 rport=49868 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=USER_ROLE_CHANGE msg=audit(1414326963.522:467): pid=2104 uid=0 auid=0 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=USER_START msg=audit(1414326963.894:468): pid=2104 uid=0 auid=0 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1414326964.256:469): pid=2104 uid=0 auid=0 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=USER_START msg=audit(1414326964.617:470): pid=2104 uid=0 auid=0 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414326964.618:471): pid=2108 uid=0 auid=0 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=2108 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414326964.618:472): pid=2108 uid=0 auid=0 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=2108 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRED_REFR msg=audit(1414326964.984:473): pid=2108 uid=0 auid=0 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414326965.030:474): pid=2116 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=2116 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414326965.030:475): pid=2116 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=2116 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414326965.031:476): pid=2115 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=2116 suid=74 rport=49888 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414326965.031:477): pid=2115 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=2116 suid=74 rport=49888 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=USER_END msg=audit(1414326965.384:478): pid=2104 uid=0 auid=0 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=USER_AUTH msg=audit(1414326965.565:479): pid=2115 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=49888 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=USER_AUTH msg=audit(1414326965.565:480): pid=2115 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=e7:e2:3d:94:48:cf:f5:8c:5e:54:98:bd:89:a5:29:a9 rport=49888 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRED_DISP msg=audit(1414326965.744:481): pid=2104 uid=0 auid=0 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=USER_ACCT msg=audit(1414326965.930:482): pid=2115 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414326965.930:483): pid=2115 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=2116 suid=74 rport=49888 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=USER_AUTH msg=audit(1414326965.932:484): pid=2115 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=ssh res=success' >type=USER_END msg=audit(1414326966.104:485): pid=2104 uid=0 auid=0 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1414326966.293:486): pid=2115 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=LOGIN msg=audit(1414326966.293:487): pid=2115 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=14 res=1 >type=USER_LOGOUT msg=audit(1414326966.467:488): pid=2104 uid=0 auid=0 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414326966.467:489): pid=2104 uid=0 auid=0 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=2104 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414326966.467:490): pid=2104 uid=0 auid=0 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=2104 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414326966.468:491): pid=2104 uid=0 auid=0 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=2104 suid=0 rport=49887 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=USER_ROLE_CHANGE msg=audit(1414326966.720:492): pid=2115 uid=0 auid=0 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=USER_START msg=audit(1414326967.092:493): pid=2115 uid=0 auid=0 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1414326967.455:494): pid=2115 uid=0 auid=0 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=USER_START msg=audit(1414326967.816:495): pid=2115 uid=0 auid=0 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414326967.818:496): pid=2119 uid=0 auid=0 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=2119 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414326967.818:497): pid=2119 uid=0 auid=0 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=2119 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRED_REFR msg=audit(1414326968.179:498): pid=2119 uid=0 auid=0 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414326968.354:499): pid=2124 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=2124 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414326968.354:500): pid=2124 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=2124 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414326968.355:501): pid=2123 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=2124 suid=74 rport=49889 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414326968.355:502): pid=2123 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=2124 suid=74 rport=49889 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=USER_END msg=audit(1414326968.687:503): pid=2115 uid=0 auid=0 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=USER_AUTH msg=audit(1414326968.888:504): pid=2123 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=49889 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=USER_AUTH msg=audit(1414326968.888:505): pid=2123 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=e7:e2:3d:94:48:cf:f5:8c:5e:54:98:bd:89:a5:29:a9 rport=49889 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRED_DISP msg=audit(1414326969.050:506): pid=2115 uid=0 auid=0 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=USER_ACCT msg=audit(1414326969.254:507): pid=2123 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414326969.255:508): pid=2123 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=2124 suid=74 rport=49889 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=USER_AUTH msg=audit(1414326969.256:509): pid=2123 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=ssh res=success' >type=USER_END msg=audit(1414326969.411:510): pid=2115 uid=0 auid=0 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1414326969.617:511): pid=2123 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=LOGIN msg=audit(1414326969.617:512): pid=2123 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=15 res=1 >type=USER_LOGOUT msg=audit(1414326969.773:513): pid=2115 uid=0 auid=0 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414326969.774:514): pid=2115 uid=0 auid=0 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=2115 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414326969.774:515): pid=2115 uid=0 auid=0 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=2115 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414326969.774:516): pid=2115 uid=0 auid=0 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=2115 suid=0 rport=49888 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=USER_ROLE_CHANGE msg=audit(1414326970.049:517): pid=2123 uid=0 auid=0 ses=15 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=USER_START msg=audit(1414326970.423:518): pid=2123 uid=0 auid=0 ses=15 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1414326970.788:519): pid=2123 uid=0 auid=0 ses=15 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=USER_START msg=audit(1414326971.149:520): pid=2123 uid=0 auid=0 ses=15 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414326971.151:521): pid=2127 uid=0 auid=0 ses=15 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=2127 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414326971.151:522): pid=2127 uid=0 auid=0 ses=15 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=2127 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRED_REFR msg=audit(1414326971.514:523): pid=2127 uid=0 auid=0 ses=15 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414326975.601:524): pid=2135 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=2135 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414326975.601:525): pid=2135 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=2135 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414326975.602:526): pid=2134 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=2135 suid=74 rport=59076 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414326975.602:527): pid=2134 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=2135 suid=74 rport=59076 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_END msg=audit(1414326975.946:528): pid=2123 uid=0 auid=0 ses=15 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=USER_AUTH msg=audit(1414326976.139:529): pid=2134 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=59076 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414326976.140:530): pid=2134 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=e7:e2:3d:94:48:cf:f5:8c:5e:54:98:bd:89:a5:29:a9 rport=59076 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_ACCT msg=audit(1414326976.144:531): pid=2134 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414326976.145:532): pid=2134 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=2135 suid=74 rport=59076 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414326976.146:533): pid=2134 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1414326976.146:534): pid=2134 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=LOGIN msg=audit(1414326976.146:535): pid=2134 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=16 res=1 >type=USER_ROLE_CHANGE msg=audit(1414326976.214:536): pid=2134 uid=0 auid=0 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_START msg=audit(1414326976.228:537): pid=2134 uid=0 auid=0 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1414326976.232:538): pid=2134 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_START msg=audit(1414326976.232:539): pid=2134 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414326976.234:540): pid=2137 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=2137 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414326976.234:541): pid=2137 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=2137 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRED_REFR msg=audit(1414326976.235:542): pid=2137 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_END msg=audit(1414326976.249:543): pid=2134 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRED_DISP msg=audit(1414326976.249:544): pid=2134 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_END msg=audit(1414326976.249:545): pid=2134 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1414326976.249:546): pid=2134 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414326976.250:547): pid=2134 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=2134 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414326976.250:548): pid=2134 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=2134 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414326976.250:549): pid=2134 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=2134 suid=0 rport=59076 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414326976.263:550): pid=2142 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=2142 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414326976.263:551): pid=2142 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=2142 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414326976.264:552): pid=2141 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=2142 suid=74 rport=59077 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414326976.264:553): pid=2141 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=2142 suid=74 rport=59077 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRED_DISP msg=audit(1414326976.308:554): pid=2123 uid=0 auid=0 ses=15 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=USER_END msg=audit(1414326976.671:555): pid=2123 uid=0 auid=0 ses=15 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=USER_AUTH msg=audit(1414326976.800:556): pid=2141 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=59077 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414326976.800:557): pid=2141 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=e7:e2:3d:94:48:cf:f5:8c:5e:54:98:bd:89:a5:29:a9 rport=59077 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_ACCT msg=audit(1414326976.804:558): pid=2141 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414326976.804:559): pid=2141 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=2142 suid=74 rport=59077 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414326976.805:560): pid=2141 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1414326976.805:561): pid=2141 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=LOGIN msg=audit(1414326976.805:562): pid=2141 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=17 res=1 >type=USER_ROLE_CHANGE msg=audit(1414326976.869:563): pid=2141 uid=0 auid=0 ses=17 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_START msg=audit(1414326976.884:564): pid=2141 uid=0 auid=0 ses=17 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1414326976.888:565): pid=2141 uid=0 auid=0 ses=17 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_START msg=audit(1414326976.888:566): pid=2141 uid=0 auid=0 ses=17 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414326976.890:567): pid=2144 uid=0 auid=0 ses=17 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=2144 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414326976.890:568): pid=2144 uid=0 auid=0 ses=17 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=2144 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRED_REFR msg=audit(1414326976.890:569): pid=2144 uid=0 auid=0 ses=17 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_END msg=audit(1414326976.906:570): pid=2141 uid=0 auid=0 ses=17 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRED_DISP msg=audit(1414326976.906:571): pid=2141 uid=0 auid=0 ses=17 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_END msg=audit(1414326976.907:572): pid=2141 uid=0 auid=0 ses=17 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1414326976.907:573): pid=2141 uid=0 auid=0 ses=17 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414326976.907:574): pid=2141 uid=0 auid=0 ses=17 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=2141 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414326976.907:575): pid=2141 uid=0 auid=0 ses=17 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=2141 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414326976.908:576): pid=2141 uid=0 auid=0 ses=17 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=2141 suid=0 rport=59077 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414326976.919:577): pid=2149 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=2149 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414326976.919:578): pid=2149 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=2149 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414326976.920:579): pid=2148 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=2149 suid=74 rport=59078 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414326976.920:580): pid=2148 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=2149 suid=74 rport=59078 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_LOGOUT msg=audit(1414326977.031:581): pid=2123 uid=0 auid=0 ses=15 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414326977.031:582): pid=2123 uid=0 auid=0 ses=15 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=2123 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414326977.031:583): pid=2123 uid=0 auid=0 ses=15 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=2123 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414326977.031:584): pid=2123 uid=0 auid=0 ses=15 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=2123 suid=0 rport=49889 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=USER_AUTH msg=audit(1414326977.456:585): pid=2148 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=59078 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414326977.456:586): pid=2148 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=e7:e2:3d:94:48:cf:f5:8c:5e:54:98:bd:89:a5:29:a9 rport=59078 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_ACCT msg=audit(1414326977.461:587): pid=2148 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414326977.461:588): pid=2148 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=2149 suid=74 rport=59078 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414326977.462:589): pid=2148 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1414326977.462:590): pid=2148 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=LOGIN msg=audit(1414326977.462:591): pid=2148 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=18 res=1 >type=USER_ROLE_CHANGE msg=audit(1414326977.525:592): pid=2148 uid=0 auid=0 ses=18 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_START msg=audit(1414326977.540:593): pid=2148 uid=0 auid=0 ses=18 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1414326977.544:594): pid=2148 uid=0 auid=0 ses=18 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_START msg=audit(1414326977.544:595): pid=2148 uid=0 auid=0 ses=18 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414326977.546:596): pid=2152 uid=0 auid=0 ses=18 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=2152 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414326977.546:597): pid=2152 uid=0 auid=0 ses=18 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=2152 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRED_REFR msg=audit(1414326977.547:598): pid=2152 uid=0 auid=0 ses=18 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_END msg=audit(1414326977.571:599): pid=2148 uid=0 auid=0 ses=18 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRED_DISP msg=audit(1414326977.571:600): pid=2148 uid=0 auid=0 ses=18 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_END msg=audit(1414326977.571:601): pid=2148 uid=0 auid=0 ses=18 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1414326977.571:602): pid=2148 uid=0 auid=0 ses=18 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414326977.571:603): pid=2148 uid=0 auid=0 ses=18 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=2148 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414326977.572:604): pid=2148 uid=0 auid=0 ses=18 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=2148 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414326977.572:605): pid=2148 uid=0 auid=0 ses=18 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=2148 suid=0 rport=59078 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414326977.585:606): pid=2157 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=2157 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414326977.586:607): pid=2157 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=2157 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414326977.587:608): pid=2156 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=2157 suid=74 rport=59079 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414326977.587:609): pid=2156 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=2157 suid=74 rport=59079 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414326978.121:610): pid=2156 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=59079 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414326978.121:611): pid=2156 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=e7:e2:3d:94:48:cf:f5:8c:5e:54:98:bd:89:a5:29:a9 rport=59079 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_ACCT msg=audit(1414326978.125:612): pid=2156 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414326978.125:613): pid=2156 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=2157 suid=74 rport=59079 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414326978.126:614): pid=2156 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1414326978.126:615): pid=2156 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=LOGIN msg=audit(1414326978.126:616): pid=2156 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=19 res=1 >type=USER_ROLE_CHANGE msg=audit(1414326978.192:617): pid=2156 uid=0 auid=0 ses=19 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_START msg=audit(1414326978.209:618): pid=2156 uid=0 auid=0 ses=19 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1414326978.212:619): pid=2156 uid=0 auid=0 ses=19 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_START msg=audit(1414326978.213:620): pid=2156 uid=0 auid=0 ses=19 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414326978.214:621): pid=2159 uid=0 auid=0 ses=19 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=2159 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414326978.214:622): pid=2159 uid=0 auid=0 ses=19 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=2159 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRED_REFR msg=audit(1414326978.215:623): pid=2159 uid=0 auid=0 ses=19 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_END msg=audit(1414327003.372:624): pid=2156 uid=0 auid=0 ses=19 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRED_DISP msg=audit(1414327003.372:625): pid=2156 uid=0 auid=0 ses=19 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_END msg=audit(1414327003.373:626): pid=2156 uid=0 auid=0 ses=19 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1414327003.373:627): pid=2156 uid=0 auid=0 ses=19 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327003.373:628): pid=2156 uid=0 auid=0 ses=19 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=2156 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327003.373:629): pid=2156 uid=0 auid=0 ses=19 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=2156 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327003.373:630): pid=2156 uid=0 auid=0 ses=19 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=2156 suid=0 rport=59079 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327003.463:631): pid=2252 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=2252 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327003.463:632): pid=2252 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=2252 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414327003.464:633): pid=2250 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=2252 suid=74 rport=59100 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414327003.464:634): pid=2250 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=2252 suid=74 rport=59100 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327003.470:635): pid=2250 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=2252 suid=74 rport=59100 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327003.470:636): pid=2250 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=2250 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327003.470:637): pid=2250 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=2250 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327003.470:638): pid=2253 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=2253 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_LOGIN msg=audit(1414327003.470:639): pid=2250 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct=28756E6B6E6F776E207573657229 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=ssh res=failed' >type=CRYPTO_KEY_USER msg=audit(1414327003.471:640): pid=2253 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=2253 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414327003.471:641): pid=2251 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=2253 suid=74 rport=59101 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414327003.472:642): pid=2251 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=2253 suid=74 rport=59101 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327003.479:643): pid=2251 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=2253 suid=74 rport=59101 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327003.480:644): pid=2251 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=2251 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327003.480:645): pid=2251 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=2251 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_LOGIN msg=audit(1414327003.480:646): pid=2251 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct=28756E6B6E6F776E207573657229 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=ssh res=failed' >type=CRYPTO_KEY_USER msg=audit(1414327003.620:647): pid=2256 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=2256 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327003.621:648): pid=2256 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=2256 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414327003.622:649): pid=2255 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=2256 suid=74 rport=59102 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414327003.622:650): pid=2255 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=2256 suid=74 rport=59102 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327004.158:651): pid=2255 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=59102 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327004.158:652): pid=2255 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=e7:e2:3d:94:48:cf:f5:8c:5e:54:98:bd:89:a5:29:a9 rport=59102 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_ACCT msg=audit(1414327004.162:653): pid=2255 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327004.163:654): pid=2255 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=2256 suid=74 rport=59102 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327004.164:655): pid=2255 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1414327004.164:656): pid=2255 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=LOGIN msg=audit(1414327004.164:657): pid=2255 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=20 res=1 >type=USER_ROLE_CHANGE msg=audit(1414327004.238:658): pid=2255 uid=0 auid=0 ses=20 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_START msg=audit(1414327004.280:659): pid=2255 uid=0 auid=0 ses=20 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1414327004.284:660): pid=2255 uid=0 auid=0 ses=20 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_START msg=audit(1414327004.284:661): pid=2255 uid=0 auid=0 ses=20 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327004.285:662): pid=2258 uid=0 auid=0 ses=20 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=2258 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327004.286:663): pid=2258 uid=0 auid=0 ses=20 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=2258 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRED_REFR msg=audit(1414327004.287:664): pid=2258 uid=0 auid=0 ses=20 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_END msg=audit(1414327004.308:665): pid=2255 uid=0 auid=0 ses=20 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRED_DISP msg=audit(1414327004.308:666): pid=2255 uid=0 auid=0 ses=20 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_END msg=audit(1414327004.308:667): pid=2255 uid=0 auid=0 ses=20 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1414327004.309:668): pid=2255 uid=0 auid=0 ses=20 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327004.309:669): pid=2255 uid=0 auid=0 ses=20 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=2255 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327004.309:670): pid=2255 uid=0 auid=0 ses=20 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=2255 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327004.309:671): pid=2255 uid=0 auid=0 ses=20 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=2255 suid=0 rport=59102 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327004.322:672): pid=2263 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=2263 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327004.322:673): pid=2263 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=2263 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414327004.324:674): pid=2262 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=2263 suid=74 rport=59103 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414327004.324:675): pid=2262 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=2263 suid=74 rport=59103 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327004.865:676): pid=2262 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=59103 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327004.865:677): pid=2262 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=e7:e2:3d:94:48:cf:f5:8c:5e:54:98:bd:89:a5:29:a9 rport=59103 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_ACCT msg=audit(1414327004.869:678): pid=2262 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327004.869:679): pid=2262 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=2263 suid=74 rport=59103 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327004.870:680): pid=2262 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1414327004.871:681): pid=2262 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=LOGIN msg=audit(1414327004.871:682): pid=2262 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=21 res=1 >type=USER_ROLE_CHANGE msg=audit(1414327004.936:683): pid=2262 uid=0 auid=0 ses=21 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_START msg=audit(1414327004.951:684): pid=2262 uid=0 auid=0 ses=21 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1414327004.955:685): pid=2262 uid=0 auid=0 ses=21 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_START msg=audit(1414327004.955:686): pid=2262 uid=0 auid=0 ses=21 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327004.956:687): pid=2265 uid=0 auid=0 ses=21 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=2265 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327004.956:688): pid=2265 uid=0 auid=0 ses=21 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=2265 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRED_REFR msg=audit(1414327004.957:689): pid=2265 uid=0 auid=0 ses=21 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_END msg=audit(1414327004.978:690): pid=2262 uid=0 auid=0 ses=21 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRED_DISP msg=audit(1414327004.979:691): pid=2262 uid=0 auid=0 ses=21 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_END msg=audit(1414327004.979:692): pid=2262 uid=0 auid=0 ses=21 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1414327004.980:693): pid=2262 uid=0 auid=0 ses=21 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327004.980:694): pid=2262 uid=0 auid=0 ses=21 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=2262 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327004.980:695): pid=2262 uid=0 auid=0 ses=21 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=2262 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327004.980:696): pid=2262 uid=0 auid=0 ses=21 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=2262 suid=0 rport=59103 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327004.990:697): pid=2270 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=2270 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327004.990:698): pid=2270 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=2270 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414327004.991:699): pid=2269 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=2270 suid=74 rport=59104 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414327004.991:700): pid=2269 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=2270 suid=74 rport=59104 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327005.527:701): pid=2269 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=59104 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327005.527:702): pid=2269 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=e7:e2:3d:94:48:cf:f5:8c:5e:54:98:bd:89:a5:29:a9 rport=59104 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_ACCT msg=audit(1414327005.531:703): pid=2269 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327005.532:704): pid=2269 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=2270 suid=74 rport=59104 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327005.533:705): pid=2269 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1414327005.534:706): pid=2269 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=LOGIN msg=audit(1414327005.534:707): pid=2269 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22 res=1 >type=USER_ROLE_CHANGE msg=audit(1414327005.598:708): pid=2269 uid=0 auid=0 ses=22 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_START msg=audit(1414327005.613:709): pid=2269 uid=0 auid=0 ses=22 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1414327005.618:710): pid=2269 uid=0 auid=0 ses=22 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_START msg=audit(1414327005.618:711): pid=2269 uid=0 auid=0 ses=22 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327005.620:712): pid=2272 uid=0 auid=0 ses=22 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=2272 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327005.620:713): pid=2272 uid=0 auid=0 ses=22 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=2272 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRED_REFR msg=audit(1414327005.620:714): pid=2272 uid=0 auid=0 ses=22 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_END msg=audit(1414327005.640:715): pid=2269 uid=0 auid=0 ses=22 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRED_DISP msg=audit(1414327005.640:716): pid=2269 uid=0 auid=0 ses=22 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_END msg=audit(1414327005.640:717): pid=2269 uid=0 auid=0 ses=22 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1414327005.640:718): pid=2269 uid=0 auid=0 ses=22 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327005.641:719): pid=2269 uid=0 auid=0 ses=22 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=2269 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327005.641:720): pid=2269 uid=0 auid=0 ses=22 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=2269 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327005.641:721): pid=2269 uid=0 auid=0 ses=22 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=2269 suid=0 rport=59104 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327005.652:722): pid=2277 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=2277 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327005.652:723): pid=2277 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=2277 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414327005.653:724): pid=2276 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=2277 suid=74 rport=49920 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414327005.653:725): pid=2276 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=2277 suid=74 rport=49920 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=USER_AUTH msg=audit(1414327006.187:726): pid=2276 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=49920 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=USER_AUTH msg=audit(1414327006.187:727): pid=2276 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=e7:e2:3d:94:48:cf:f5:8c:5e:54:98:bd:89:a5:29:a9 rport=49920 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=USER_ACCT msg=audit(1414327006.552:728): pid=2276 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327006.552:729): pid=2276 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=2277 suid=74 rport=49920 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=USER_AUTH msg=audit(1414327006.554:730): pid=2276 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1414327006.915:731): pid=2276 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=LOGIN msg=audit(1414327006.915:732): pid=2276 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23 res=1 >type=USER_ROLE_CHANGE msg=audit(1414327007.342:733): pid=2276 uid=0 auid=0 ses=23 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=USER_START msg=audit(1414327007.719:734): pid=2276 uid=0 auid=0 ses=23 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1414327008.083:735): pid=2276 uid=0 auid=0 ses=23 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=USER_START msg=audit(1414327008.443:736): pid=2276 uid=0 auid=0 ses=23 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327008.444:737): pid=2279 uid=0 auid=0 ses=23 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=2279 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327008.444:738): pid=2279 uid=0 auid=0 ses=23 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=2279 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRED_REFR msg=audit(1414327008.812:739): pid=2279 uid=0 auid=0 ses=23 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327008.844:740): pid=2283 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=2283 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327008.844:741): pid=2283 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=2283 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414327008.845:742): pid=2282 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=2283 suid=74 rport=49921 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414327008.845:743): pid=2282 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=2283 suid=74 rport=49921 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=USER_END msg=audit(1414327009.195:744): pid=2276 uid=0 auid=0 ses=23 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=USER_AUTH msg=audit(1414327009.379:745): pid=2282 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=49921 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=USER_AUTH msg=audit(1414327009.379:746): pid=2282 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=e7:e2:3d:94:48:cf:f5:8c:5e:54:98:bd:89:a5:29:a9 rport=49921 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRED_DISP msg=audit(1414327009.556:747): pid=2276 uid=0 auid=0 ses=23 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=USER_ACCT msg=audit(1414327009.745:748): pid=2282 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327009.745:749): pid=2282 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=2283 suid=74 rport=49921 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=USER_AUTH msg=audit(1414327009.745:750): pid=2282 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=ssh res=success' >type=USER_END msg=audit(1414327009.917:751): pid=2276 uid=0 auid=0 ses=23 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1414327010.108:752): pid=2282 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=LOGIN msg=audit(1414327010.108:753): pid=2282 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=24 res=1 >type=USER_LOGOUT msg=audit(1414327010.280:754): pid=2276 uid=0 auid=0 ses=23 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327010.281:755): pid=2276 uid=0 auid=0 ses=23 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=2276 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327010.281:756): pid=2276 uid=0 auid=0 ses=23 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=2276 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327010.281:757): pid=2276 uid=0 auid=0 ses=23 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=2276 suid=0 rport=49920 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=USER_ROLE_CHANGE msg=audit(1414327010.536:758): pid=2282 uid=0 auid=0 ses=24 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=USER_START msg=audit(1414327010.910:759): pid=2282 uid=0 auid=0 ses=24 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1414327011.274:760): pid=2282 uid=0 auid=0 ses=24 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=USER_START msg=audit(1414327011.635:761): pid=2282 uid=0 auid=0 ses=24 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327011.637:762): pid=2286 uid=0 auid=0 ses=24 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=2286 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327011.637:763): pid=2286 uid=0 auid=0 ses=24 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=2286 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRED_REFR msg=audit(1414327011.998:764): pid=2286 uid=0 auid=0 ses=24 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327012.031:765): pid=2290 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=2290 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327012.031:766): pid=2290 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=2290 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414327012.033:767): pid=2289 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=2290 suid=74 rport=49922 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414327012.033:768): pid=2289 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=2290 suid=74 rport=49922 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=USER_END msg=audit(1414327012.381:769): pid=2282 uid=0 auid=0 ses=24 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=USER_AUTH msg=audit(1414327012.565:770): pid=2289 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=49922 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=USER_AUTH msg=audit(1414327012.565:771): pid=2289 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=e7:e2:3d:94:48:cf:f5:8c:5e:54:98:bd:89:a5:29:a9 rport=49922 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRED_DISP msg=audit(1414327012.743:772): pid=2282 uid=0 auid=0 ses=24 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=USER_ACCT msg=audit(1414327012.931:773): pid=2289 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327012.931:774): pid=2289 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=2290 suid=74 rport=49922 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=USER_AUTH msg=audit(1414327012.932:775): pid=2289 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=ssh res=success' >type=USER_END msg=audit(1414327013.110:776): pid=2282 uid=0 auid=0 ses=24 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1414327013.297:777): pid=2289 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=LOGIN msg=audit(1414327013.297:778): pid=2289 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=25 res=1 >type=USER_LOGOUT msg=audit(1414327013.472:779): pid=2282 uid=0 auid=0 ses=24 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327013.472:780): pid=2282 uid=0 auid=0 ses=24 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=2282 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327013.472:781): pid=2282 uid=0 auid=0 ses=24 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=2282 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327013.472:782): pid=2282 uid=0 auid=0 ses=24 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=2282 suid=0 rport=49921 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=USER_ROLE_CHANGE msg=audit(1414327013.723:783): pid=2289 uid=0 auid=0 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=USER_START msg=audit(1414327014.095:784): pid=2289 uid=0 auid=0 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1414327014.457:785): pid=2289 uid=0 auid=0 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=USER_START msg=audit(1414327014.818:786): pid=2289 uid=0 auid=0 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327014.820:787): pid=2293 uid=0 auid=0 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=2293 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327014.820:788): pid=2293 uid=0 auid=0 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=2293 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRED_REFR msg=audit(1414327015.185:789): pid=2293 uid=0 auid=0 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327015.223:790): pid=2297 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=2297 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327015.223:791): pid=2297 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=2297 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414327015.224:792): pid=2296 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=2297 suid=74 rport=59108 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414327015.224:793): pid=2296 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=2297 suid=74 rport=59108 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_END msg=audit(1414327015.567:794): pid=2289 uid=0 auid=0 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=USER_AUTH msg=audit(1414327015.765:795): pid=2296 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=59108 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327015.765:796): pid=2296 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=e7:e2:3d:94:48:cf:f5:8c:5e:54:98:bd:89:a5:29:a9 rport=59108 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_ACCT msg=audit(1414327015.769:797): pid=2296 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327015.770:798): pid=2296 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=2297 suid=74 rport=59108 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327015.771:799): pid=2296 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1414327015.771:800): pid=2296 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=LOGIN msg=audit(1414327015.771:801): pid=2296 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=26 res=1 >type=USER_ROLE_CHANGE msg=audit(1414327015.835:802): pid=2296 uid=0 auid=0 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_START msg=audit(1414327015.852:803): pid=2296 uid=0 auid=0 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1414327015.855:804): pid=2296 uid=0 auid=0 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_START msg=audit(1414327015.855:805): pid=2296 uid=0 auid=0 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327015.857:806): pid=2299 uid=0 auid=0 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=2299 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327015.857:807): pid=2299 uid=0 auid=0 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=2299 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRED_REFR msg=audit(1414327015.858:808): pid=2299 uid=0 auid=0 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_END msg=audit(1414327015.871:809): pid=2296 uid=0 auid=0 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRED_DISP msg=audit(1414327015.871:810): pid=2296 uid=0 auid=0 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_END msg=audit(1414327015.872:811): pid=2296 uid=0 auid=0 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1414327015.872:812): pid=2296 uid=0 auid=0 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327015.872:813): pid=2296 uid=0 auid=0 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=2296 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327015.872:814): pid=2296 uid=0 auid=0 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=2296 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327015.872:815): pid=2296 uid=0 auid=0 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=2296 suid=0 rport=59108 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327015.913:816): pid=2309 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=2309 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327015.913:817): pid=2309 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=2309 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414327015.914:818): pid=2308 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=2309 suid=74 rport=59109 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414327015.914:819): pid=2308 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=2309 suid=74 rport=59109 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRED_DISP msg=audit(1414327015.930:820): pid=2289 uid=0 auid=0 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=USER_END msg=audit(1414327016.291:821): pid=2289 uid=0 auid=0 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=USER_AUTH msg=audit(1414327016.449:822): pid=2308 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=59109 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327016.449:823): pid=2308 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=e7:e2:3d:94:48:cf:f5:8c:5e:54:98:bd:89:a5:29:a9 rport=59109 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_ACCT msg=audit(1414327016.452:824): pid=2308 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327016.453:825): pid=2308 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=2309 suid=74 rport=59109 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327016.454:826): pid=2308 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1414327016.454:827): pid=2308 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=LOGIN msg=audit(1414327016.454:828): pid=2308 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=27 res=1 >type=USER_ROLE_CHANGE msg=audit(1414327016.519:829): pid=2308 uid=0 auid=0 ses=27 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_START msg=audit(1414327016.534:830): pid=2308 uid=0 auid=0 ses=27 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1414327016.537:831): pid=2308 uid=0 auid=0 ses=27 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_START msg=audit(1414327016.538:832): pid=2308 uid=0 auid=0 ses=27 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327016.539:833): pid=2311 uid=0 auid=0 ses=27 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=2311 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327016.539:834): pid=2311 uid=0 auid=0 ses=27 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=2311 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRED_REFR msg=audit(1414327016.540:835): pid=2311 uid=0 auid=0 ses=27 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1414327016.655:836): pid=2289 uid=0 auid=0 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327016.655:837): pid=2289 uid=0 auid=0 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=2289 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327016.655:838): pid=2289 uid=0 auid=0 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=2289 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327016.655:839): pid=2289 uid=0 auid=0 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=2289 suid=0 rport=49922 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=ADD_GROUP msg=audit(1414327024.890:840): pid=2332 uid=0 auid=0 ses=27 subj=unconfined_u:system_r:groupadd_t:s0-s0:c0.c1023 msg='op=adding group to /etc/group id=52 exe="/usr/sbin/groupadd" hostname=? addr=? terminal=? res=success' >type=ADD_GROUP msg=audit(1414327024.892:841): pid=2332 uid=0 auid=0 ses=27 subj=unconfined_u:system_r:groupadd_t:s0-s0:c0.c1023 msg='op=adding group to /etc/gshadow id=52 exe="/usr/sbin/groupadd" hostname=? addr=? terminal=? res=success' >type=ADD_GROUP msg=audit(1414327024.893:842): pid=2332 uid=0 auid=0 ses=27 subj=unconfined_u:system_r:groupadd_t:s0-s0:c0.c1023 msg='op= id=52 exe="/usr/sbin/groupadd" hostname=? addr=? terminal=? res=success' >type=ADD_USER msg=audit(1414327024.901:843): pid=2337 uid=0 auid=0 ses=27 subj=unconfined_u:system_r:useradd_t:s0-s0:c0.c1023 msg='op=adding user id=52 exe="/usr/sbin/useradd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1414327029.389:844): pid=2308 uid=0 auid=0 ses=27 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRED_DISP msg=audit(1414327029.390:845): pid=2308 uid=0 auid=0 ses=27 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_END msg=audit(1414327029.390:846): pid=2308 uid=0 auid=0 ses=27 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1414327029.390:847): pid=2308 uid=0 auid=0 ses=27 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327029.390:848): pid=2308 uid=0 auid=0 ses=27 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=2308 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327029.390:849): pid=2308 uid=0 auid=0 ses=27 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=2308 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327029.391:850): pid=2308 uid=0 auid=0 ses=27 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=2308 suid=0 rport=59109 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327029.398:851): pid=2362 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=2362 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327029.399:852): pid=2362 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=2362 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414327029.400:853): pid=2360 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=2362 suid=74 rport=49933 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414327029.400:854): pid=2360 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=2362 suid=74 rport=49933 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=USER_AUTH msg=audit(1414327029.932:855): pid=2360 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=49933 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=USER_AUTH msg=audit(1414327029.932:856): pid=2360 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=e7:e2:3d:94:48:cf:f5:8c:5e:54:98:bd:89:a5:29:a9 rport=49933 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=USER_ACCT msg=audit(1414327030.299:857): pid=2360 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327030.300:858): pid=2360 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=2362 suid=74 rport=49933 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=USER_AUTH msg=audit(1414327030.301:859): pid=2360 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1414327030.666:860): pid=2360 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=LOGIN msg=audit(1414327030.666:861): pid=2360 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=28 res=1 >type=USER_ROLE_CHANGE msg=audit(1414327031.099:862): pid=2360 uid=0 auid=0 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=USER_START msg=audit(1414327031.503:863): pid=2360 uid=0 auid=0 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1414327031.868:864): pid=2360 uid=0 auid=0 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=USER_START msg=audit(1414327032.229:865): pid=2360 uid=0 auid=0 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327032.230:866): pid=2364 uid=0 auid=0 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=2364 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327032.230:867): pid=2364 uid=0 auid=0 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=2364 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRED_REFR msg=audit(1414327032.592:868): pid=2364 uid=0 auid=0 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327038.685:869): pid=2377 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=2377 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327038.686:870): pid=2377 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=2377 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414327038.687:871): pid=2376 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=2377 suid=74 rport=59119 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414327038.687:872): pid=2376 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=2377 suid=74 rport=59119 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_END msg=audit(1414327039.031:873): pid=2360 uid=0 auid=0 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=USER_AUTH msg=audit(1414327039.222:874): pid=2376 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=59119 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327039.222:875): pid=2376 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=e7:e2:3d:94:48:cf:f5:8c:5e:54:98:bd:89:a5:29:a9 rport=59119 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_ACCT msg=audit(1414327039.226:876): pid=2376 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327039.227:877): pid=2376 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=2377 suid=74 rport=59119 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327039.228:878): pid=2376 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1414327039.228:879): pid=2376 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=LOGIN msg=audit(1414327039.228:880): pid=2376 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=29 res=1 >type=USER_ROLE_CHANGE msg=audit(1414327039.291:881): pid=2376 uid=0 auid=0 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_START msg=audit(1414327039.312:882): pid=2376 uid=0 auid=0 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1414327039.316:883): pid=2376 uid=0 auid=0 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_START msg=audit(1414327039.316:884): pid=2376 uid=0 auid=0 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327039.318:885): pid=2379 uid=0 auid=0 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=2379 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327039.318:886): pid=2379 uid=0 auid=0 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=2379 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRED_REFR msg=audit(1414327039.319:887): pid=2379 uid=0 auid=0 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_END msg=audit(1414327039.337:888): pid=2376 uid=0 auid=0 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRED_DISP msg=audit(1414327039.337:889): pid=2376 uid=0 auid=0 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_END msg=audit(1414327039.338:890): pid=2376 uid=0 auid=0 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1414327039.338:891): pid=2376 uid=0 auid=0 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327039.338:892): pid=2376 uid=0 auid=0 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=2376 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327039.338:893): pid=2376 uid=0 auid=0 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=2376 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327039.338:894): pid=2376 uid=0 auid=0 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=2376 suid=0 rport=59119 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327039.349:895): pid=2387 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=2387 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327039.350:896): pid=2387 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=2387 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414327039.351:897): pid=2386 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=2387 suid=74 rport=59120 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414327039.351:898): pid=2386 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=2387 suid=74 rport=59120 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRED_DISP msg=audit(1414327039.392:899): pid=2360 uid=0 auid=0 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=USER_END msg=audit(1414327039.754:900): pid=2360 uid=0 auid=0 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=USER_AUTH msg=audit(1414327039.887:901): pid=2386 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=59120 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327039.887:902): pid=2386 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=e7:e2:3d:94:48:cf:f5:8c:5e:54:98:bd:89:a5:29:a9 rport=59120 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_ACCT msg=audit(1414327039.891:903): pid=2386 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327039.892:904): pid=2386 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=2387 suid=74 rport=59120 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327039.893:905): pid=2386 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1414327039.893:906): pid=2386 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=LOGIN msg=audit(1414327039.893:907): pid=2386 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=30 res=1 >type=USER_ROLE_CHANGE msg=audit(1414327039.960:908): pid=2386 uid=0 auid=0 ses=30 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_START msg=audit(1414327039.977:909): pid=2386 uid=0 auid=0 ses=30 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1414327039.981:910): pid=2386 uid=0 auid=0 ses=30 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_START msg=audit(1414327039.981:911): pid=2386 uid=0 auid=0 ses=30 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327039.983:912): pid=2389 uid=0 auid=0 ses=30 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=2389 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327039.983:913): pid=2389 uid=0 auid=0 ses=30 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=2389 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRED_REFR msg=audit(1414327039.985:914): pid=2389 uid=0 auid=0 ses=30 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1414327040.116:915): pid=2360 uid=0 auid=0 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327040.117:916): pid=2360 uid=0 auid=0 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=2360 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327040.117:917): pid=2360 uid=0 auid=0 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=2360 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327040.117:918): pid=2360 uid=0 auid=0 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=2360 suid=0 rport=49933 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=USER_END msg=audit(1414327040.123:919): pid=2386 uid=0 auid=0 ses=30 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRED_DISP msg=audit(1414327040.124:920): pid=2386 uid=0 auid=0 ses=30 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_END msg=audit(1414327040.125:921): pid=2386 uid=0 auid=0 ses=30 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1414327040.125:922): pid=2386 uid=0 auid=0 ses=30 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327040.125:923): pid=2386 uid=0 auid=0 ses=30 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=2386 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327040.125:924): pid=2386 uid=0 auid=0 ses=30 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=2386 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327040.125:925): pid=2386 uid=0 auid=0 ses=30 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=2386 suid=0 rport=59120 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327040.133:926): pid=2398 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=2398 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327040.133:927): pid=2398 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=2398 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414327040.135:928): pid=2396 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=2398 suid=74 rport=49936 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414327040.135:929): pid=2396 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=2398 suid=74 rport=49936 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=USER_AUTH msg=audit(1414327040.669:930): pid=2396 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=49936 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=USER_AUTH msg=audit(1414327040.669:931): pid=2396 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=e7:e2:3d:94:48:cf:f5:8c:5e:54:98:bd:89:a5:29:a9 rport=49936 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=USER_ACCT msg=audit(1414327041.036:932): pid=2396 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327041.037:933): pid=2396 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=2398 suid=74 rport=49936 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=USER_AUTH msg=audit(1414327041.038:934): pid=2396 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1414327041.401:935): pid=2396 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=LOGIN msg=audit(1414327041.401:936): pid=2396 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=31 res=1 >type=USER_ROLE_CHANGE msg=audit(1414327041.827:937): pid=2396 uid=0 auid=0 ses=31 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=USER_START msg=audit(1414327042.203:938): pid=2396 uid=0 auid=0 ses=31 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1414327042.567:939): pid=2396 uid=0 auid=0 ses=31 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=USER_START msg=audit(1414327042.929:940): pid=2396 uid=0 auid=0 ses=31 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327042.930:941): pid=2400 uid=0 auid=0 ses=31 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=2400 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327042.930:942): pid=2400 uid=0 auid=0 ses=31 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=2400 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRED_REFR msg=audit(1414327043.293:943): pid=2400 uid=0 auid=0 ses=31 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327043.322:944): pid=2407 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=2407 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327043.322:945): pid=2407 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=2407 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414327043.323:946): pid=2406 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=2407 suid=74 rport=49937 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414327043.323:947): pid=2406 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=2407 suid=74 rport=49937 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=USER_END msg=audit(1414327043.674:948): pid=2396 uid=0 auid=0 ses=31 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=USER_AUTH msg=audit(1414327043.857:949): pid=2406 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=49937 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=USER_AUTH msg=audit(1414327043.857:950): pid=2406 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=e7:e2:3d:94:48:cf:f5:8c:5e:54:98:bd:89:a5:29:a9 rport=49937 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRED_DISP msg=audit(1414327044.036:951): pid=2396 uid=0 auid=0 ses=31 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=USER_ACCT msg=audit(1414327044.224:952): pid=2406 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327044.224:953): pid=2406 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=2407 suid=74 rport=49937 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=USER_AUTH msg=audit(1414327044.225:954): pid=2406 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=ssh res=success' >type=USER_END msg=audit(1414327044.400:955): pid=2396 uid=0 auid=0 ses=31 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1414327044.588:956): pid=2406 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=LOGIN msg=audit(1414327044.588:957): pid=2406 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=32 res=1 >type=USER_LOGOUT msg=audit(1414327044.764:958): pid=2396 uid=0 auid=0 ses=31 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327044.765:959): pid=2396 uid=0 auid=0 ses=31 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=2396 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327044.765:960): pid=2396 uid=0 auid=0 ses=31 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=2396 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327044.766:961): pid=2396 uid=0 auid=0 ses=31 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=2396 suid=0 rport=49936 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=USER_ROLE_CHANGE msg=audit(1414327045.021:962): pid=2406 uid=0 auid=0 ses=32 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=USER_START msg=audit(1414327045.395:963): pid=2406 uid=0 auid=0 ses=32 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1414327045.758:964): pid=2406 uid=0 auid=0 ses=32 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=USER_START msg=audit(1414327046.119:965): pid=2406 uid=0 auid=0 ses=32 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327046.120:966): pid=2410 uid=0 auid=0 ses=32 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=2410 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327046.121:967): pid=2410 uid=0 auid=0 ses=32 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=2410 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRED_REFR msg=audit(1414327046.482:968): pid=2410 uid=0 auid=0 ses=32 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327046.602:969): pid=2415 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=2415 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327046.602:970): pid=2415 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=2415 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414327046.603:971): pid=2414 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=2415 suid=74 rport=59123 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414327046.605:972): pid=2414 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=2415 suid=74 rport=59123 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_END msg=audit(1414327046.950:973): pid=2406 uid=0 auid=0 ses=32 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=USER_AUTH msg=audit(1414327047.142:974): pid=2414 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=59123 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327047.142:975): pid=2414 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=e7:e2:3d:94:48:cf:f5:8c:5e:54:98:bd:89:a5:29:a9 rport=59123 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_ACCT msg=audit(1414327047.146:976): pid=2414 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327047.146:977): pid=2414 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=2415 suid=74 rport=59123 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327047.147:978): pid=2414 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1414327047.147:979): pid=2414 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=LOGIN msg=audit(1414327047.148:980): pid=2414 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=33 res=1 >type=USER_ROLE_CHANGE msg=audit(1414327047.212:981): pid=2414 uid=0 auid=0 ses=33 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_START msg=audit(1414327047.229:982): pid=2414 uid=0 auid=0 ses=33 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1414327047.233:983): pid=2414 uid=0 auid=0 ses=33 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_START msg=audit(1414327047.233:984): pid=2414 uid=0 auid=0 ses=33 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327047.235:985): pid=2417 uid=0 auid=0 ses=33 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=2417 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327047.235:986): pid=2417 uid=0 auid=0 ses=33 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=2417 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRED_REFR msg=audit(1414327047.236:987): pid=2417 uid=0 auid=0 ses=33 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_END msg=audit(1414327047.252:988): pid=2414 uid=0 auid=0 ses=33 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRED_DISP msg=audit(1414327047.253:989): pid=2414 uid=0 auid=0 ses=33 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_END msg=audit(1414327047.253:990): pid=2414 uid=0 auid=0 ses=33 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1414327047.254:991): pid=2414 uid=0 auid=0 ses=33 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327047.254:992): pid=2414 uid=0 auid=0 ses=33 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=2414 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327047.254:993): pid=2414 uid=0 auid=0 ses=33 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=2414 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327047.254:994): pid=2414 uid=0 auid=0 ses=33 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=2414 suid=0 rport=59123 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327047.266:995): pid=2426 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=2426 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327047.266:996): pid=2426 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=2426 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414327047.267:997): pid=2425 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=2426 suid=74 rport=49939 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414327047.267:998): pid=2425 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=2426 suid=74 rport=49939 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRED_DISP msg=audit(1414327047.315:999): pid=2406 uid=0 auid=0 ses=32 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=USER_END msg=audit(1414327047.677:1000): pid=2406 uid=0 auid=0 ses=32 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=USER_AUTH msg=audit(1414327047.802:1001): pid=2425 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=49939 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=USER_AUTH msg=audit(1414327047.802:1002): pid=2425 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=e7:e2:3d:94:48:cf:f5:8c:5e:54:98:bd:89:a5:29:a9 rport=49939 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=USER_LOGOUT msg=audit(1414327048.037:1003): pid=2406 uid=0 auid=0 ses=32 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327048.037:1004): pid=2406 uid=0 auid=0 ses=32 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=2406 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327048.037:1005): pid=2406 uid=0 auid=0 ses=32 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=2406 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327048.037:1006): pid=2406 uid=0 auid=0 ses=32 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=2406 suid=0 rport=49937 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=USER_ACCT msg=audit(1414327048.167:1007): pid=2425 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327048.168:1008): pid=2425 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=2426 suid=74 rport=49939 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=USER_AUTH msg=audit(1414327048.169:1009): pid=2425 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1414327048.529:1010): pid=2425 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=LOGIN msg=audit(1414327048.530:1011): pid=2425 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=34 res=1 >type=USER_ROLE_CHANGE msg=audit(1414327048.960:1012): pid=2425 uid=0 auid=0 ses=34 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=USER_START msg=audit(1414327049.336:1013): pid=2425 uid=0 auid=0 ses=34 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1414327049.700:1014): pid=2425 uid=0 auid=0 ses=34 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=USER_START msg=audit(1414327050.061:1015): pid=2425 uid=0 auid=0 ses=34 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327050.061:1016): pid=2439 uid=0 auid=0 ses=34 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=2439 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327050.061:1017): pid=2439 uid=0 auid=0 ses=34 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=2439 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRED_REFR msg=audit(1414327050.424:1018): pid=2439 uid=0 auid=0 ses=34 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327050.456:1019): pid=2450 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=2450 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327050.456:1020): pid=2450 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=2450 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414327050.457:1021): pid=2449 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=2450 suid=74 rport=59138 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414327050.457:1022): pid=2449 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=2450 suid=74 rport=59138 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_END msg=audit(1414327050.799:1023): pid=2425 uid=0 auid=0 ses=34 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=USER_AUTH msg=audit(1414327050.993:1024): pid=2449 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=59138 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327050.993:1025): pid=2449 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=e7:e2:3d:94:48:cf:f5:8c:5e:54:98:bd:89:a5:29:a9 rport=59138 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_ACCT msg=audit(1414327050.997:1026): pid=2449 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327050.998:1027): pid=2449 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=2450 suid=74 rport=59138 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327050.999:1028): pid=2449 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1414327050.999:1029): pid=2449 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=LOGIN msg=audit(1414327050.999:1030): pid=2449 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=35 res=1 >type=USER_ROLE_CHANGE msg=audit(1414327051.078:1031): pid=2449 uid=0 auid=0 ses=35 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_START msg=audit(1414327051.095:1032): pid=2449 uid=0 auid=0 ses=35 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1414327051.098:1033): pid=2449 uid=0 auid=0 ses=35 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_START msg=audit(1414327051.098:1034): pid=2449 uid=0 auid=0 ses=35 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327051.100:1035): pid=2458 uid=0 auid=0 ses=35 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=2458 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327051.100:1036): pid=2458 uid=0 auid=0 ses=35 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=2458 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRED_REFR msg=audit(1414327051.101:1037): pid=2458 uid=0 auid=0 ses=35 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_END msg=audit(1414327051.115:1038): pid=2449 uid=0 auid=0 ses=35 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRED_DISP msg=audit(1414327051.115:1039): pid=2449 uid=0 auid=0 ses=35 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_END msg=audit(1414327051.116:1040): pid=2449 uid=0 auid=0 ses=35 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1414327051.116:1041): pid=2449 uid=0 auid=0 ses=35 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327051.116:1042): pid=2449 uid=0 auid=0 ses=35 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=2449 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327051.116:1043): pid=2449 uid=0 auid=0 ses=35 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=2449 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327051.116:1044): pid=2449 uid=0 auid=0 ses=35 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=2449 suid=0 rport=59138 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRED_DISP msg=audit(1414327051.161:1045): pid=2425 uid=0 auid=0 ses=34 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=USER_END msg=audit(1414327051.524:1046): pid=2425 uid=0 auid=0 ses=34 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1414327051.885:1047): pid=2425 uid=0 auid=0 ses=34 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327051.885:1048): pid=2425 uid=0 auid=0 ses=34 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=2425 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327051.885:1049): pid=2425 uid=0 auid=0 ses=34 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=2425 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327051.885:1050): pid=2425 uid=0 auid=0 ses=34 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=2425 suid=0 rport=49939 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327054.136:1051): pid=2625 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=2625 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327054.136:1052): pid=2625 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=2625 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414327054.137:1053): pid=2624 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=2625 suid=74 rport=49966 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414327054.137:1054): pid=2624 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=2625 suid=74 rport=49966 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=USER_AUTH msg=audit(1414327054.673:1055): pid=2624 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=49966 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=USER_AUTH msg=audit(1414327054.673:1056): pid=2624 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=e7:e2:3d:94:48:cf:f5:8c:5e:54:98:bd:89:a5:29:a9 rport=49966 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=USER_ACCT msg=audit(1414327055.044:1057): pid=2624 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327055.045:1058): pid=2624 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=2625 suid=74 rport=49966 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=USER_AUTH msg=audit(1414327055.046:1059): pid=2624 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1414327055.407:1060): pid=2624 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=LOGIN msg=audit(1414327055.407:1061): pid=2624 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=36 res=1 >type=USER_ROLE_CHANGE msg=audit(1414327055.838:1062): pid=2624 uid=0 auid=0 ses=36 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=USER_START msg=audit(1414327056.218:1063): pid=2624 uid=0 auid=0 ses=36 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1414327056.584:1064): pid=2624 uid=0 auid=0 ses=36 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=USER_START msg=audit(1414327056.946:1065): pid=2624 uid=0 auid=0 ses=36 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327056.947:1066): pid=2659 uid=0 auid=0 ses=36 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=2659 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327056.947:1067): pid=2659 uid=0 auid=0 ses=36 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=2659 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRED_REFR msg=audit(1414327057.311:1068): pid=2659 uid=0 auid=0 ses=36 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=USER_END msg=audit(1414327057.683:1069): pid=2624 uid=0 auid=0 ses=36 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=CRED_DISP msg=audit(1414327058.045:1070): pid=2624 uid=0 auid=0 ses=36 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=USER_END msg=audit(1414327058.406:1071): pid=2624 uid=0 auid=0 ses=36 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1414327058.768:1072): pid=2624 uid=0 auid=0 ses=36 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327058.769:1073): pid=2624 uid=0 auid=0 ses=36 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=2624 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327058.769:1074): pid=2624 uid=0 auid=0 ses=36 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=2624 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327058.769:1075): pid=2624 uid=0 auid=0 ses=36 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=2624 suid=0 rport=49966 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327060.344:1076): pid=2829 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=2829 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327060.344:1077): pid=2829 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=2829 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414327060.345:1078): pid=2828 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=2829 suid=74 rport=59178 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414327060.345:1079): pid=2828 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=2829 suid=74 rport=59178 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327060.879:1080): pid=2828 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=59178 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327060.879:1081): pid=2828 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=e7:e2:3d:94:48:cf:f5:8c:5e:54:98:bd:89:a5:29:a9 rport=59178 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_ACCT msg=audit(1414327060.882:1082): pid=2828 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327060.883:1083): pid=2828 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=2829 suid=74 rport=59178 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327060.884:1084): pid=2828 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1414327060.884:1085): pid=2828 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=LOGIN msg=audit(1414327060.884:1086): pid=2828 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=37 res=1 >type=USER_ROLE_CHANGE msg=audit(1414327060.952:1087): pid=2828 uid=0 auid=0 ses=37 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_START msg=audit(1414327060.968:1088): pid=2828 uid=0 auid=0 ses=37 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1414327060.972:1089): pid=2828 uid=0 auid=0 ses=37 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_START msg=audit(1414327060.972:1090): pid=2828 uid=0 auid=0 ses=37 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327060.973:1091): pid=2831 uid=0 auid=0 ses=37 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=2831 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327060.974:1092): pid=2831 uid=0 auid=0 ses=37 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=2831 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRED_REFR msg=audit(1414327060.974:1093): pid=2831 uid=0 auid=0 ses=37 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_END msg=audit(1414327060.988:1094): pid=2828 uid=0 auid=0 ses=37 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRED_DISP msg=audit(1414327060.988:1095): pid=2828 uid=0 auid=0 ses=37 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_END msg=audit(1414327060.988:1096): pid=2828 uid=0 auid=0 ses=37 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1414327060.988:1097): pid=2828 uid=0 auid=0 ses=37 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327060.989:1098): pid=2828 uid=0 auid=0 ses=37 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=2828 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327060.989:1099): pid=2828 uid=0 auid=0 ses=37 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=2828 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327060.989:1100): pid=2828 uid=0 auid=0 ses=37 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=2828 suid=0 rport=59178 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327064.010:1101): pid=2879 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=2879 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327064.010:1102): pid=2879 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=2879 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414327064.012:1103): pid=2878 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=2879 suid=74 rport=49994 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414327064.012:1104): pid=2878 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=2879 suid=74 rport=49994 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=USER_AUTH msg=audit(1414327064.545:1105): pid=2878 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=49994 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=USER_AUTH msg=audit(1414327064.545:1106): pid=2878 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=e7:e2:3d:94:48:cf:f5:8c:5e:54:98:bd:89:a5:29:a9 rport=49994 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=USER_ACCT msg=audit(1414327064.911:1107): pid=2878 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327064.911:1108): pid=2878 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=2879 suid=74 rport=49994 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=USER_AUTH msg=audit(1414327064.914:1109): pid=2878 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1414327065.278:1110): pid=2878 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=LOGIN msg=audit(1414327065.279:1111): pid=2878 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=38 res=1 >type=USER_ROLE_CHANGE msg=audit(1414327065.716:1112): pid=2878 uid=0 auid=0 ses=38 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=USER_START msg=audit(1414327066.100:1113): pid=2878 uid=0 auid=0 ses=38 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1414327066.469:1114): pid=2878 uid=0 auid=0 ses=38 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=USER_START msg=audit(1414327066.832:1115): pid=2878 uid=0 auid=0 ses=38 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327066.834:1116): pid=2881 uid=0 auid=0 ses=38 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=2881 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327066.834:1117): pid=2881 uid=0 auid=0 ses=38 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=2881 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRED_REFR msg=audit(1414327067.196:1118): pid=2881 uid=0 auid=0 ses=38 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=USER_END msg=audit(1414327067.573:1119): pid=2878 uid=0 auid=0 ses=38 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=CRED_DISP msg=audit(1414327067.933:1120): pid=2878 uid=0 auid=0 ses=38 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=SERVICE_START msg=audit(1414327068.227:1121): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="systemd-hostnamed" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1414327068.227:1122): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="systemd-hostnamed" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1414327068.294:1123): pid=2878 uid=0 auid=0 ses=38 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1414327068.656:1124): pid=2878 uid=0 auid=0 ses=38 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327068.657:1125): pid=2878 uid=0 auid=0 ses=38 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=2878 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327068.657:1126): pid=2878 uid=0 auid=0 ses=38 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=2878 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327068.657:1127): pid=2878 uid=0 auid=0 ses=38 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=2878 suid=0 rport=49994 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327070.235:1128): pid=2888 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=2888 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327070.235:1129): pid=2888 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=2888 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414327070.236:1130): pid=2887 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=2888 suid=74 rport=59180 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414327070.236:1131): pid=2887 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=2888 suid=74 rport=59180 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327070.774:1132): pid=2887 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=59180 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327070.774:1133): pid=2887 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=e7:e2:3d:94:48:cf:f5:8c:5e:54:98:bd:89:a5:29:a9 rport=59180 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_ACCT msg=audit(1414327070.778:1134): pid=2887 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327070.778:1135): pid=2887 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=2888 suid=74 rport=59180 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327070.779:1136): pid=2887 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1414327070.780:1137): pid=2887 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=LOGIN msg=audit(1414327070.780:1138): pid=2887 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=39 res=1 >type=USER_ROLE_CHANGE msg=audit(1414327070.846:1139): pid=2887 uid=0 auid=0 ses=39 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_START msg=audit(1414327070.863:1140): pid=2887 uid=0 auid=0 ses=39 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1414327070.866:1141): pid=2887 uid=0 auid=0 ses=39 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_START msg=audit(1414327070.866:1142): pid=2887 uid=0 auid=0 ses=39 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327070.868:1143): pid=2890 uid=0 auid=0 ses=39 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=2890 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327070.868:1144): pid=2890 uid=0 auid=0 ses=39 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=2890 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRED_REFR msg=audit(1414327070.869:1145): pid=2890 uid=0 auid=0 ses=39 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_END msg=audit(1414327070.883:1146): pid=2887 uid=0 auid=0 ses=39 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRED_DISP msg=audit(1414327070.883:1147): pid=2887 uid=0 auid=0 ses=39 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_END msg=audit(1414327070.883:1148): pid=2887 uid=0 auid=0 ses=39 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1414327070.883:1149): pid=2887 uid=0 auid=0 ses=39 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327070.884:1150): pid=2887 uid=0 auid=0 ses=39 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=2887 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327070.884:1151): pid=2887 uid=0 auid=0 ses=39 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=2887 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327070.884:1152): pid=2887 uid=0 auid=0 ses=39 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=2887 suid=0 rport=59180 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327073.906:1153): pid=2896 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=2896 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327073.906:1154): pid=2896 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=2896 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414327073.908:1155): pid=2895 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=2896 suid=74 rport=49996 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414327073.908:1156): pid=2895 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=2896 suid=74 rport=49996 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=USER_AUTH msg=audit(1414327074.443:1157): pid=2895 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=49996 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=USER_AUTH msg=audit(1414327074.443:1158): pid=2895 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=e7:e2:3d:94:48:cf:f5:8c:5e:54:98:bd:89:a5:29:a9 rport=49996 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=USER_ACCT msg=audit(1414327074.809:1159): pid=2895 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327074.810:1160): pid=2895 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=2896 suid=74 rport=49996 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=USER_AUTH msg=audit(1414327074.812:1161): pid=2895 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1414327075.173:1162): pid=2895 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=LOGIN msg=audit(1414327075.173:1163): pid=2895 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=40 res=1 >type=MAC_POLICY_LOAD msg=audit(1414327074.455:1164): policy loaded auid=0 ses=33 >type=SYSCALL msg=audit(1414327074.455:1164): arch=c000003e syscall=1 success=yes exit=3591819 a0=4 a1=7f34d5830010 a2=36ce8b a3=7fffc6a88550 items=0 ppid=2843 pid=2902 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=33 comm="load_policy" exe="/usr/sbin/load_policy" subj=unconfined_u:system_r:load_policy_t:s0-s0:c0.c1023 key=(null) >type=USER_ROLE_CHANGE msg=audit(1414327075.605:1165): pid=2895 uid=0 auid=0 ses=40 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=USER_AVC msg=audit(1414327075.617:1166): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='avc: received policyload notice (seqno=3) exe="/usr/lib/systemd/systemd" sauid=0 hostname=? addr=? terminal=?' >type=USER_START msg=audit(1414327075.985:1167): pid=2895 uid=0 auid=0 ses=40 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1414327076.350:1168): pid=2895 uid=0 auid=0 ses=40 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=USER_START msg=audit(1414327076.711:1169): pid=2895 uid=0 auid=0 ses=40 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327076.713:1170): pid=2905 uid=0 auid=0 ses=40 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=2905 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327076.713:1171): pid=2905 uid=0 auid=0 ses=40 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=2905 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRED_REFR msg=audit(1414327077.075:1172): pid=2905 uid=0 auid=0 ses=40 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=USER_END msg=audit(1414327077.451:1173): pid=2895 uid=0 auid=0 ses=40 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=CRED_DISP msg=audit(1414327077.812:1174): pid=2895 uid=0 auid=0 ses=40 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=USER_END msg=audit(1414327078.174:1175): pid=2895 uid=0 auid=0 ses=40 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1414327078.535:1176): pid=2895 uid=0 auid=0 ses=40 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327078.535:1177): pid=2895 uid=0 auid=0 ses=40 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=2895 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327078.535:1178): pid=2895 uid=0 auid=0 ses=40 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=2895 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327078.535:1179): pid=2895 uid=0 auid=0 ses=40 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=2895 suid=0 rport=49996 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327080.109:1180): pid=2911 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=2911 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327080.109:1181): pid=2911 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=2911 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414327080.110:1182): pid=2910 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=2911 suid=74 rport=59182 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414327080.111:1183): pid=2910 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=2911 suid=74 rport=59182 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327080.646:1184): pid=2910 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=59182 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327080.646:1185): pid=2910 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=e7:e2:3d:94:48:cf:f5:8c:5e:54:98:bd:89:a5:29:a9 rport=59182 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_ACCT msg=audit(1414327080.649:1186): pid=2910 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327080.650:1187): pid=2910 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=2911 suid=74 rport=59182 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327080.651:1188): pid=2910 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1414327080.651:1189): pid=2910 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=LOGIN msg=audit(1414327080.651:1190): pid=2910 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=41 res=1 >type=USER_ROLE_CHANGE msg=audit(1414327080.718:1191): pid=2910 uid=0 auid=0 ses=41 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_START msg=audit(1414327080.732:1192): pid=2910 uid=0 auid=0 ses=41 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1414327080.736:1193): pid=2910 uid=0 auid=0 ses=41 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_START msg=audit(1414327080.736:1194): pid=2910 uid=0 auid=0 ses=41 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327080.737:1195): pid=2913 uid=0 auid=0 ses=41 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=2913 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327080.738:1196): pid=2913 uid=0 auid=0 ses=41 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=2913 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRED_REFR msg=audit(1414327080.738:1197): pid=2913 uid=0 auid=0 ses=41 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_END msg=audit(1414327080.751:1198): pid=2910 uid=0 auid=0 ses=41 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRED_DISP msg=audit(1414327080.752:1199): pid=2910 uid=0 auid=0 ses=41 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_END msg=audit(1414327080.752:1200): pid=2910 uid=0 auid=0 ses=41 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1414327080.752:1201): pid=2910 uid=0 auid=0 ses=41 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327080.753:1202): pid=2910 uid=0 auid=0 ses=41 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=2910 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327080.753:1203): pid=2910 uid=0 auid=0 ses=41 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=2910 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327080.753:1204): pid=2910 uid=0 auid=0 ses=41 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=2910 suid=0 rport=59182 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327083.774:1205): pid=2919 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=2919 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327083.774:1206): pid=2919 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=2919 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414327083.775:1207): pid=2918 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=2919 suid=74 rport=49998 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414327083.775:1208): pid=2918 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=2919 suid=74 rport=49998 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=MAC_POLICY_LOAD msg=audit(1414327088.102:1209): policy loaded auid=0 ses=33 >type=SYSCALL msg=audit(1414327088.102:1209): arch=c000003e syscall=1 success=yes exit=3591863 a0=4 a1=7fe9766fc010 a2=36ceb7 a3=7fff32de3c50 items=0 ppid=2904 pid=2920 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=33 comm="load_policy" exe="/usr/sbin/load_policy" subj=unconfined_u:system_r:load_policy_t:s0-s0:c0.c1023 key=(null) >type=USER_AUTH msg=audit(1414327089.289:1210): pid=2918 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=49998 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=USER_AUTH msg=audit(1414327089.289:1211): pid=2918 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=e7:e2:3d:94:48:cf:f5:8c:5e:54:98:bd:89:a5:29:a9 rport=49998 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=USER_ACCT msg=audit(1414327089.655:1212): pid=2918 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327089.656:1213): pid=2918 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=2919 suid=74 rport=49998 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=USER_AUTH msg=audit(1414327089.657:1214): pid=2918 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1414327090.020:1215): pid=2918 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=LOGIN msg=audit(1414327090.020:1216): pid=2918 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=42 res=1 >type=USER_ROLE_CHANGE msg=audit(1414327090.451:1217): pid=2918 uid=0 auid=0 ses=42 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=USER_AVC msg=audit(1414327090.463:1218): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='avc: received policyload notice (seqno=4) exe="/usr/lib/systemd/systemd" sauid=0 hostname=? addr=? terminal=?' >type=USER_START msg=audit(1414327090.831:1219): pid=2918 uid=0 auid=0 ses=42 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1414327091.196:1220): pid=2918 uid=0 auid=0 ses=42 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=USER_START msg=audit(1414327091.559:1221): pid=2918 uid=0 auid=0 ses=42 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327091.561:1222): pid=2927 uid=0 auid=0 ses=42 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=2927 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327091.561:1223): pid=2927 uid=0 auid=0 ses=42 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=2927 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRED_REFR msg=audit(1414327091.923:1224): pid=2927 uid=0 auid=0 ses=42 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=USER_END msg=audit(1414327092.301:1225): pid=2918 uid=0 auid=0 ses=42 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=CRED_DISP msg=audit(1414327092.662:1226): pid=2918 uid=0 auid=0 ses=42 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=USER_END msg=audit(1414327093.023:1227): pid=2918 uid=0 auid=0 ses=42 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1414327093.384:1228): pid=2918 uid=0 auid=0 ses=42 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327093.385:1229): pid=2918 uid=0 auid=0 ses=42 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=2918 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327093.385:1230): pid=2918 uid=0 auid=0 ses=42 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=2918 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327093.385:1231): pid=2918 uid=0 auid=0 ses=42 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=2918 suid=0 rport=49998 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327094.968:1232): pid=2933 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=2933 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327094.968:1233): pid=2933 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=2933 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414327094.969:1234): pid=2932 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=2933 suid=74 rport=59184 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414327094.969:1235): pid=2932 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=2933 suid=74 rport=59184 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327095.505:1236): pid=2932 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=59184 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327095.505:1237): pid=2932 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=e7:e2:3d:94:48:cf:f5:8c:5e:54:98:bd:89:a5:29:a9 rport=59184 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_ACCT msg=audit(1414327095.509:1238): pid=2932 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327095.509:1239): pid=2932 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=2933 suid=74 rport=59184 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327095.510:1240): pid=2932 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1414327095.510:1241): pid=2932 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=LOGIN msg=audit(1414327095.510:1242): pid=2932 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=43 res=1 >type=USER_ROLE_CHANGE msg=audit(1414327095.576:1243): pid=2932 uid=0 auid=0 ses=43 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_START msg=audit(1414327095.590:1244): pid=2932 uid=0 auid=0 ses=43 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1414327095.593:1245): pid=2932 uid=0 auid=0 ses=43 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_START msg=audit(1414327095.593:1246): pid=2932 uid=0 auid=0 ses=43 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327095.595:1247): pid=2935 uid=0 auid=0 ses=43 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=2935 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327095.595:1248): pid=2935 uid=0 auid=0 ses=43 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=2935 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRED_REFR msg=audit(1414327095.596:1249): pid=2935 uid=0 auid=0 ses=43 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_END msg=audit(1414327095.608:1250): pid=2932 uid=0 auid=0 ses=43 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRED_DISP msg=audit(1414327095.608:1251): pid=2932 uid=0 auid=0 ses=43 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_END msg=audit(1414327095.609:1252): pid=2932 uid=0 auid=0 ses=43 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1414327095.609:1253): pid=2932 uid=0 auid=0 ses=43 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327095.609:1254): pid=2932 uid=0 auid=0 ses=43 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=2932 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327095.609:1255): pid=2932 uid=0 auid=0 ses=43 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=2932 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327095.609:1256): pid=2932 uid=0 auid=0 ses=43 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=2932 suid=0 rport=59184 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327098.628:1257): pid=2941 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=2941 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327098.628:1258): pid=2941 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=2941 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414327098.629:1259): pid=2940 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=2941 suid=74 rport=50000 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414327098.629:1260): pid=2940 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=2941 suid=74 rport=50000 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=USER_AUTH msg=audit(1414327099.162:1261): pid=2940 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=50000 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=USER_AUTH msg=audit(1414327099.162:1262): pid=2940 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=e7:e2:3d:94:48:cf:f5:8c:5e:54:98:bd:89:a5:29:a9 rport=50000 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=USER_ACCT msg=audit(1414327099.529:1263): pid=2940 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327099.529:1264): pid=2940 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=2941 suid=74 rport=50000 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=USER_AUTH msg=audit(1414327099.530:1265): pid=2940 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1414327099.892:1266): pid=2940 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=LOGIN msg=audit(1414327099.892:1267): pid=2940 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=44 res=1 >type=USER_ROLE_CHANGE msg=audit(1414327100.319:1268): pid=2940 uid=0 auid=0 ses=44 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=USER_START msg=audit(1414327100.696:1269): pid=2940 uid=0 auid=0 ses=44 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1414327101.062:1270): pid=2940 uid=0 auid=0 ses=44 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=USER_START msg=audit(1414327101.424:1271): pid=2940 uid=0 auid=0 ses=44 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327101.426:1272): pid=2943 uid=0 auid=0 ses=44 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=2943 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327101.426:1273): pid=2943 uid=0 auid=0 ses=44 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=2943 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRED_REFR msg=audit(1414327101.788:1274): pid=2943 uid=0 auid=0 ses=44 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=USER_END msg=audit(1414327102.165:1275): pid=2940 uid=0 auid=0 ses=44 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=CRED_DISP msg=audit(1414327102.533:1276): pid=2940 uid=0 auid=0 ses=44 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=MAC_POLICY_LOAD msg=audit(1414327101.928:1277): policy loaded auid=0 ses=33 >type=SYSCALL msg=audit(1414327101.928:1277): arch=c000003e syscall=1 success=yes exit=3591907 a0=4 a1=7f885b9b2010 a2=36cee3 a3=7fff9f1a6250 items=0 ppid=2925 pid=2944 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=33 comm="load_policy" exe="/usr/sbin/load_policy" subj=unconfined_u:system_r:load_policy_t:s0-s0:c0.c1023 key=(null) >type=USER_END msg=audit(1414327102.897:1278): pid=2940 uid=0 auid=0 ses=44 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1414327103.257:1279): pid=2940 uid=0 auid=0 ses=44 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327103.258:1280): pid=2940 uid=0 auid=0 ses=44 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=2940 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327103.258:1281): pid=2940 uid=0 auid=0 ses=44 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=2940 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327103.258:1282): pid=2940 uid=0 auid=0 ses=44 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=2940 suid=0 rport=50000 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=USER_AVC msg=audit(1414327103.267:1283): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='avc: received policyload notice (seqno=5) exe="/usr/lib/systemd/systemd" sauid=0 hostname=? addr=? terminal=?' >type=CRYPTO_KEY_USER msg=audit(1414327104.836:1284): pid=2955 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=2955 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327104.836:1285): pid=2955 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=2955 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414327104.837:1286): pid=2954 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=2955 suid=74 rport=59186 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414327104.838:1287): pid=2954 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=2955 suid=74 rport=59186 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327105.375:1288): pid=2954 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=59186 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327105.375:1289): pid=2954 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=e7:e2:3d:94:48:cf:f5:8c:5e:54:98:bd:89:a5:29:a9 rport=59186 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_ACCT msg=audit(1414327105.378:1290): pid=2954 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327105.379:1291): pid=2954 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=2955 suid=74 rport=59186 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327105.380:1292): pid=2954 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1414327105.380:1293): pid=2954 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=LOGIN msg=audit(1414327105.380:1294): pid=2954 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=45 res=1 >type=USER_ROLE_CHANGE msg=audit(1414327105.451:1295): pid=2954 uid=0 auid=0 ses=45 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_START msg=audit(1414327105.468:1296): pid=2954 uid=0 auid=0 ses=45 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1414327105.471:1297): pid=2954 uid=0 auid=0 ses=45 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_START msg=audit(1414327105.471:1298): pid=2954 uid=0 auid=0 ses=45 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327105.473:1299): pid=2957 uid=0 auid=0 ses=45 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=2957 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327105.473:1300): pid=2957 uid=0 auid=0 ses=45 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=2957 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRED_REFR msg=audit(1414327105.474:1301): pid=2957 uid=0 auid=0 ses=45 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_END msg=audit(1414327105.488:1302): pid=2954 uid=0 auid=0 ses=45 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRED_DISP msg=audit(1414327105.489:1303): pid=2954 uid=0 auid=0 ses=45 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_END msg=audit(1414327105.489:1304): pid=2954 uid=0 auid=0 ses=45 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1414327105.490:1305): pid=2954 uid=0 auid=0 ses=45 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327105.490:1306): pid=2954 uid=0 auid=0 ses=45 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=2954 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327105.490:1307): pid=2954 uid=0 auid=0 ses=45 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=2954 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327105.490:1308): pid=2954 uid=0 auid=0 ses=45 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=2954 suid=0 rport=59186 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327108.507:1309): pid=2963 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=2963 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327108.508:1310): pid=2963 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=2963 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414327108.509:1311): pid=2962 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=2963 suid=74 rport=50002 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414327108.509:1312): pid=2962 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=2963 suid=74 rport=50002 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=USER_AUTH msg=audit(1414327109.042:1313): pid=2962 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=50002 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=USER_AUTH msg=audit(1414327109.042:1314): pid=2962 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=e7:e2:3d:94:48:cf:f5:8c:5e:54:98:bd:89:a5:29:a9 rport=50002 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=USER_ACCT msg=audit(1414327109.407:1315): pid=2962 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327109.408:1316): pid=2962 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=2963 suid=74 rport=50002 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=USER_AUTH msg=audit(1414327109.409:1317): pid=2962 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1414327109.770:1318): pid=2962 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=LOGIN msg=audit(1414327109.770:1319): pid=2962 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=46 res=1 >type=USER_ROLE_CHANGE msg=audit(1414327110.201:1320): pid=2962 uid=0 auid=0 ses=46 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=USER_START msg=audit(1414327110.579:1321): pid=2962 uid=0 auid=0 ses=46 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1414327110.944:1322): pid=2962 uid=0 auid=0 ses=46 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=USER_START msg=audit(1414327111.306:1323): pid=2962 uid=0 auid=0 ses=46 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327111.308:1324): pid=2965 uid=0 auid=0 ses=46 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=2965 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327111.308:1325): pid=2965 uid=0 auid=0 ses=46 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=2965 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRED_REFR msg=audit(1414327111.670:1326): pid=2965 uid=0 auid=0 ses=46 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=USER_END msg=audit(1414327112.045:1327): pid=2962 uid=0 auid=0 ses=46 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=CRED_DISP msg=audit(1414327112.406:1328): pid=2962 uid=0 auid=0 ses=46 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=USER_END msg=audit(1414327112.767:1329): pid=2962 uid=0 auid=0 ses=46 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1414327113.128:1330): pid=2962 uid=0 auid=0 ses=46 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327113.128:1331): pid=2962 uid=0 auid=0 ses=46 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=2962 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327113.128:1332): pid=2962 uid=0 auid=0 ses=46 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=2962 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327113.128:1333): pid=2962 uid=0 auid=0 ses=46 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=2962 suid=0 rport=50002 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327114.706:1334): pid=2971 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=2971 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327114.706:1335): pid=2971 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=2971 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414327114.707:1336): pid=2970 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=2971 suid=74 rport=59188 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414327114.707:1337): pid=2970 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=2971 suid=74 rport=59188 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327115.245:1338): pid=2970 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=59188 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327115.245:1339): pid=2970 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=e7:e2:3d:94:48:cf:f5:8c:5e:54:98:bd:89:a5:29:a9 rport=59188 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_ACCT msg=audit(1414327115.249:1340): pid=2970 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327115.249:1341): pid=2970 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=2971 suid=74 rport=59188 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327115.250:1342): pid=2970 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1414327115.251:1343): pid=2970 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=LOGIN msg=audit(1414327115.251:1344): pid=2970 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=47 res=1 >type=USER_ROLE_CHANGE msg=audit(1414327115.321:1345): pid=2970 uid=0 auid=0 ses=47 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_START msg=audit(1414327115.338:1346): pid=2970 uid=0 auid=0 ses=47 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1414327115.342:1347): pid=2970 uid=0 auid=0 ses=47 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_START msg=audit(1414327115.342:1348): pid=2970 uid=0 auid=0 ses=47 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327115.344:1349): pid=2973 uid=0 auid=0 ses=47 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=2973 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327115.344:1350): pid=2973 uid=0 auid=0 ses=47 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=2973 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRED_REFR msg=audit(1414327115.345:1351): pid=2973 uid=0 auid=0 ses=47 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_END msg=audit(1414327115.360:1352): pid=2970 uid=0 auid=0 ses=47 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRED_DISP msg=audit(1414327115.360:1353): pid=2970 uid=0 auid=0 ses=47 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_END msg=audit(1414327115.360:1354): pid=2970 uid=0 auid=0 ses=47 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1414327115.361:1355): pid=2970 uid=0 auid=0 ses=47 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327115.361:1356): pid=2970 uid=0 auid=0 ses=47 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=2970 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327115.361:1357): pid=2970 uid=0 auid=0 ses=47 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=2970 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327115.361:1358): pid=2970 uid=0 auid=0 ses=47 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=2970 suid=0 rport=59188 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=MAC_CONFIG_CHANGE msg=audit(1414327115.549:1359): bool=virt_use_fusefs val=1 old_val=0 auid=0 ses=33 >type=SYSCALL msg=audit(1414327115.549:1359): arch=c000003e syscall=1 success=yes exit=2 a0=4 a1=7fffa1f96250 a2=2 a3=7fffa1f96010 items=0 ppid=2843 pid=2949 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=33 comm="setsebool" exe="/usr/sbin/setsebool" subj=unconfined_u:system_r:setsebool_t:s0-s0:c0.c1023 key=(null) >type=MAC_POLICY_LOAD msg=audit(1414327115.682:1360): policy loaded auid=0 ses=33 >type=SYSCALL msg=audit(1414327115.682:1360): arch=c000003e syscall=1 success=yes exit=3591907 a0=4 a1=7f45cdfd3010 a2=36cee3 a3=7fff09efcf00 items=0 ppid=2949 pid=2975 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=33 comm="load_policy" exe="/usr/sbin/load_policy" subj=unconfined_u:system_r:load_policy_t:s0-s0:c0.c1023 key=(null) >type=CRYPTO_KEY_USER msg=audit(1414327118.386:1361): pid=2985 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=2985 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327118.386:1362): pid=2985 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=2985 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414327118.387:1363): pid=2984 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=2985 suid=74 rport=50004 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414327118.387:1364): pid=2984 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=2985 suid=74 rport=50004 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=USER_AUTH msg=audit(1414327118.922:1365): pid=2984 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=50004 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=USER_AUTH msg=audit(1414327118.922:1366): pid=2984 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=e7:e2:3d:94:48:cf:f5:8c:5e:54:98:bd:89:a5:29:a9 rport=50004 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=USER_ACCT msg=audit(1414327119.288:1367): pid=2984 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327119.289:1368): pid=2984 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=2985 suid=74 rport=50004 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=USER_AUTH msg=audit(1414327119.290:1369): pid=2984 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1414327119.654:1370): pid=2984 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=LOGIN msg=audit(1414327119.654:1371): pid=2984 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=48 res=1 >type=USER_ROLE_CHANGE msg=audit(1414327120.091:1372): pid=2984 uid=0 auid=0 ses=48 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=USER_AVC msg=audit(1414327120.103:1373): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='avc: received policyload notice (seqno=6) exe="/usr/lib/systemd/systemd" sauid=0 hostname=? addr=? terminal=?' >type=USER_AVC msg=audit(1414327120.103:1374): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='avc: received policyload notice (seqno=7) exe="/usr/lib/systemd/systemd" sauid=0 hostname=? addr=? terminal=?' >type=USER_START msg=audit(1414327120.471:1375): pid=2984 uid=0 auid=0 ses=48 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1414327120.837:1376): pid=2984 uid=0 auid=0 ses=48 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=USER_START msg=audit(1414327121.203:1377): pid=2984 uid=0 auid=0 ses=48 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327121.205:1378): pid=2987 uid=0 auid=0 ses=48 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=2987 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327121.205:1379): pid=2987 uid=0 auid=0 ses=48 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=2987 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRED_REFR msg=audit(1414327121.567:1380): pid=2987 uid=0 auid=0 ses=48 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=USER_END msg=audit(1414327121.949:1381): pid=2984 uid=0 auid=0 ses=48 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=CRED_DISP msg=audit(1414327122.310:1382): pid=2984 uid=0 auid=0 ses=48 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=USER_END msg=audit(1414327122.672:1383): pid=2984 uid=0 auid=0 ses=48 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1414327123.035:1384): pid=2984 uid=0 auid=0 ses=48 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327123.036:1385): pid=2984 uid=0 auid=0 ses=48 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=2984 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327123.036:1386): pid=2984 uid=0 auid=0 ses=48 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=2984 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327123.036:1387): pid=2984 uid=0 auid=0 ses=48 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=2984 suid=0 rport=50004 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327124.610:1388): pid=2993 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=2993 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327124.610:1389): pid=2993 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=2993 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414327124.611:1390): pid=2992 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=2993 suid=74 rport=59190 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414327124.611:1391): pid=2992 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=2993 suid=74 rport=59190 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327125.147:1392): pid=2992 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=59190 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327125.147:1393): pid=2992 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=e7:e2:3d:94:48:cf:f5:8c:5e:54:98:bd:89:a5:29:a9 rport=59190 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_ACCT msg=audit(1414327125.151:1394): pid=2992 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327125.151:1395): pid=2992 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=2993 suid=74 rport=59190 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327125.152:1396): pid=2992 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1414327125.152:1397): pid=2992 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=LOGIN msg=audit(1414327125.152:1398): pid=2992 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=49 res=1 >type=USER_ROLE_CHANGE msg=audit(1414327125.220:1399): pid=2992 uid=0 auid=0 ses=49 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_START msg=audit(1414327125.235:1400): pid=2992 uid=0 auid=0 ses=49 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1414327125.239:1401): pid=2992 uid=0 auid=0 ses=49 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_START msg=audit(1414327125.239:1402): pid=2992 uid=0 auid=0 ses=49 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327125.241:1403): pid=2995 uid=0 auid=0 ses=49 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=2995 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327125.241:1404): pid=2995 uid=0 auid=0 ses=49 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=2995 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRED_REFR msg=audit(1414327125.242:1405): pid=2995 uid=0 auid=0 ses=49 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_END msg=audit(1414327125.255:1406): pid=2992 uid=0 auid=0 ses=49 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRED_DISP msg=audit(1414327125.255:1407): pid=2992 uid=0 auid=0 ses=49 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_END msg=audit(1414327125.256:1408): pid=2992 uid=0 auid=0 ses=49 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1414327125.256:1409): pid=2992 uid=0 auid=0 ses=49 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327125.256:1410): pid=2992 uid=0 auid=0 ses=49 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=2992 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327125.256:1411): pid=2992 uid=0 auid=0 ses=49 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=2992 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327125.256:1412): pid=2992 uid=0 auid=0 ses=49 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=2992 suid=0 rport=59190 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327128.275:1413): pid=3001 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=3001 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327128.276:1414): pid=3001 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=3001 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414327128.277:1415): pid=3000 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=3001 suid=74 rport=50006 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414327128.277:1416): pid=3000 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=3001 suid=74 rport=50006 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=USER_AUTH msg=audit(1414327128.810:1417): pid=3000 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=50006 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=USER_AUTH msg=audit(1414327128.810:1418): pid=3000 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=e7:e2:3d:94:48:cf:f5:8c:5e:54:98:bd:89:a5:29:a9 rport=50006 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=USER_ACCT msg=audit(1414327129.176:1419): pid=3000 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327129.177:1420): pid=3000 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=3001 suid=74 rport=50006 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=USER_AUTH msg=audit(1414327129.179:1421): pid=3000 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=ssh res=success' >type=MAC_CONFIG_CHANGE msg=audit(1414327129.252:1422): bool=glance_use_fusefs val=1 old_val=0 auid=0 ses=33 >type=SYSCALL msg=audit(1414327129.252:1422): arch=c000003e syscall=1 success=yes exit=2 a0=4 a1=7fff60918aa0 a2=2 a3=7fff60918860 items=0 ppid=2843 pid=2980 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=33 comm="setsebool" exe="/usr/sbin/setsebool" subj=unconfined_u:system_r:setsebool_t:s0-s0:c0.c1023 key=(null) >type=CRED_ACQ msg=audit(1414327129.543:1423): pid=3000 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=LOGIN msg=audit(1414327129.544:1424): pid=3000 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=50 res=1 >type=USER_ROLE_CHANGE msg=audit(1414327129.979:1425): pid=3000 uid=0 auid=0 ses=50 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=USER_AVC msg=audit(1414327129.989:1426): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='avc: received policyload notice (seqno=8) exe="/usr/lib/systemd/systemd" sauid=0 hostname=? addr=? terminal=?' >type=MAC_POLICY_LOAD msg=audit(1414327129.388:1427): policy loaded auid=0 ses=33 >type=SYSCALL msg=audit(1414327129.388:1427): arch=c000003e syscall=1 success=yes exit=3591907 a0=4 a1=7fcdb5ef4010 a2=36cee3 a3=7ffff088e170 items=0 ppid=2980 pid=3003 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=33 comm="load_policy" exe="/usr/sbin/load_policy" subj=unconfined_u:system_r:load_policy_t:s0-s0:c0.c1023 key=(null) >type=USER_START msg=audit(1414327130.357:1428): pid=3000 uid=0 auid=0 ses=50 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1414327130.724:1429): pid=3000 uid=0 auid=0 ses=50 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=USER_START msg=audit(1414327131.085:1430): pid=3000 uid=0 auid=0 ses=50 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327131.087:1431): pid=3009 uid=0 auid=0 ses=50 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=3009 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327131.087:1432): pid=3009 uid=0 auid=0 ses=50 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=3009 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRED_REFR msg=audit(1414327131.449:1433): pid=3009 uid=0 auid=0 ses=50 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327134.493:1434): pid=3014 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=3014 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327134.493:1435): pid=3014 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=3014 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414327134.494:1436): pid=3013 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=3014 suid=74 rport=59192 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414327134.494:1437): pid=3013 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=3014 suid=74 rport=59192 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327135.035:1438): pid=3013 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=59192 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327135.035:1439): pid=3013 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=e7:e2:3d:94:48:cf:f5:8c:5e:54:98:bd:89:a5:29:a9 rport=59192 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_ACCT msg=audit(1414327135.038:1440): pid=3013 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327135.039:1441): pid=3013 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=3014 suid=74 rport=59192 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327135.040:1442): pid=3013 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1414327135.040:1443): pid=3013 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=LOGIN msg=audit(1414327135.040:1444): pid=3013 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=51 res=1 >type=USER_ROLE_CHANGE msg=audit(1414327135.112:1445): pid=3013 uid=0 auid=0 ses=51 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_AVC msg=audit(1414327135.123:1446): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='avc: received policyload notice (seqno=9) exe="/usr/lib/systemd/systemd" sauid=0 hostname=? addr=? terminal=?' >type=USER_START msg=audit(1414327135.131:1447): pid=3013 uid=0 auid=0 ses=51 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1414327135.134:1448): pid=3013 uid=0 auid=0 ses=51 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_START msg=audit(1414327135.135:1449): pid=3013 uid=0 auid=0 ses=51 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327135.136:1450): pid=3016 uid=0 auid=0 ses=51 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=3016 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327135.136:1451): pid=3016 uid=0 auid=0 ses=51 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=3016 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRED_REFR msg=audit(1414327135.137:1452): pid=3016 uid=0 auid=0 ses=51 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_END msg=audit(1414327135.150:1453): pid=3013 uid=0 auid=0 ses=51 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRED_DISP msg=audit(1414327135.150:1454): pid=3013 uid=0 auid=0 ses=51 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_END msg=audit(1414327135.151:1455): pid=3013 uid=0 auid=0 ses=51 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1414327135.151:1456): pid=3013 uid=0 auid=0 ses=51 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327135.151:1457): pid=3013 uid=0 auid=0 ses=51 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=3013 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327135.151:1458): pid=3013 uid=0 auid=0 ses=51 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=3013 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327135.151:1459): pid=3013 uid=0 auid=0 ses=51 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=3013 suid=0 rport=59192 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_END msg=audit(1414327137.073:1460): pid=3000 uid=0 auid=0 ses=50 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=CRED_DISP msg=audit(1414327137.795:1461): pid=3000 uid=0 auid=0 ses=50 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327138.171:1462): pid=3022 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=3022 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327138.171:1463): pid=3022 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=3022 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414327138.172:1464): pid=3021 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=3022 suid=74 rport=50008 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414327138.172:1465): pid=3021 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=3022 suid=74 rport=50008 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=USER_END msg=audit(1414327138.513:1466): pid=3000 uid=0 auid=0 ses=50 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=USER_AUTH msg=audit(1414327138.707:1467): pid=3021 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=50008 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=USER_AUTH msg=audit(1414327138.707:1468): pid=3021 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=e7:e2:3d:94:48:cf:f5:8c:5e:54:98:bd:89:a5:29:a9 rport=50008 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=USER_ACCT msg=audit(1414327139.072:1469): pid=3021 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327139.072:1470): pid=3021 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=3022 suid=74 rport=50008 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=USER_AUTH msg=audit(1414327139.074:1471): pid=3021 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1414327139.237:1472): pid=3000 uid=0 auid=0 ses=50 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327139.237:1473): pid=3000 uid=0 auid=0 ses=50 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=3000 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327139.237:1474): pid=3000 uid=0 auid=0 ses=50 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=3000 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327139.238:1475): pid=3000 uid=0 auid=0 ses=50 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=3000 suid=0 rport=50006 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRED_ACQ msg=audit(1414327139.434:1476): pid=3021 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=LOGIN msg=audit(1414327139.435:1477): pid=3021 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=52 res=1 >type=USER_ROLE_CHANGE msg=audit(1414327139.868:1478): pid=3021 uid=0 auid=0 ses=52 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=USER_START msg=audit(1414327140.245:1479): pid=3021 uid=0 auid=0 ses=52 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1414327140.610:1480): pid=3021 uid=0 auid=0 ses=52 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=USER_START msg=audit(1414327140.977:1481): pid=3021 uid=0 auid=0 ses=52 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327140.979:1482): pid=3025 uid=0 auid=0 ses=52 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=3025 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327140.979:1483): pid=3025 uid=0 auid=0 ses=52 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=3025 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRED_REFR msg=audit(1414327141.343:1484): pid=3025 uid=0 auid=0 ses=52 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=USER_END msg=audit(1414327141.721:1485): pid=3021 uid=0 auid=0 ses=52 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=CRED_DISP msg=audit(1414327142.084:1486): pid=3021 uid=0 auid=0 ses=52 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=USER_END msg=audit(1414327142.448:1487): pid=3021 uid=0 auid=0 ses=52 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1414327142.810:1488): pid=3021 uid=0 auid=0 ses=52 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327142.811:1489): pid=3021 uid=0 auid=0 ses=52 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=3021 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327142.811:1490): pid=3021 uid=0 auid=0 ses=52 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=3021 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327142.811:1491): pid=3021 uid=0 auid=0 ses=52 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=3021 suid=0 rport=50008 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=MAC_CONFIG_CHANGE msg=audit(1414327143.081:1492): bool=haproxy_connect_any val=1 old_val=0 auid=0 ses=33 >type=SYSCALL msg=audit(1414327143.081:1492): arch=c000003e syscall=1 success=yes exit=2 a0=4 a1=7fffe08ad010 a2=2 a3=7fffe08acdd0 items=0 ppid=2843 pid=3008 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=33 comm="setsebool" exe="/usr/sbin/setsebool" subj=unconfined_u:system_r:setsebool_t:s0-s0:c0.c1023 key=(null) >type=MAC_POLICY_LOAD msg=audit(1414327143.216:1493): policy loaded auid=0 ses=33 >type=SYSCALL msg=audit(1414327143.216:1493): arch=c000003e syscall=1 success=yes exit=3591907 a0=4 a1=7fded834e010 a2=36cee3 a3=7fff19e8d1f0 items=0 ppid=3008 pid=3027 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=33 comm="load_policy" exe="/usr/sbin/load_policy" subj=unconfined_u:system_r:load_policy_t:s0-s0:c0.c1023 key=(null) >type=CRYPTO_KEY_USER msg=audit(1414327144.393:1494): pid=3037 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=3037 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327144.393:1495): pid=3037 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=3037 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414327144.394:1496): pid=3036 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=3037 suid=74 rport=59194 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414327144.394:1497): pid=3036 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=3037 suid=74 rport=59194 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327144.936:1498): pid=3036 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=59194 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327144.936:1499): pid=3036 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=e7:e2:3d:94:48:cf:f5:8c:5e:54:98:bd:89:a5:29:a9 rport=59194 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_ACCT msg=audit(1414327144.940:1500): pid=3036 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327144.941:1501): pid=3036 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=3037 suid=74 rport=59194 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327144.941:1502): pid=3036 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1414327144.942:1503): pid=3036 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=LOGIN msg=audit(1414327144.942:1504): pid=3036 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=53 res=1 >type=USER_ROLE_CHANGE msg=audit(1414327145.015:1505): pid=3036 uid=0 auid=0 ses=53 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_AVC msg=audit(1414327145.025:1506): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='avc: received policyload notice (seqno=10) exe="/usr/lib/systemd/systemd" sauid=0 hostname=? addr=? terminal=?' >type=USER_AVC msg=audit(1414327145.025:1507): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='avc: received policyload notice (seqno=11) exe="/usr/lib/systemd/systemd" sauid=0 hostname=? addr=? terminal=?' >type=USER_START msg=audit(1414327145.032:1508): pid=3036 uid=0 auid=0 ses=53 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1414327145.036:1509): pid=3036 uid=0 auid=0 ses=53 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_START msg=audit(1414327145.036:1510): pid=3036 uid=0 auid=0 ses=53 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327145.038:1511): pid=3039 uid=0 auid=0 ses=53 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=3039 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327145.038:1512): pid=3039 uid=0 auid=0 ses=53 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=3039 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRED_REFR msg=audit(1414327145.039:1513): pid=3039 uid=0 auid=0 ses=53 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_END msg=audit(1414327145.053:1514): pid=3036 uid=0 auid=0 ses=53 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRED_DISP msg=audit(1414327145.053:1515): pid=3036 uid=0 auid=0 ses=53 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_END msg=audit(1414327145.054:1516): pid=3036 uid=0 auid=0 ses=53 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1414327145.054:1517): pid=3036 uid=0 auid=0 ses=53 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327145.054:1518): pid=3036 uid=0 auid=0 ses=53 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=3036 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327145.054:1519): pid=3036 uid=0 auid=0 ses=53 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=3036 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327145.054:1520): pid=3036 uid=0 auid=0 ses=53 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=3036 suid=0 rport=59194 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327148.074:1521): pid=3045 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=3045 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327148.074:1522): pid=3045 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=3045 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414327148.076:1523): pid=3044 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=3045 suid=74 rport=50010 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414327148.076:1524): pid=3044 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=3045 suid=74 rport=50010 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=USER_AUTH msg=audit(1414327148.611:1525): pid=3044 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=50010 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=USER_AUTH msg=audit(1414327148.611:1526): pid=3044 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=e7:e2:3d:94:48:cf:f5:8c:5e:54:98:bd:89:a5:29:a9 rport=50010 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=USER_ACCT msg=audit(1414327148.979:1527): pid=3044 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327148.979:1528): pid=3044 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=3045 suid=74 rport=50010 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=USER_AUTH msg=audit(1414327148.980:1529): pid=3044 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1414327149.346:1530): pid=3044 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=LOGIN msg=audit(1414327149.346:1531): pid=3044 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=54 res=1 >type=USER_ROLE_CHANGE msg=audit(1414327149.779:1532): pid=3044 uid=0 auid=0 ses=54 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=USER_START msg=audit(1414327150.157:1533): pid=3044 uid=0 auid=0 ses=54 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1414327150.523:1534): pid=3044 uid=0 auid=0 ses=54 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=USER_START msg=audit(1414327150.883:1535): pid=3044 uid=0 auid=0 ses=54 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327150.885:1536): pid=3047 uid=0 auid=0 ses=54 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=3047 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327150.885:1537): pid=3047 uid=0 auid=0 ses=54 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=3047 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRED_REFR msg=audit(1414327151.247:1538): pid=3047 uid=0 auid=0 ses=54 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=USER_END msg=audit(1414327151.626:1539): pid=3044 uid=0 auid=0 ses=54 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=CRED_DISP msg=audit(1414327151.989:1540): pid=3044 uid=0 auid=0 ses=54 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=USER_END msg=audit(1414327152.351:1541): pid=3044 uid=0 auid=0 ses=54 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1414327152.712:1542): pid=3044 uid=0 auid=0 ses=54 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327152.712:1543): pid=3044 uid=0 auid=0 ses=54 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=3044 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327152.712:1544): pid=3044 uid=0 auid=0 ses=54 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=3044 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327152.712:1545): pid=3044 uid=0 auid=0 ses=54 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=3044 suid=0 rport=50010 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327154.285:1546): pid=3053 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=3053 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327154.286:1547): pid=3053 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=3053 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414327154.287:1548): pid=3052 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=3053 suid=74 rport=59196 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414327154.287:1549): pid=3052 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=3053 suid=74 rport=59196 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327154.821:1550): pid=3052 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=59196 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327154.821:1551): pid=3052 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=e7:e2:3d:94:48:cf:f5:8c:5e:54:98:bd:89:a5:29:a9 rport=59196 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_ACCT msg=audit(1414327154.825:1552): pid=3052 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327154.826:1553): pid=3052 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=3053 suid=74 rport=59196 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327154.827:1554): pid=3052 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1414327154.827:1555): pid=3052 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=LOGIN msg=audit(1414327154.827:1556): pid=3052 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=55 res=1 >type=USER_ROLE_CHANGE msg=audit(1414327154.893:1557): pid=3052 uid=0 auid=0 ses=55 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_START msg=audit(1414327154.907:1558): pid=3052 uid=0 auid=0 ses=55 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1414327154.910:1559): pid=3052 uid=0 auid=0 ses=55 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_START msg=audit(1414327154.911:1560): pid=3052 uid=0 auid=0 ses=55 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327154.912:1561): pid=3055 uid=0 auid=0 ses=55 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=3055 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327154.912:1562): pid=3055 uid=0 auid=0 ses=55 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=3055 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRED_REFR msg=audit(1414327154.913:1563): pid=3055 uid=0 auid=0 ses=55 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_END msg=audit(1414327154.926:1564): pid=3052 uid=0 auid=0 ses=55 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRED_DISP msg=audit(1414327154.927:1565): pid=3052 uid=0 auid=0 ses=55 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_END msg=audit(1414327154.927:1566): pid=3052 uid=0 auid=0 ses=55 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1414327154.927:1567): pid=3052 uid=0 auid=0 ses=55 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327154.927:1568): pid=3052 uid=0 auid=0 ses=55 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=3052 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327154.927:1569): pid=3052 uid=0 auid=0 ses=55 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=3052 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327154.927:1570): pid=3052 uid=0 auid=0 ses=55 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=3052 suid=0 rport=59196 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=MAC_CONFIG_CHANGE msg=audit(1414327157.010:1571): bool=nis_enabled val=1 old_val=0 auid=0 ses=33 >type=SYSCALL msg=audit(1414327157.010:1571): arch=c000003e syscall=1 success=yes exit=2 a0=4 a1=7fffedd8a100 a2=2 a3=7fffedd89ec0 items=0 ppid=2843 pid=3032 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=33 comm="setsebool" exe="/usr/sbin/setsebool" subj=unconfined_u:system_r:setsebool_t:s0-s0:c0.c1023 key=(null) >type=CRYPTO_KEY_USER msg=audit(1414327157.955:1572): pid=3062 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=3062 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327157.956:1573): pid=3062 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=3062 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414327157.958:1574): pid=3061 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=3062 suid=74 rport=50012 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414327157.958:1575): pid=3061 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=3062 suid=74 rport=50012 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=MAC_POLICY_LOAD msg=audit(1414327157.149:1576): policy loaded auid=0 ses=33 >type=SYSCALL msg=audit(1414327157.149:1576): arch=c000003e syscall=1 success=yes exit=3591907 a0=4 a1=7fcf8d150010 a2=36cee3 a3=7fffe720e950 items=0 ppid=3032 pid=3057 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=33 comm="load_policy" exe="/usr/sbin/load_policy" subj=unconfined_u:system_r:load_policy_t:s0-s0:c0.c1023 key=(null) >type=USER_AUTH msg=audit(1414327158.501:1577): pid=3061 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=50012 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=USER_AUTH msg=audit(1414327158.501:1578): pid=3061 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=e7:e2:3d:94:48:cf:f5:8c:5e:54:98:bd:89:a5:29:a9 rport=50012 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=USER_ACCT msg=audit(1414327158.866:1579): pid=3061 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327158.867:1580): pid=3061 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=3062 suid=74 rport=50012 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=USER_AUTH msg=audit(1414327158.869:1581): pid=3061 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1414327159.232:1582): pid=3061 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=LOGIN msg=audit(1414327159.232:1583): pid=3061 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=56 res=1 >type=USER_ROLE_CHANGE msg=audit(1414327159.667:1584): pid=3061 uid=0 auid=0 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=USER_AVC msg=audit(1414327159.679:1585): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='avc: received policyload notice (seqno=12) exe="/usr/lib/systemd/systemd" sauid=0 hostname=? addr=? terminal=?' >type=USER_AVC msg=audit(1414327159.679:1586): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='avc: received policyload notice (seqno=13) exe="/usr/lib/systemd/systemd" sauid=0 hostname=? addr=? terminal=?' >type=USER_START msg=audit(1414327160.049:1587): pid=3061 uid=0 auid=0 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1414327160.414:1588): pid=3061 uid=0 auid=0 ses=56 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=USER_START msg=audit(1414327160.775:1589): pid=3061 uid=0 auid=0 ses=56 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327160.777:1590): pid=3069 uid=0 auid=0 ses=56 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=3069 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327160.777:1591): pid=3069 uid=0 auid=0 ses=56 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=3069 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRED_REFR msg=audit(1414327161.139:1592): pid=3069 uid=0 auid=0 ses=56 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=USER_END msg=audit(1414327161.519:1593): pid=3061 uid=0 auid=0 ses=56 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=CRED_DISP msg=audit(1414327161.881:1594): pid=3061 uid=0 auid=0 ses=56 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=USER_END msg=audit(1414327162.243:1595): pid=3061 uid=0 auid=0 ses=56 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1414327162.604:1596): pid=3061 uid=0 auid=0 ses=56 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327162.604:1597): pid=3061 uid=0 auid=0 ses=56 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=3061 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327162.605:1598): pid=3061 uid=0 auid=0 ses=56 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=3061 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327162.605:1599): pid=3061 uid=0 auid=0 ses=56 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=3061 suid=0 rport=50012 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327164.177:1600): pid=3075 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=3075 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327164.177:1601): pid=3075 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=3075 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414327164.178:1602): pid=3074 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=3075 suid=74 rport=59198 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414327164.179:1603): pid=3074 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=3075 suid=74 rport=59198 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327164.714:1604): pid=3074 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=59198 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327164.714:1605): pid=3074 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=e7:e2:3d:94:48:cf:f5:8c:5e:54:98:bd:89:a5:29:a9 rport=59198 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_ACCT msg=audit(1414327164.718:1606): pid=3074 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327164.718:1607): pid=3074 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=3075 suid=74 rport=59198 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327164.719:1608): pid=3074 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1414327164.719:1609): pid=3074 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=LOGIN msg=audit(1414327164.719:1610): pid=3074 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=57 res=1 >type=USER_ROLE_CHANGE msg=audit(1414327164.787:1611): pid=3074 uid=0 auid=0 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_START msg=audit(1414327164.803:1612): pid=3074 uid=0 auid=0 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1414327164.806:1613): pid=3074 uid=0 auid=0 ses=57 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_START msg=audit(1414327164.806:1614): pid=3074 uid=0 auid=0 ses=57 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327164.808:1615): pid=3077 uid=0 auid=0 ses=57 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=3077 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327164.808:1616): pid=3077 uid=0 auid=0 ses=57 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=3077 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRED_REFR msg=audit(1414327164.809:1617): pid=3077 uid=0 auid=0 ses=57 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_END msg=audit(1414327164.823:1618): pid=3074 uid=0 auid=0 ses=57 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRED_DISP msg=audit(1414327164.823:1619): pid=3074 uid=0 auid=0 ses=57 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_END msg=audit(1414327164.823:1620): pid=3074 uid=0 auid=0 ses=57 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1414327164.824:1621): pid=3074 uid=0 auid=0 ses=57 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327164.824:1622): pid=3074 uid=0 auid=0 ses=57 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=3074 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327164.824:1623): pid=3074 uid=0 auid=0 ses=57 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=3074 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327164.824:1624): pid=3074 uid=0 auid=0 ses=57 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=3074 suid=0 rport=59198 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327167.849:1625): pid=3084 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=3084 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327167.849:1626): pid=3084 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=3084 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414327167.850:1627): pid=3083 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=3084 suid=74 rport=50014 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414327167.850:1628): pid=3083 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=3084 suid=74 rport=50014 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=USER_AUTH msg=audit(1414327168.381:1629): pid=3083 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=50014 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=USER_AUTH msg=audit(1414327168.381:1630): pid=3083 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=e7:e2:3d:94:48:cf:f5:8c:5e:54:98:bd:89:a5:29:a9 rport=50014 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=USER_ACCT msg=audit(1414327168.748:1631): pid=3083 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327168.749:1632): pid=3083 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=3084 suid=74 rport=50014 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=USER_AUTH msg=audit(1414327168.750:1633): pid=3083 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1414327169.110:1634): pid=3083 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=LOGIN msg=audit(1414327169.111:1635): pid=3083 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=58 res=1 >type=USER_ROLE_CHANGE msg=audit(1414327169.539:1636): pid=3083 uid=0 auid=0 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=USER_START msg=audit(1414327169.919:1637): pid=3083 uid=0 auid=0 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1414327170.285:1638): pid=3083 uid=0 auid=0 ses=58 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=USER_START msg=audit(1414327170.647:1639): pid=3083 uid=0 auid=0 ses=58 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327170.649:1640): pid=3086 uid=0 auid=0 ses=58 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=3086 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327170.649:1641): pid=3086 uid=0 auid=0 ses=58 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=3086 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRED_REFR msg=audit(1414327171.012:1642): pid=3086 uid=0 auid=0 ses=58 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=USER_END msg=audit(1414327171.391:1643): pid=3083 uid=0 auid=0 ses=58 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=CRED_DISP msg=audit(1414327171.752:1644): pid=3083 uid=0 auid=0 ses=58 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=MAC_POLICY_LOAD msg=audit(1414327171.055:1645): policy loaded auid=0 ses=33 >type=SYSCALL msg=audit(1414327171.055:1645): arch=c000003e syscall=1 success=yes exit=3591907 a0=4 a1=7f833ef9a010 a2=36cee3 a3=7ffff7450ae0 items=0 ppid=3067 pid=3087 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=33 comm="load_policy" exe="/usr/sbin/load_policy" subj=unconfined_u:system_r:load_policy_t:s0-s0:c0.c1023 key=(null) >type=USER_END msg=audit(1414327172.115:1646): pid=3083 uid=0 auid=0 ses=58 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1414327172.479:1647): pid=3083 uid=0 auid=0 ses=58 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327172.479:1648): pid=3083 uid=0 auid=0 ses=58 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=3083 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327172.479:1649): pid=3083 uid=0 auid=0 ses=58 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=3083 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327172.480:1650): pid=3083 uid=0 auid=0 ses=58 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=3083 suid=0 rport=50014 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=USER_AVC msg=audit(1414327172.489:1651): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='avc: received policyload notice (seqno=14) exe="/usr/lib/systemd/systemd" sauid=0 hostname=? addr=? terminal=?' >type=USER_AVC msg=audit(1414327172.489:1652): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='avc: received policyload notice (seqno=15) exe="/usr/lib/systemd/systemd" sauid=0 hostname=? addr=? terminal=?' >type=CRYPTO_KEY_USER msg=audit(1414327174.064:1653): pid=3098 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=3098 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327174.064:1654): pid=3098 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=3098 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414327174.065:1655): pid=3097 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=3098 suid=74 rport=59200 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414327174.065:1656): pid=3097 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=3098 suid=74 rport=59200 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327174.603:1657): pid=3097 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=59200 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327174.603:1658): pid=3097 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=e7:e2:3d:94:48:cf:f5:8c:5e:54:98:bd:89:a5:29:a9 rport=59200 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_ACCT msg=audit(1414327174.607:1659): pid=3097 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327174.607:1660): pid=3097 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=3098 suid=74 rport=59200 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327174.608:1661): pid=3097 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1414327174.608:1662): pid=3097 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=LOGIN msg=audit(1414327174.608:1663): pid=3097 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=59 res=1 >type=USER_ROLE_CHANGE msg=audit(1414327174.682:1664): pid=3097 uid=0 auid=0 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_START msg=audit(1414327174.698:1665): pid=3097 uid=0 auid=0 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1414327174.702:1666): pid=3097 uid=0 auid=0 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_START msg=audit(1414327174.702:1667): pid=3097 uid=0 auid=0 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327174.704:1668): pid=3100 uid=0 auid=0 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=3100 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327174.704:1669): pid=3100 uid=0 auid=0 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=3100 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRED_REFR msg=audit(1414327174.705:1670): pid=3100 uid=0 auid=0 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_END msg=audit(1414327174.719:1671): pid=3097 uid=0 auid=0 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRED_DISP msg=audit(1414327174.719:1672): pid=3097 uid=0 auid=0 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_END msg=audit(1414327174.720:1673): pid=3097 uid=0 auid=0 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1414327174.720:1674): pid=3097 uid=0 auid=0 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327174.720:1675): pid=3097 uid=0 auid=0 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=3097 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327174.720:1676): pid=3097 uid=0 auid=0 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=3097 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327174.721:1677): pid=3097 uid=0 auid=0 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=3097 suid=0 rport=59200 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327177.740:1678): pid=3106 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=3106 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327177.740:1679): pid=3106 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=3106 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414327177.741:1680): pid=3105 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=3106 suid=74 rport=50016 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414327177.741:1681): pid=3105 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=3106 suid=74 rport=50016 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=USER_AUTH msg=audit(1414327178.273:1682): pid=3105 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=50016 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=USER_AUTH msg=audit(1414327178.273:1683): pid=3105 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=e7:e2:3d:94:48:cf:f5:8c:5e:54:98:bd:89:a5:29:a9 rport=50016 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=USER_ACCT msg=audit(1414327178.639:1684): pid=3105 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327178.640:1685): pid=3105 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=3106 suid=74 rport=50016 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=USER_AUTH msg=audit(1414327178.641:1686): pid=3105 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1414327179.002:1687): pid=3105 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=LOGIN msg=audit(1414327179.003:1688): pid=3105 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=60 res=1 >type=USER_ROLE_CHANGE msg=audit(1414327179.437:1689): pid=3105 uid=0 auid=0 ses=60 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=USER_START msg=audit(1414327179.819:1690): pid=3105 uid=0 auid=0 ses=60 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1414327180.183:1691): pid=3105 uid=0 auid=0 ses=60 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=USER_START msg=audit(1414327180.546:1692): pid=3105 uid=0 auid=0 ses=60 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327180.548:1693): pid=3108 uid=0 auid=0 ses=60 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=3108 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327180.548:1694): pid=3108 uid=0 auid=0 ses=60 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=3108 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRED_REFR msg=audit(1414327180.912:1695): pid=3108 uid=0 auid=0 ses=60 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=USER_END msg=audit(1414327181.293:1696): pid=3105 uid=0 auid=0 ses=60 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=CRED_DISP msg=audit(1414327181.656:1697): pid=3105 uid=0 auid=0 ses=60 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=USER_END msg=audit(1414327182.018:1698): pid=3105 uid=0 auid=0 ses=60 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1414327182.379:1699): pid=3105 uid=0 auid=0 ses=60 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327182.379:1700): pid=3105 uid=0 auid=0 ses=60 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=3105 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327182.379:1701): pid=3105 uid=0 auid=0 ses=60 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=3105 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327182.379:1702): pid=3105 uid=0 auid=0 ses=60 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=3105 suid=0 rport=50016 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327183.954:1703): pid=3114 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=3114 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327183.954:1704): pid=3114 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=3114 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414327183.955:1705): pid=3113 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=3114 suid=74 rport=59202 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414327183.955:1706): pid=3113 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=3114 suid=74 rport=59202 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327184.494:1707): pid=3113 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=59202 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327184.494:1708): pid=3113 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=e7:e2:3d:94:48:cf:f5:8c:5e:54:98:bd:89:a5:29:a9 rport=59202 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_ACCT msg=audit(1414327184.499:1709): pid=3113 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327184.500:1710): pid=3113 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=3114 suid=74 rport=59202 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327184.501:1711): pid=3113 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1414327184.501:1712): pid=3113 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=LOGIN msg=audit(1414327184.501:1713): pid=3113 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=61 res=1 >type=USER_ROLE_CHANGE msg=audit(1414327184.570:1714): pid=3113 uid=0 auid=0 ses=61 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_START msg=audit(1414327184.585:1715): pid=3113 uid=0 auid=0 ses=61 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1414327184.589:1716): pid=3113 uid=0 auid=0 ses=61 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_START msg=audit(1414327184.589:1717): pid=3113 uid=0 auid=0 ses=61 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327184.591:1718): pid=3116 uid=0 auid=0 ses=61 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=3116 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327184.591:1719): pid=3116 uid=0 auid=0 ses=61 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=3116 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRED_REFR msg=audit(1414327184.592:1720): pid=3116 uid=0 auid=0 ses=61 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_END msg=audit(1414327184.606:1721): pid=3113 uid=0 auid=0 ses=61 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRED_DISP msg=audit(1414327184.606:1722): pid=3113 uid=0 auid=0 ses=61 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_END msg=audit(1414327184.607:1723): pid=3113 uid=0 auid=0 ses=61 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1414327184.607:1724): pid=3113 uid=0 auid=0 ses=61 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327184.607:1725): pid=3113 uid=0 auid=0 ses=61 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=3113 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327184.607:1726): pid=3113 uid=0 auid=0 ses=61 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=3113 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327184.607:1727): pid=3113 uid=0 auid=0 ses=61 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=3113 suid=0 rport=59202 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=MAC_CONFIG_CHANGE msg=audit(1414327184.836:1728): bool=glance_use_execmem val=1 old_val=0 auid=0 ses=33 >type=SYSCALL msg=audit(1414327184.836:1728): arch=c000003e syscall=1 success=yes exit=2 a0=4 a1=7fff454879e0 a2=2 a3=7fff454877a0 items=0 ppid=2843 pid=3092 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=33 comm="setsebool" exe="/usr/sbin/setsebool" subj=unconfined_u:system_r:setsebool_t:s0-s0:c0.c1023 key=(null) >type=MAC_POLICY_LOAD msg=audit(1414327184.971:1729): policy loaded auid=0 ses=33 >type=SYSCALL msg=audit(1414327184.971:1729): arch=c000003e syscall=1 success=yes exit=3591907 a0=4 a1=7f28e7c71010 a2=36cee3 a3=7fff3ba79780 items=0 ppid=3092 pid=3118 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=33 comm="load_policy" exe="/usr/sbin/load_policy" subj=unconfined_u:system_r:load_policy_t:s0-s0:c0.c1023 key=(null) >type=CRYPTO_KEY_USER msg=audit(1414327187.639:1730): pid=3128 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=3128 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327187.639:1731): pid=3128 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=3128 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414327187.640:1732): pid=3127 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=3128 suid=74 rport=50018 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414327187.640:1733): pid=3127 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=3128 suid=74 rport=50018 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=USER_AUTH msg=audit(1414327188.175:1734): pid=3127 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=50018 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=USER_AUTH msg=audit(1414327188.175:1735): pid=3127 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=e7:e2:3d:94:48:cf:f5:8c:5e:54:98:bd:89:a5:29:a9 rport=50018 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=USER_ACCT msg=audit(1414327188.546:1736): pid=3127 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327188.547:1737): pid=3127 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=3128 suid=74 rport=50018 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=USER_AUTH msg=audit(1414327188.548:1738): pid=3127 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1414327188.909:1739): pid=3127 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=LOGIN msg=audit(1414327188.910:1740): pid=3127 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=62 res=1 >type=USER_ROLE_CHANGE msg=audit(1414327189.341:1741): pid=3127 uid=0 auid=0 ses=62 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=USER_AVC msg=audit(1414327189.353:1742): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='avc: received policyload notice (seqno=16) exe="/usr/lib/systemd/systemd" sauid=0 hostname=? addr=? terminal=?' >type=USER_AVC msg=audit(1414327189.353:1743): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='avc: received policyload notice (seqno=17) exe="/usr/lib/systemd/systemd" sauid=0 hostname=? addr=? terminal=?' >type=USER_START msg=audit(1414327189.723:1744): pid=3127 uid=0 auid=0 ses=62 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1414327190.087:1745): pid=3127 uid=0 auid=0 ses=62 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=USER_START msg=audit(1414327190.449:1746): pid=3127 uid=0 auid=0 ses=62 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327190.451:1747): pid=3130 uid=0 auid=0 ses=62 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=3130 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327190.451:1748): pid=3130 uid=0 auid=0 ses=62 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=3130 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRED_REFR msg=audit(1414327190.813:1749): pid=3130 uid=0 auid=0 ses=62 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=USER_END msg=audit(1414327191.190:1750): pid=3127 uid=0 auid=0 ses=62 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=CRED_DISP msg=audit(1414327191.551:1751): pid=3127 uid=0 auid=0 ses=62 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=USER_END msg=audit(1414327191.912:1752): pid=3127 uid=0 auid=0 ses=62 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1414327192.273:1753): pid=3127 uid=0 auid=0 ses=62 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327192.274:1754): pid=3127 uid=0 auid=0 ses=62 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=3127 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327192.274:1755): pid=3127 uid=0 auid=0 ses=62 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=3127 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327192.274:1756): pid=3127 uid=0 auid=0 ses=62 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=3127 suid=0 rport=50018 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327193.851:1757): pid=3136 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=3136 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327193.852:1758): pid=3136 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=3136 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414327193.853:1759): pid=3135 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=3136 suid=74 rport=59204 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414327193.853:1760): pid=3135 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=3136 suid=74 rport=59204 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327194.388:1761): pid=3135 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=59204 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327194.388:1762): pid=3135 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=e7:e2:3d:94:48:cf:f5:8c:5e:54:98:bd:89:a5:29:a9 rport=59204 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_ACCT msg=audit(1414327194.392:1763): pid=3135 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327194.392:1764): pid=3135 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=3136 suid=74 rport=59204 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327194.393:1765): pid=3135 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1414327194.393:1766): pid=3135 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=LOGIN msg=audit(1414327194.393:1767): pid=3135 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=63 res=1 >type=USER_ROLE_CHANGE msg=audit(1414327194.458:1768): pid=3135 uid=0 auid=0 ses=63 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_START msg=audit(1414327194.474:1769): pid=3135 uid=0 auid=0 ses=63 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1414327194.478:1770): pid=3135 uid=0 auid=0 ses=63 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_START msg=audit(1414327194.478:1771): pid=3135 uid=0 auid=0 ses=63 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327194.480:1772): pid=3138 uid=0 auid=0 ses=63 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=3138 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327194.480:1773): pid=3138 uid=0 auid=0 ses=63 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=3138 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRED_REFR msg=audit(1414327194.481:1774): pid=3138 uid=0 auid=0 ses=63 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_END msg=audit(1414327194.495:1775): pid=3135 uid=0 auid=0 ses=63 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRED_DISP msg=audit(1414327194.495:1776): pid=3135 uid=0 auid=0 ses=63 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_END msg=audit(1414327194.495:1777): pid=3135 uid=0 auid=0 ses=63 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1414327194.496:1778): pid=3135 uid=0 auid=0 ses=63 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327194.496:1779): pid=3135 uid=0 auid=0 ses=63 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=3135 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327194.496:1780): pid=3135 uid=0 auid=0 ses=63 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=3135 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327194.496:1781): pid=3135 uid=0 auid=0 ses=63 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=3135 suid=0 rport=59204 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327197.516:1782): pid=3144 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=3144 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327197.516:1783): pid=3144 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=3144 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414327197.517:1784): pid=3143 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=3144 suid=74 rport=50020 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414327197.517:1785): pid=3143 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=3144 suid=74 rport=50020 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=USER_AUTH msg=audit(1414327198.093:1786): pid=3143 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=50020 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=USER_AUTH msg=audit(1414327198.093:1787): pid=3143 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=e7:e2:3d:94:48:cf:f5:8c:5e:54:98:bd:89:a5:29:a9 rport=50020 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=USER_ACCT msg=audit(1414327198.458:1788): pid=3143 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327198.459:1789): pid=3143 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=3144 suid=74 rport=50020 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=USER_AUTH msg=audit(1414327198.460:1790): pid=3143 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=ssh res=success' >type=MAC_CONFIG_CHANGE msg=audit(1414327198.603:1791): bool=virt_use_execmem val=1 old_val=0 auid=0 ses=33 >type=SYSCALL msg=audit(1414327198.603:1791): arch=c000003e syscall=1 success=yes exit=2 a0=4 a1=7fff2008d080 a2=2 a3=7fff2008ce40 items=0 ppid=2843 pid=3123 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=33 comm="setsebool" exe="/usr/sbin/setsebool" subj=unconfined_u:system_r:setsebool_t:s0-s0:c0.c1023 key=(null) >type=CRED_ACQ msg=audit(1414327198.822:1792): pid=3143 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=LOGIN msg=audit(1414327198.823:1793): pid=3143 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=64 res=1 >type=USER_ROLE_CHANGE msg=audit(1414327199.256:1794): pid=3143 uid=0 auid=0 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=USER_AVC msg=audit(1414327199.268:1795): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='avc: received policyload notice (seqno=18) exe="/usr/lib/systemd/systemd" sauid=0 hostname=? addr=? terminal=?' >type=MAC_POLICY_LOAD msg=audit(1414327198.737:1796): policy loaded auid=0 ses=33 >type=SYSCALL msg=audit(1414327198.737:1796): arch=c000003e syscall=1 success=yes exit=3591907 a0=4 a1=7f705d2fb010 a2=36cee3 a3=7fffbb6c0a50 items=0 ppid=3123 pid=3146 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=33 comm="load_policy" exe="/usr/sbin/load_policy" subj=unconfined_u:system_r:load_policy_t:s0-s0:c0.c1023 key=(null) >type=USER_START msg=audit(1414327199.638:1797): pid=3143 uid=0 auid=0 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1414327200.010:1798): pid=3143 uid=0 auid=0 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=USER_START msg=audit(1414327200.371:1799): pid=3143 uid=0 auid=0 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327200.373:1800): pid=3152 uid=0 auid=0 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=3152 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327200.373:1801): pid=3152 uid=0 auid=0 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=3152 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRED_REFR msg=audit(1414327200.738:1802): pid=3152 uid=0 auid=0 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=USER_END msg=audit(1414327201.119:1803): pid=3143 uid=0 auid=0 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=CRED_DISP msg=audit(1414327201.480:1804): pid=3143 uid=0 auid=0 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=USER_END msg=audit(1414327201.841:1805): pid=3143 uid=0 auid=0 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1414327202.206:1806): pid=3143 uid=0 auid=0 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327202.206:1807): pid=3143 uid=0 auid=0 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=3143 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327202.206:1808): pid=3143 uid=0 auid=0 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=3143 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327202.206:1809): pid=3143 uid=0 auid=0 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=3143 suid=0 rport=50020 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=USER_AVC msg=audit(1414327202.215:1810): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='avc: received policyload notice (seqno=19) exe="/usr/lib/systemd/systemd" sauid=0 hostname=? addr=? terminal=?' >type=CRYPTO_KEY_USER msg=audit(1414327203.775:1811): pid=3158 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=3158 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327203.775:1812): pid=3158 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=3158 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414327203.777:1813): pid=3157 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=3158 suid=74 rport=59206 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414327203.779:1814): pid=3157 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=3158 suid=74 rport=59206 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327204.317:1815): pid=3157 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=59206 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327204.317:1816): pid=3157 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=e7:e2:3d:94:48:cf:f5:8c:5e:54:98:bd:89:a5:29:a9 rport=59206 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_ACCT msg=audit(1414327204.321:1817): pid=3157 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327204.321:1818): pid=3157 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=3158 suid=74 rport=59206 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327204.322:1819): pid=3157 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1414327204.322:1820): pid=3157 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=LOGIN msg=audit(1414327204.322:1821): pid=3157 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=65 res=1 >type=USER_ROLE_CHANGE msg=audit(1414327204.396:1822): pid=3157 uid=0 auid=0 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_START msg=audit(1414327204.411:1823): pid=3157 uid=0 auid=0 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1414327204.415:1824): pid=3157 uid=0 auid=0 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_START msg=audit(1414327204.415:1825): pid=3157 uid=0 auid=0 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327204.416:1826): pid=3160 uid=0 auid=0 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=3160 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327204.416:1827): pid=3160 uid=0 auid=0 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=3160 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRED_REFR msg=audit(1414327204.417:1828): pid=3160 uid=0 auid=0 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_END msg=audit(1414327204.431:1829): pid=3157 uid=0 auid=0 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRED_DISP msg=audit(1414327204.431:1830): pid=3157 uid=0 auid=0 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_END msg=audit(1414327204.431:1831): pid=3157 uid=0 auid=0 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1414327204.431:1832): pid=3157 uid=0 auid=0 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327204.432:1833): pid=3157 uid=0 auid=0 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=3157 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327204.432:1834): pid=3157 uid=0 auid=0 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=3157 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327204.432:1835): pid=3157 uid=0 auid=0 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=3157 suid=0 rport=59206 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327207.455:1836): pid=3166 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=3166 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327207.455:1837): pid=3166 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=3166 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414327207.456:1838): pid=3165 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=3166 suid=74 rport=50022 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414327207.456:1839): pid=3165 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=3166 suid=74 rport=50022 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=USER_AUTH msg=audit(1414327207.993:1840): pid=3165 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=50022 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=USER_AUTH msg=audit(1414327207.993:1841): pid=3165 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=e7:e2:3d:94:48:cf:f5:8c:5e:54:98:bd:89:a5:29:a9 rport=50022 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=USER_ACCT msg=audit(1414327208.359:1842): pid=3165 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327208.359:1843): pid=3165 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=3166 suid=74 rport=50022 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=USER_AUTH msg=audit(1414327208.361:1844): pid=3165 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1414327208.721:1845): pid=3165 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=LOGIN msg=audit(1414327208.721:1846): pid=3165 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=66 res=1 >type=USER_ROLE_CHANGE msg=audit(1414327209.149:1847): pid=3165 uid=0 auid=0 ses=66 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=USER_START msg=audit(1414327209.527:1848): pid=3165 uid=0 auid=0 ses=66 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1414327209.893:1849): pid=3165 uid=0 auid=0 ses=66 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=USER_START msg=audit(1414327210.256:1850): pid=3165 uid=0 auid=0 ses=66 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327210.258:1851): pid=3168 uid=0 auid=0 ses=66 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=3168 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327210.258:1852): pid=3168 uid=0 auid=0 ses=66 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=3168 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRED_REFR msg=audit(1414327210.620:1853): pid=3168 uid=0 auid=0 ses=66 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=USER_END msg=audit(1414327211.007:1854): pid=3165 uid=0 auid=0 ses=66 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=CRED_DISP msg=audit(1414327211.368:1855): pid=3165 uid=0 auid=0 ses=66 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=USER_END msg=audit(1414327211.732:1856): pid=3165 uid=0 auid=0 ses=66 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1414327212.095:1857): pid=3165 uid=0 auid=0 ses=66 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327212.095:1858): pid=3165 uid=0 auid=0 ses=66 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=3165 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327212.095:1859): pid=3165 uid=0 auid=0 ses=66 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=3165 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327212.095:1860): pid=3165 uid=0 auid=0 ses=66 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=3165 suid=0 rport=50022 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=MAC_POLICY_LOAD msg=audit(1414327212.703:1861): policy loaded auid=0 ses=33 >type=SYSCALL msg=audit(1414327212.703:1861): arch=c000003e syscall=1 success=yes exit=3591907 a0=4 a1=7f9ecfe50010 a2=36cee3 a3=7fff16ecb1c0 items=0 ppid=3151 pid=3170 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=33 comm="load_policy" exe="/usr/sbin/load_policy" subj=unconfined_u:system_r:load_policy_t:s0-s0:c0.c1023 key=(null) >type=CRYPTO_KEY_USER msg=audit(1414327213.669:1862): pid=3176 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=3176 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327213.670:1863): pid=3176 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=3176 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414327213.671:1864): pid=3175 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=3176 suid=74 rport=59208 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414327213.671:1865): pid=3175 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=3176 suid=74 rport=59208 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327214.210:1866): pid=3175 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=59208 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327214.210:1867): pid=3175 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=e7:e2:3d:94:48:cf:f5:8c:5e:54:98:bd:89:a5:29:a9 rport=59208 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_ACCT msg=audit(1414327214.214:1868): pid=3175 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327214.215:1869): pid=3175 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=3176 suid=74 rport=59208 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327214.215:1870): pid=3175 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1414327214.216:1871): pid=3175 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=LOGIN msg=audit(1414327214.216:1872): pid=3175 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=67 res=1 >type=USER_ROLE_CHANGE msg=audit(1414327214.288:1873): pid=3175 uid=0 auid=0 ses=67 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_AVC msg=audit(1414327214.301:1874): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='avc: received policyload notice (seqno=20) exe="/usr/lib/systemd/systemd" sauid=0 hostname=? addr=? terminal=?' >type=USER_AVC msg=audit(1414327214.301:1875): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='avc: received policyload notice (seqno=21) exe="/usr/lib/systemd/systemd" sauid=0 hostname=? addr=? terminal=?' >type=USER_START msg=audit(1414327214.309:1876): pid=3175 uid=0 auid=0 ses=67 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1414327214.313:1877): pid=3175 uid=0 auid=0 ses=67 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_START msg=audit(1414327214.313:1878): pid=3175 uid=0 auid=0 ses=67 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327214.315:1879): pid=3183 uid=0 auid=0 ses=67 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=3183 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327214.315:1880): pid=3183 uid=0 auid=0 ses=67 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=3183 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRED_REFR msg=audit(1414327214.316:1881): pid=3183 uid=0 auid=0 ses=67 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_END msg=audit(1414327214.333:1882): pid=3175 uid=0 auid=0 ses=67 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRED_DISP msg=audit(1414327214.333:1883): pid=3175 uid=0 auid=0 ses=67 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_END msg=audit(1414327214.333:1884): pid=3175 uid=0 auid=0 ses=67 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1414327214.334:1885): pid=3175 uid=0 auid=0 ses=67 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327214.334:1886): pid=3175 uid=0 auid=0 ses=67 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=3175 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327214.334:1887): pid=3175 uid=0 auid=0 ses=67 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=3175 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327214.334:1888): pid=3175 uid=0 auid=0 ses=67 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=3175 suid=0 rport=59208 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=MAC_POLICY_LOAD msg=audit(1414327214.319:1889): policy loaded auid=0 ses=33 >type=SYSCALL msg=audit(1414327214.319:1889): arch=c000003e syscall=1 success=yes exit=3591907 a0=4 a1=7fe66d436010 a2=36cee3 a3=7fff8f76af10 items=0 ppid=3180 pid=3182 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=33 comm="load_policy" exe="/usr/sbin/load_policy" subj=unconfined_u:system_r:load_policy_t:s0-s0:c0.c1023 key=(null) >type=MAC_POLICY_LOAD msg=audit(1414327215.973:1890): policy loaded auid=0 ses=33 >type=SYSCALL msg=audit(1414327215.973:1890): arch=c000003e syscall=1 success=yes exit=3591907 a0=4 a1=7f2185601010 a2=36cee3 a3=7fff29b90480 items=0 ppid=3189 pid=3190 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=33 comm="load_policy" exe="/usr/sbin/load_policy" subj=unconfined_u:system_r:load_policy_t:s0-s0:c0.c1023 key=(null) >type=CRYPTO_KEY_USER msg=audit(1414327217.365:1891): pid=3200 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=3200 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327217.365:1892): pid=3200 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=3200 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414327217.367:1893): pid=3199 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=3200 suid=74 rport=50024 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414327217.367:1894): pid=3199 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=3200 suid=74 rport=50024 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=USER_AUTH msg=audit(1414327217.904:1895): pid=3199 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=50024 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=USER_AUTH msg=audit(1414327217.904:1896): pid=3199 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=e7:e2:3d:94:48:cf:f5:8c:5e:54:98:bd:89:a5:29:a9 rport=50024 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=USER_ACCT msg=audit(1414327218.269:1897): pid=3199 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327218.270:1898): pid=3199 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=3200 suid=74 rport=50024 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=USER_AUTH msg=audit(1414327218.271:1899): pid=3199 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=ssh res=success' >type=MAC_POLICY_LOAD msg=audit(1414327217.604:1900): policy loaded auid=0 ses=33 >type=SYSCALL msg=audit(1414327217.604:1900): arch=c000003e syscall=1 success=yes exit=3591907 a0=4 a1=7ff1a5cbc010 a2=36cee3 a3=7fffa9bb7930 items=0 ppid=3195 pid=3201 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=33 comm="load_policy" exe="/usr/sbin/load_policy" subj=unconfined_u:system_r:load_policy_t:s0-s0:c0.c1023 key=(null) >type=CRED_ACQ msg=audit(1414327218.633:1901): pid=3199 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=LOGIN msg=audit(1414327218.634:1902): pid=3199 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=68 res=1 >type=USER_AVC msg=audit(1414327218.801:1903): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='avc: received policyload notice (seqno=22) exe="/usr/lib/systemd/systemd" sauid=0 hostname=? addr=? terminal=?' >type=USER_AVC msg=audit(1414327218.801:1904): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='avc: received policyload notice (seqno=23) exe="/usr/lib/systemd/systemd" sauid=0 hostname=? addr=? terminal=?' >type=USER_AVC msg=audit(1414327218.801:1905): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='avc: received policyload notice (seqno=24) exe="/usr/lib/systemd/systemd" sauid=0 hostname=? addr=? terminal=?' >type=USER_ROLE_CHANGE msg=audit(1414327219.071:1906): pid=3199 uid=0 auid=0 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=USER_START msg=audit(1414327219.450:1907): pid=3199 uid=0 auid=0 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1414327219.817:1908): pid=3199 uid=0 auid=0 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=USER_START msg=audit(1414327220.179:1909): pid=3199 uid=0 auid=0 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327220.180:1910): pid=3223 uid=0 auid=0 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=3223 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327220.180:1911): pid=3223 uid=0 auid=0 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=3223 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRED_REFR msg=audit(1414327220.542:1912): pid=3223 uid=0 auid=0 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=USER_END msg=audit(1414327220.918:1913): pid=3199 uid=0 auid=0 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=CRED_DISP msg=audit(1414327221.280:1914): pid=3199 uid=0 auid=0 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=USER_END msg=audit(1414327221.642:1915): pid=3199 uid=0 auid=0 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1414327222.004:1916): pid=3199 uid=0 auid=0 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327222.004:1917): pid=3199 uid=0 auid=0 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=3199 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327222.004:1918): pid=3199 uid=0 auid=0 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=3199 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327222.005:1919): pid=3199 uid=0 auid=0 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=3199 suid=0 rport=50024 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=NETFILTER_CFG msg=audit(1414327222.977:1920): table=filter family=2 entries=0 >type=SYSCALL msg=audit(1414327222.977:1920): arch=c000003e syscall=313 success=yes exit=0 a0=0 a1=7faa56eb8d89 a2=0 a3=0 items=0 ppid=3266 pid=3267 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="modprobe" exe="/usr/bin/kmod" subj=system_u:system_r:insmod_t:s0 key=(null) >type=NETFILTER_CFG msg=audit(1414327222.989:1921): table=filter family=2 entries=4 >type=SYSCALL msg=audit(1414327222.989:1921): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=1e54ca0 items=0 ppid=3256 pid=3264 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=SERVICE_START msg=audit(1414327223.001:1922): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="iptables" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327223.588:1923): pid=3298 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=3298 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327223.588:1924): pid=3298 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=3298 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414327223.589:1925): pid=3297 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=3298 suid=74 rport=59211 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414327223.589:1926): pid=3297 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=3298 suid=74 rport=59211 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327224.128:1927): pid=3297 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=59211 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327224.128:1928): pid=3297 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=e7:e2:3d:94:48:cf:f5:8c:5e:54:98:bd:89:a5:29:a9 rport=59211 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_ACCT msg=audit(1414327224.132:1929): pid=3297 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327224.133:1930): pid=3297 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=3298 suid=74 rport=59211 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327224.134:1931): pid=3297 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1414327224.134:1932): pid=3297 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=LOGIN msg=audit(1414327224.134:1933): pid=3297 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=69 res=1 >type=USER_ROLE_CHANGE msg=audit(1414327224.213:1934): pid=3297 uid=0 auid=0 ses=69 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_START msg=audit(1414327224.256:1935): pid=3297 uid=0 auid=0 ses=69 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1414327224.264:1936): pid=3297 uid=0 auid=0 ses=69 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_START msg=audit(1414327224.264:1937): pid=3297 uid=0 auid=0 ses=69 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327224.266:1938): pid=3300 uid=0 auid=0 ses=69 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=3300 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327224.266:1939): pid=3300 uid=0 auid=0 ses=69 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=3300 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRED_REFR msg=audit(1414327224.267:1940): pid=3300 uid=0 auid=0 ses=69 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_END msg=audit(1414327224.288:1941): pid=3297 uid=0 auid=0 ses=69 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRED_DISP msg=audit(1414327224.288:1942): pid=3297 uid=0 auid=0 ses=69 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_END msg=audit(1414327224.289:1943): pid=3297 uid=0 auid=0 ses=69 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1414327224.289:1944): pid=3297 uid=0 auid=0 ses=69 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327224.289:1945): pid=3297 uid=0 auid=0 ses=69 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=3297 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327224.289:1946): pid=3297 uid=0 auid=0 ses=69 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=3297 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327224.289:1947): pid=3297 uid=0 auid=0 ses=69 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=3297 suid=0 rport=59211 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327224.306:1948): pid=3306 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=3306 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327224.307:1949): pid=3306 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=3306 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414327224.308:1950): pid=3305 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=3306 suid=74 rport=50027 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414327224.308:1951): pid=3305 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=3306 suid=74 rport=50027 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=USER_AUTH msg=audit(1414327224.844:1952): pid=3305 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=50027 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=USER_AUTH msg=audit(1414327224.844:1953): pid=3305 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=e7:e2:3d:94:48:cf:f5:8c:5e:54:98:bd:89:a5:29:a9 rport=50027 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=USER_ACCT msg=audit(1414327225.210:1954): pid=3305 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327225.211:1955): pid=3305 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=3306 suid=74 rport=50027 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=USER_AUTH msg=audit(1414327225.212:1956): pid=3305 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1414327225.573:1957): pid=3305 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=LOGIN msg=audit(1414327225.574:1958): pid=3305 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=70 res=1 >type=USER_ROLE_CHANGE msg=audit(1414327226.005:1959): pid=3305 uid=0 auid=0 ses=70 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=USER_START msg=audit(1414327226.386:1960): pid=3305 uid=0 auid=0 ses=70 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1414327226.753:1961): pid=3305 uid=0 auid=0 ses=70 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=USER_START msg=audit(1414327227.115:1962): pid=3305 uid=0 auid=0 ses=70 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327227.116:1963): pid=3325 uid=0 auid=0 ses=70 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=3325 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327227.116:1964): pid=3325 uid=0 auid=0 ses=70 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=3325 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRED_REFR msg=audit(1414327227.478:1965): pid=3325 uid=0 auid=0 ses=70 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327227.507:1966): pid=3328 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=3328 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327227.507:1967): pid=3328 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=3328 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414327227.508:1968): pid=3327 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=3328 suid=74 rport=59213 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414327227.508:1969): pid=3327 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=3328 suid=74 rport=59213 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_END msg=audit(1414327227.853:1970): pid=3305 uid=0 auid=0 ses=70 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=USER_AUTH msg=audit(1414327228.043:1971): pid=3327 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=59213 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327228.043:1972): pid=3327 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=e7:e2:3d:94:48:cf:f5:8c:5e:54:98:bd:89:a5:29:a9 rport=59213 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_ACCT msg=audit(1414327228.047:1973): pid=3327 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327228.048:1974): pid=3327 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=3328 suid=74 rport=59213 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327228.049:1975): pid=3327 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1414327228.049:1976): pid=3327 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=LOGIN msg=audit(1414327228.049:1977): pid=3327 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=71 res=1 >type=USER_ROLE_CHANGE msg=audit(1414327228.121:1978): pid=3327 uid=0 auid=0 ses=71 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_START msg=audit(1414327228.137:1979): pid=3327 uid=0 auid=0 ses=71 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1414327228.141:1980): pid=3327 uid=0 auid=0 ses=71 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_START msg=audit(1414327228.141:1981): pid=3327 uid=0 auid=0 ses=71 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327228.142:1982): pid=3330 uid=0 auid=0 ses=71 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=3330 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327228.143:1983): pid=3330 uid=0 auid=0 ses=71 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=3330 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRED_REFR msg=audit(1414327228.144:1984): pid=3330 uid=0 auid=0 ses=71 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_END msg=audit(1414327228.159:1985): pid=3327 uid=0 auid=0 ses=71 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRED_DISP msg=audit(1414327228.159:1986): pid=3327 uid=0 auid=0 ses=71 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_END msg=audit(1414327228.160:1987): pid=3327 uid=0 auid=0 ses=71 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1414327228.160:1988): pid=3327 uid=0 auid=0 ses=71 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327228.160:1989): pid=3327 uid=0 auid=0 ses=71 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=3327 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327228.160:1990): pid=3327 uid=0 auid=0 ses=71 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=3327 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327228.160:1991): pid=3327 uid=0 auid=0 ses=71 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=3327 suid=0 rport=59213 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327228.173:1992): pid=3339 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=3339 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327228.173:1993): pid=3339 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=3339 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414327228.174:1994): pid=3338 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=3339 suid=74 rport=50029 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414327228.174:1995): pid=3338 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=3339 suid=74 rport=50029 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRED_DISP msg=audit(1414327228.214:1996): pid=3305 uid=0 auid=0 ses=70 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=USER_END msg=audit(1414327228.576:1997): pid=3305 uid=0 auid=0 ses=70 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=USER_AUTH msg=audit(1414327228.705:1998): pid=3338 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=50029 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=USER_AUTH msg=audit(1414327228.705:1999): pid=3338 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=e7:e2:3d:94:48:cf:f5:8c:5e:54:98:bd:89:a5:29:a9 rport=50029 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=USER_LOGOUT msg=audit(1414327228.936:2000): pid=3305 uid=0 auid=0 ses=70 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327228.936:2001): pid=3305 uid=0 auid=0 ses=70 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=3305 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327228.936:2002): pid=3305 uid=0 auid=0 ses=70 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=3305 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327228.936:2003): pid=3305 uid=0 auid=0 ses=70 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=3305 suid=0 rport=50027 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=USER_ACCT msg=audit(1414327229.071:2004): pid=3338 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327229.071:2005): pid=3338 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=3339 suid=74 rport=50029 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=USER_AUTH msg=audit(1414327229.072:2006): pid=3338 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1414327229.436:2007): pid=3338 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=LOGIN msg=audit(1414327229.436:2008): pid=3338 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=72 res=1 >type=USER_ROLE_CHANGE msg=audit(1414327229.872:2009): pid=3338 uid=0 auid=0 ses=72 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=USER_START msg=audit(1414327230.253:2010): pid=3338 uid=0 auid=0 ses=72 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1414327230.616:2011): pid=3338 uid=0 auid=0 ses=72 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=USER_START msg=audit(1414327230.976:2012): pid=3338 uid=0 auid=0 ses=72 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327230.976:2013): pid=3379 uid=0 auid=0 ses=72 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=3379 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327230.976:2014): pid=3379 uid=0 auid=0 ses=72 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=3379 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRED_REFR msg=audit(1414327231.338:2015): pid=3379 uid=0 auid=0 ses=72 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327231.366:2016): pid=3484 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=3484 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327231.366:2017): pid=3484 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=3484 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414327231.367:2018): pid=3483 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=3484 suid=74 rport=59220 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414327231.368:2019): pid=3483 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=3484 suid=74 rport=59220 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_END msg=audit(1414327231.710:2020): pid=3338 uid=0 auid=0 ses=72 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=NETFILTER_CFG msg=audit(1414327231.748:2021): table=filter family=2 entries=0 >type=SYSCALL msg=audit(1414327231.748:2021): arch=c000003e syscall=272 success=yes exit=0 a0=40000000 a1=c0 a2=0 a3=7fff8c597ae0 items=0 ppid=3496 pid=3503 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=71 comm="ip" exe="/usr/sbin/ip" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null) >type=USER_AUTH msg=audit(1414327231.903:2022): pid=3483 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=59220 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327231.903:2023): pid=3483 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=e7:e2:3d:94:48:cf:f5:8c:5e:54:98:bd:89:a5:29:a9 rport=59220 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_ACCT msg=audit(1414327231.907:2024): pid=3483 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327231.908:2025): pid=3483 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=3484 suid=74 rport=59220 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327231.909:2026): pid=3483 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1414327231.909:2027): pid=3483 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=LOGIN msg=audit(1414327231.909:2028): pid=3483 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=73 res=1 >type=USER_ROLE_CHANGE msg=audit(1414327232.006:2029): pid=3483 uid=0 auid=0 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_START msg=audit(1414327232.022:2030): pid=3483 uid=0 auid=0 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1414327232.026:2031): pid=3483 uid=0 auid=0 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_START msg=audit(1414327232.026:2032): pid=3483 uid=0 auid=0 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327232.027:2033): pid=3514 uid=0 auid=0 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=3514 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327232.028:2034): pid=3514 uid=0 auid=0 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=3514 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRED_REFR msg=audit(1414327232.028:2035): pid=3514 uid=0 auid=0 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_END msg=audit(1414327232.044:2036): pid=3483 uid=0 auid=0 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRED_DISP msg=audit(1414327232.044:2037): pid=3483 uid=0 auid=0 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_END msg=audit(1414327232.045:2038): pid=3483 uid=0 auid=0 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1414327232.045:2039): pid=3483 uid=0 auid=0 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327232.045:2040): pid=3483 uid=0 auid=0 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=3483 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327232.045:2041): pid=3483 uid=0 auid=0 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=3483 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327232.045:2042): pid=3483 uid=0 auid=0 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=3483 suid=0 rport=59220 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRED_DISP msg=audit(1414327232.072:2043): pid=3338 uid=0 auid=0 ses=72 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=NETFILTER_CFG msg=audit(1414327231.810:2044): table=filter family=2 entries=0 >type=SYSCALL msg=audit(1414327231.810:2044): arch=c000003e syscall=272 success=yes exit=0 a0=40000000 a1=c0 a2=0 a3=7fff8488ff00 items=0 ppid=3496 pid=3510 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=71 comm="ip" exe="/usr/sbin/ip" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null) >type=NETFILTER_CFG msg=audit(1414327232.147:2045): table=filter family=2 entries=0 >type=SYSCALL msg=audit(1414327232.147:2045): arch=c000003e syscall=272 success=yes exit=0 a0=40000000 a1=c0 a2=0 a3=7fff3a99a5f0 items=0 ppid=3496 pid=3517 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=71 comm="ip" exe="/usr/sbin/ip" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null) >type=USER_END msg=audit(1414327232.432:2046): pid=3338 uid=0 auid=0 ses=72 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1414327232.793:2047): pid=3338 uid=0 auid=0 ses=72 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327232.793:2048): pid=3338 uid=0 auid=0 ses=72 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=3338 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327232.793:2049): pid=3338 uid=0 auid=0 ses=72 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=3338 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327232.793:2050): pid=3338 uid=0 auid=0 ses=72 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=3338 suid=0 rport=50029 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=NETFILTER_CFG msg=audit(1414327235.058:2051): table=filter family=2 entries=10 >type=SYSCALL msg=audit(1414327235.058:2051): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=1a8a3b0 items=0 ppid=3335 pid=3685 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=71 comm="iptables" exe="/usr/sbin/xtables-multi" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null) >type=CRYPTO_KEY_USER msg=audit(1414327235.063:2052): pid=3698 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=3698 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327235.064:2053): pid=3698 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=3698 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414327235.065:2054): pid=3692 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=3698 suid=74 rport=50048 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414327235.065:2055): pid=3692 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=3698 suid=74 rport=50048 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=NETFILTER_CFG msg=audit(1414327235.196:2056): table=filter family=2 entries=0 >type=SYSCALL msg=audit(1414327235.196:2056): arch=c000003e syscall=272 success=yes exit=0 a0=40000000 a1=c0 a2=0 a3=7fff224c88f0 items=0 ppid=3732 pid=3745 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=72 comm="ip" exe="/usr/sbin/ip" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null) >type=NETFILTER_CFG msg=audit(1414327235.256:2057): table=filter family=2 entries=0 >type=SYSCALL msg=audit(1414327235.256:2057): arch=c000003e syscall=272 success=yes exit=0 a0=40000000 a1=c0 a2=0 a3=7fff0bddee50 items=0 ppid=3732 pid=3749 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=72 comm="ip" exe="/usr/sbin/ip" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null) >type=NETFILTER_CFG msg=audit(1414327235.570:2058): table=filter family=2 entries=0 >type=SYSCALL msg=audit(1414327235.570:2058): arch=c000003e syscall=272 success=yes exit=0 a0=40000000 a1=c0 a2=0 a3=7fff22c7f710 items=0 ppid=3732 pid=3751 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=72 comm="ip" exe="/usr/sbin/ip" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null) >type=USER_AUTH msg=audit(1414327235.597:2059): pid=3692 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=50048 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=USER_AUTH msg=audit(1414327235.597:2060): pid=3692 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=e7:e2:3d:94:48:cf:f5:8c:5e:54:98:bd:89:a5:29:a9 rport=50048 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=USER_ACCT msg=audit(1414327235.962:2061): pid=3692 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327235.963:2062): pid=3692 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=3698 suid=74 rport=50048 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=USER_AUTH msg=audit(1414327235.965:2063): pid=3692 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1414327236.325:2064): pid=3692 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=LOGIN msg=audit(1414327236.325:2065): pid=3692 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=74 res=1 >type=USER_ROLE_CHANGE msg=audit(1414327236.763:2066): pid=3692 uid=0 auid=0 ses=74 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=USER_START msg=audit(1414327237.142:2067): pid=3692 uid=0 auid=0 ses=74 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1414327237.506:2068): pid=3692 uid=0 auid=0 ses=74 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=USER_START msg=audit(1414327237.868:2069): pid=3692 uid=0 auid=0 ses=74 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327237.869:2070): pid=3788 uid=0 auid=0 ses=74 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=3788 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327237.869:2071): pid=3788 uid=0 auid=0 ses=74 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=3788 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRED_REFR msg=audit(1414327238.231:2072): pid=3788 uid=0 auid=0 ses=74 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=USER_END msg=audit(1414327238.610:2073): pid=3692 uid=0 auid=0 ses=74 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=CRED_DISP msg=audit(1414327238.971:2074): pid=3692 uid=0 auid=0 ses=74 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=NETFILTER_CFG msg=audit(1414327239.150:2075): table=filter family=2 entries=11 >type=SYSCALL msg=audit(1414327239.150:2075): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=1fb5800 items=0 ppid=3478 pid=3799 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=72 comm="iptables" exe="/usr/sbin/xtables-multi" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null) >type=USER_END msg=audit(1414327239.333:2076): pid=3692 uid=0 auid=0 ses=74 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1414327239.694:2077): pid=3692 uid=0 auid=0 ses=74 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327239.694:2078): pid=3692 uid=0 auid=0 ses=74 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=3692 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327239.694:2079): pid=3692 uid=0 auid=0 ses=74 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=3692 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327239.695:2080): pid=3692 uid=0 auid=0 ses=74 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=3692 suid=0 rport=50048 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327241.273:2081): pid=3842 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=3842 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327241.273:2082): pid=3842 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=3842 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414327241.274:2083): pid=3841 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=3842 suid=74 rport=59235 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414327241.274:2084): pid=3841 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=3842 suid=74 rport=59235 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327241.809:2085): pid=3841 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=59235 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327241.809:2086): pid=3841 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=e7:e2:3d:94:48:cf:f5:8c:5e:54:98:bd:89:a5:29:a9 rport=59235 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_ACCT msg=audit(1414327241.813:2087): pid=3841 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327241.814:2088): pid=3841 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=3842 suid=74 rport=59235 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327241.814:2089): pid=3841 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1414327241.815:2090): pid=3841 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=LOGIN msg=audit(1414327241.815:2091): pid=3841 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=75 res=1 >type=USER_ROLE_CHANGE msg=audit(1414327241.886:2092): pid=3841 uid=0 auid=0 ses=75 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_START msg=audit(1414327241.901:2093): pid=3841 uid=0 auid=0 ses=75 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1414327241.905:2094): pid=3841 uid=0 auid=0 ses=75 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_START msg=audit(1414327241.905:2095): pid=3841 uid=0 auid=0 ses=75 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327241.907:2096): pid=3844 uid=0 auid=0 ses=75 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=3844 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327241.907:2097): pid=3844 uid=0 auid=0 ses=75 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=3844 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRED_REFR msg=audit(1414327241.908:2098): pid=3844 uid=0 auid=0 ses=75 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_END msg=audit(1414327241.922:2099): pid=3841 uid=0 auid=0 ses=75 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRED_DISP msg=audit(1414327241.922:2100): pid=3841 uid=0 auid=0 ses=75 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_END msg=audit(1414327241.922:2101): pid=3841 uid=0 auid=0 ses=75 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1414327241.923:2102): pid=3841 uid=0 auid=0 ses=75 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327241.923:2103): pid=3841 uid=0 auid=0 ses=75 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=3841 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327241.923:2104): pid=3841 uid=0 auid=0 ses=75 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=3841 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327241.923:2105): pid=3841 uid=0 auid=0 ses=75 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=3841 suid=0 rport=59235 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327244.941:2106): pid=3854 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=3854 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327244.941:2107): pid=3854 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=3854 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414327244.942:2108): pid=3853 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=3854 suid=74 rport=50055 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414327244.943:2109): pid=3853 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=3854 suid=74 rport=50055 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=USER_AUTH msg=audit(1414327245.476:2110): pid=3853 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=50055 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=USER_AUTH msg=audit(1414327245.476:2111): pid=3853 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=e7:e2:3d:94:48:cf:f5:8c:5e:54:98:bd:89:a5:29:a9 rport=50055 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=USER_ACCT msg=audit(1414327245.842:2112): pid=3853 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327245.842:2113): pid=3853 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=3854 suid=74 rport=50055 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=USER_AUTH msg=audit(1414327245.843:2114): pid=3853 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1414327246.205:2115): pid=3853 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=LOGIN msg=audit(1414327246.205:2116): pid=3853 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=76 res=1 >type=USER_ROLE_CHANGE msg=audit(1414327246.638:2117): pid=3853 uid=0 auid=0 ses=76 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=USER_START msg=audit(1414327247.019:2118): pid=3853 uid=0 auid=0 ses=76 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1414327247.388:2119): pid=3853 uid=0 auid=0 ses=76 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=USER_START msg=audit(1414327247.749:2120): pid=3853 uid=0 auid=0 ses=76 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327247.751:2121): pid=3865 uid=0 auid=0 ses=76 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=3865 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327247.751:2122): pid=3865 uid=0 auid=0 ses=76 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=3865 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRED_REFR msg=audit(1414327248.114:2123): pid=3865 uid=0 auid=0 ses=76 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=USER_END msg=audit(1414327248.493:2124): pid=3853 uid=0 auid=0 ses=76 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=CRED_DISP msg=audit(1414327248.857:2125): pid=3853 uid=0 auid=0 ses=76 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=USER_END msg=audit(1414327249.218:2126): pid=3853 uid=0 auid=0 ses=76 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1414327249.582:2127): pid=3853 uid=0 auid=0 ses=76 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327249.582:2128): pid=3853 uid=0 auid=0 ses=76 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=3853 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327249.582:2129): pid=3853 uid=0 auid=0 ses=76 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=3853 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327249.582:2130): pid=3853 uid=0 auid=0 ses=76 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=3853 suid=0 rport=50055 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327251.153:2131): pid=3874 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=3874 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327251.153:2132): pid=3874 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=3874 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414327251.154:2133): pid=3873 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=3874 suid=74 rport=59253 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414327251.154:2134): pid=3873 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=3874 suid=74 rport=59253 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327251.691:2135): pid=3873 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=59253 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327251.691:2136): pid=3873 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=e7:e2:3d:94:48:cf:f5:8c:5e:54:98:bd:89:a5:29:a9 rport=59253 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_ACCT msg=audit(1414327251.695:2137): pid=3873 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327251.696:2138): pid=3873 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=3874 suid=74 rport=59253 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327251.696:2139): pid=3873 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1414327251.697:2140): pid=3873 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=LOGIN msg=audit(1414327251.697:2141): pid=3873 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=77 res=1 >type=USER_ROLE_CHANGE msg=audit(1414327251.768:2142): pid=3873 uid=0 auid=0 ses=77 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_START msg=audit(1414327251.784:2143): pid=3873 uid=0 auid=0 ses=77 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1414327251.789:2144): pid=3873 uid=0 auid=0 ses=77 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_START msg=audit(1414327251.789:2145): pid=3873 uid=0 auid=0 ses=77 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327251.791:2146): pid=3876 uid=0 auid=0 ses=77 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=3876 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327251.791:2147): pid=3876 uid=0 auid=0 ses=77 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=3876 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRED_REFR msg=audit(1414327251.792:2148): pid=3876 uid=0 auid=0 ses=77 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_END msg=audit(1414327251.807:2149): pid=3873 uid=0 auid=0 ses=77 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRED_DISP msg=audit(1414327251.808:2150): pid=3873 uid=0 auid=0 ses=77 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_END msg=audit(1414327251.808:2151): pid=3873 uid=0 auid=0 ses=77 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1414327251.808:2152): pid=3873 uid=0 auid=0 ses=77 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327251.808:2153): pid=3873 uid=0 auid=0 ses=77 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=3873 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327251.809:2154): pid=3873 uid=0 auid=0 ses=77 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=3873 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327251.809:2155): pid=3873 uid=0 auid=0 ses=77 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=3873 suid=0 rport=59253 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327254.829:2156): pid=3882 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=3882 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327254.829:2157): pid=3882 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=3882 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414327254.830:2158): pid=3881 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=3882 suid=74 rport=50071 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414327254.830:2159): pid=3881 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=3882 suid=74 rport=50071 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=USER_AUTH msg=audit(1414327255.365:2160): pid=3881 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=50071 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=USER_AUTH msg=audit(1414327255.365:2161): pid=3881 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=e7:e2:3d:94:48:cf:f5:8c:5e:54:98:bd:89:a5:29:a9 rport=50071 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=USER_ACCT msg=audit(1414327255.732:2162): pid=3881 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327255.733:2163): pid=3881 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=3882 suid=74 rport=50071 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=USER_AUTH msg=audit(1414327255.735:2164): pid=3881 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1414327256.097:2165): pid=3881 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=LOGIN msg=audit(1414327256.097:2166): pid=3881 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=78 res=1 >type=USER_ROLE_CHANGE msg=audit(1414327256.532:2167): pid=3881 uid=0 auid=0 ses=78 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=USER_START msg=audit(1414327256.912:2168): pid=3881 uid=0 auid=0 ses=78 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1414327257.278:2169): pid=3881 uid=0 auid=0 ses=78 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=USER_START msg=audit(1414327257.639:2170): pid=3881 uid=0 auid=0 ses=78 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327257.641:2171): pid=3884 uid=0 auid=0 ses=78 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=3884 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327257.641:2172): pid=3884 uid=0 auid=0 ses=78 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=3884 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRED_REFR msg=audit(1414327258.003:2173): pid=3884 uid=0 auid=0 ses=78 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=USER_END msg=audit(1414327258.383:2174): pid=3881 uid=0 auid=0 ses=78 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=CRED_DISP msg=audit(1414327258.745:2175): pid=3881 uid=0 auid=0 ses=78 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=USER_END msg=audit(1414327259.108:2176): pid=3881 uid=0 auid=0 ses=78 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1414327259.469:2177): pid=3881 uid=0 auid=0 ses=78 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327259.469:2178): pid=3881 uid=0 auid=0 ses=78 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=3881 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327259.469:2179): pid=3881 uid=0 auid=0 ses=78 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=3881 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327259.469:2180): pid=3881 uid=0 auid=0 ses=78 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=3881 suid=0 rport=50071 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327261.041:2181): pid=3894 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=3894 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327261.042:2182): pid=3894 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=3894 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414327261.043:2183): pid=3893 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=3894 suid=74 rport=59261 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414327261.043:2184): pid=3893 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=3894 suid=74 rport=59261 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327261.583:2185): pid=3893 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=59261 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327261.583:2186): pid=3893 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=e7:e2:3d:94:48:cf:f5:8c:5e:54:98:bd:89:a5:29:a9 rport=59261 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_ACCT msg=audit(1414327261.588:2187): pid=3893 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327261.589:2188): pid=3893 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=3894 suid=74 rport=59261 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327261.590:2189): pid=3893 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1414327261.590:2190): pid=3893 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=LOGIN msg=audit(1414327261.590:2191): pid=3893 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=79 res=1 >type=USER_ROLE_CHANGE msg=audit(1414327261.666:2192): pid=3893 uid=0 auid=0 ses=79 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_START msg=audit(1414327261.683:2193): pid=3893 uid=0 auid=0 ses=79 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1414327261.687:2194): pid=3893 uid=0 auid=0 ses=79 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_START msg=audit(1414327261.688:2195): pid=3893 uid=0 auid=0 ses=79 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327261.689:2196): pid=3896 uid=0 auid=0 ses=79 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=3896 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327261.690:2197): pid=3896 uid=0 auid=0 ses=79 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=3896 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRED_REFR msg=audit(1414327261.691:2198): pid=3896 uid=0 auid=0 ses=79 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_END msg=audit(1414327261.708:2199): pid=3893 uid=0 auid=0 ses=79 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRED_DISP msg=audit(1414327261.708:2200): pid=3893 uid=0 auid=0 ses=79 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_END msg=audit(1414327261.708:2201): pid=3893 uid=0 auid=0 ses=79 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1414327261.708:2202): pid=3893 uid=0 auid=0 ses=79 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327261.708:2203): pid=3893 uid=0 auid=0 ses=79 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=3893 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327261.709:2204): pid=3893 uid=0 auid=0 ses=79 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=3893 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327261.709:2205): pid=3893 uid=0 auid=0 ses=79 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=3893 suid=0 rport=59261 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327264.729:2206): pid=3904 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=3904 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327264.729:2207): pid=3904 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=3904 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414327264.731:2208): pid=3903 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=3904 suid=74 rport=50077 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414327264.731:2209): pid=3903 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=3904 suid=74 rport=50077 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=USER_AUTH msg=audit(1414327265.265:2210): pid=3903 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=50077 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=USER_AUTH msg=audit(1414327265.265:2211): pid=3903 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=e7:e2:3d:94:48:cf:f5:8c:5e:54:98:bd:89:a5:29:a9 rport=50077 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=USER_ACCT msg=audit(1414327265.631:2212): pid=3903 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327265.632:2213): pid=3903 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=3904 suid=74 rport=50077 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=USER_AUTH msg=audit(1414327265.633:2214): pid=3903 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1414327265.995:2215): pid=3903 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=LOGIN msg=audit(1414327265.995:2216): pid=3903 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=80 res=1 >type=USER_ROLE_CHANGE msg=audit(1414327266.433:2217): pid=3903 uid=0 auid=0 ses=80 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=USER_START msg=audit(1414327266.815:2218): pid=3903 uid=0 auid=0 ses=80 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1414327267.180:2219): pid=3903 uid=0 auid=0 ses=80 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=USER_START msg=audit(1414327267.541:2220): pid=3903 uid=0 auid=0 ses=80 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327267.543:2221): pid=3906 uid=0 auid=0 ses=80 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=3906 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327267.543:2222): pid=3906 uid=0 auid=0 ses=80 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=3906 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRED_REFR msg=audit(1414327267.905:2223): pid=3906 uid=0 auid=0 ses=80 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=USER_END msg=audit(1414327268.283:2224): pid=3903 uid=0 auid=0 ses=80 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=CRED_DISP msg=audit(1414327268.646:2225): pid=3903 uid=0 auid=0 ses=80 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327270.943:2226): pid=3911 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=3911 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327270.943:2227): pid=3911 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=3911 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414327270.944:2228): pid=3910 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=3911 suid=74 rport=59264 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414327270.944:2229): pid=3910 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=3911 suid=74 rport=59264 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327271.481:2230): pid=3910 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=59264 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327271.481:2231): pid=3910 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=e7:e2:3d:94:48:cf:f5:8c:5e:54:98:bd:89:a5:29:a9 rport=59264 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_ACCT msg=audit(1414327271.485:2232): pid=3910 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327271.486:2233): pid=3910 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=3911 suid=74 rport=59264 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327271.487:2234): pid=3910 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1414327271.487:2235): pid=3910 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=LOGIN msg=audit(1414327271.487:2236): pid=3910 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=81 res=1 >type=USER_ROLE_CHANGE msg=audit(1414327271.558:2237): pid=3910 uid=0 auid=0 ses=81 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_START msg=audit(1414327271.575:2238): pid=3910 uid=0 auid=0 ses=81 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1414327271.579:2239): pid=3910 uid=0 auid=0 ses=81 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_START msg=audit(1414327271.580:2240): pid=3910 uid=0 auid=0 ses=81 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327271.581:2241): pid=3913 uid=0 auid=0 ses=81 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=3913 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327271.581:2242): pid=3913 uid=0 auid=0 ses=81 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=3913 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRED_REFR msg=audit(1414327271.582:2243): pid=3913 uid=0 auid=0 ses=81 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_END msg=audit(1414327271.591:2244): pid=3910 uid=0 auid=0 ses=81 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1414327271.591:2245): pid=3910 uid=0 auid=0 ses=81 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_END msg=audit(1414327271.596:2246): pid=3910 uid=0 auid=0 ses=81 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRED_DISP msg=audit(1414327271.596:2247): pid=3910 uid=0 auid=0 ses=81 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327271.596:2248): pid=3910 uid=0 auid=0 ses=81 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=3910 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327271.596:2249): pid=3910 uid=0 auid=0 ses=81 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=3910 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327271.596:2250): pid=3910 uid=0 auid=0 ses=81 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=3910 suid=0 rport=59264 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_END msg=audit(1414327274.372:2251): pid=3903 uid=0 auid=0 ses=80 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327274.617:2252): pid=3921 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=3921 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327274.617:2253): pid=3921 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=3921 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414327274.619:2254): pid=3920 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=3921 suid=74 rport=50081 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414327274.619:2255): pid=3920 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=3921 suid=74 rport=50081 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=USER_LOGOUT msg=audit(1414327275.091:2256): pid=3903 uid=0 auid=0 ses=80 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327275.092:2257): pid=3903 uid=0 auid=0 ses=80 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=3903 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327275.092:2258): pid=3903 uid=0 auid=0 ses=80 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=3903 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327275.092:2259): pid=3903 uid=0 auid=0 ses=80 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=3903 suid=0 rport=50077 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=USER_AUTH msg=audit(1414327275.150:2260): pid=3920 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=50081 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=USER_AUTH msg=audit(1414327275.150:2261): pid=3920 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=e7:e2:3d:94:48:cf:f5:8c:5e:54:98:bd:89:a5:29:a9 rport=50081 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=USER_ACCT msg=audit(1414327275.519:2262): pid=3920 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327275.519:2263): pid=3920 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=3921 suid=74 rport=50081 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=USER_AUTH msg=audit(1414327275.521:2264): pid=3920 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1414327275.883:2265): pid=3920 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=LOGIN msg=audit(1414327275.883:2266): pid=3920 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=82 res=1 >type=USER_ROLE_CHANGE msg=audit(1414327276.319:2267): pid=3920 uid=0 auid=0 ses=82 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=USER_START msg=audit(1414327276.697:2268): pid=3920 uid=0 auid=0 ses=82 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1414327277.062:2269): pid=3920 uid=0 auid=0 ses=82 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=USER_START msg=audit(1414327277.423:2270): pid=3920 uid=0 auid=0 ses=82 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327277.426:2271): pid=3926 uid=0 auid=0 ses=82 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=3926 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327277.426:2272): pid=3926 uid=0 auid=0 ses=82 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=3926 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRED_REFR msg=audit(1414327277.789:2273): pid=3926 uid=0 auid=0 ses=82 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=USER_END msg=audit(1414327278.167:2274): pid=3920 uid=0 auid=0 ses=82 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=CRED_DISP msg=audit(1414327278.528:2275): pid=3920 uid=0 auid=0 ses=82 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=USER_END msg=audit(1414327278.889:2276): pid=3920 uid=0 auid=0 ses=82 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1414327279.249:2277): pid=3920 uid=0 auid=0 ses=82 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327279.249:2278): pid=3920 uid=0 auid=0 ses=82 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=3920 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327279.249:2279): pid=3920 uid=0 auid=0 ses=82 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=3920 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327279.249:2280): pid=3920 uid=0 auid=0 ses=82 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=3920 suid=0 rport=50081 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327280.827:2281): pid=3934 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=3934 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327280.827:2282): pid=3934 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=3934 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414327280.828:2283): pid=3933 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=3934 suid=74 rport=59270 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414327280.828:2284): pid=3933 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=3934 suid=74 rport=59270 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327281.364:2285): pid=3933 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=59270 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327281.365:2286): pid=3933 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=e7:e2:3d:94:48:cf:f5:8c:5e:54:98:bd:89:a5:29:a9 rport=59270 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_ACCT msg=audit(1414327281.368:2287): pid=3933 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327281.369:2288): pid=3933 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=3934 suid=74 rport=59270 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327281.370:2289): pid=3933 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1414327281.370:2290): pid=3933 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=LOGIN msg=audit(1414327281.370:2291): pid=3933 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=83 res=1 >type=USER_ROLE_CHANGE msg=audit(1414327281.443:2292): pid=3933 uid=0 auid=0 ses=83 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_START msg=audit(1414327281.460:2293): pid=3933 uid=0 auid=0 ses=83 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1414327281.464:2294): pid=3933 uid=0 auid=0 ses=83 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_START msg=audit(1414327281.464:2295): pid=3933 uid=0 auid=0 ses=83 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327281.465:2296): pid=3936 uid=0 auid=0 ses=83 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=3936 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327281.466:2297): pid=3936 uid=0 auid=0 ses=83 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=3936 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRED_REFR msg=audit(1414327281.466:2298): pid=3936 uid=0 auid=0 ses=83 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_END msg=audit(1414327281.482:2299): pid=3933 uid=0 auid=0 ses=83 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRED_DISP msg=audit(1414327281.482:2300): pid=3933 uid=0 auid=0 ses=83 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_END msg=audit(1414327281.482:2301): pid=3933 uid=0 auid=0 ses=83 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1414327281.483:2302): pid=3933 uid=0 auid=0 ses=83 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327281.483:2303): pid=3933 uid=0 auid=0 ses=83 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=3933 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327281.483:2304): pid=3933 uid=0 auid=0 ses=83 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=3933 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327281.483:2305): pid=3933 uid=0 auid=0 ses=83 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=3933 suid=0 rport=59270 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327284.510:2306): pid=3942 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=3942 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327284.511:2307): pid=3942 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=3942 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414327284.512:2308): pid=3941 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=3942 suid=74 rport=50088 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414327284.512:2309): pid=3941 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=3942 suid=74 rport=50088 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=USER_AUTH msg=audit(1414327285.051:2310): pid=3941 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=50088 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=USER_AUTH msg=audit(1414327285.051:2311): pid=3941 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=e7:e2:3d:94:48:cf:f5:8c:5e:54:98:bd:89:a5:29:a9 rport=50088 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=USER_ACCT msg=audit(1414327285.416:2312): pid=3941 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327285.417:2313): pid=3941 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=3942 suid=74 rport=50088 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=USER_AUTH msg=audit(1414327285.418:2314): pid=3941 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1414327285.779:2315): pid=3941 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=LOGIN msg=audit(1414327285.779:2316): pid=3941 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=84 res=1 >type=USER_ROLE_CHANGE msg=audit(1414327286.217:2317): pid=3941 uid=0 auid=0 ses=84 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=USER_START msg=audit(1414327286.602:2318): pid=3941 uid=0 auid=0 ses=84 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1414327286.974:2319): pid=3941 uid=0 auid=0 ses=84 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=USER_START msg=audit(1414327287.337:2320): pid=3941 uid=0 auid=0 ses=84 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327287.339:2321): pid=3946 uid=0 auid=0 ses=84 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=3946 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327287.340:2322): pid=3946 uid=0 auid=0 ses=84 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=3946 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRED_REFR msg=audit(1414327287.701:2323): pid=3946 uid=0 auid=0 ses=84 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=USER_END msg=audit(1414327288.079:2324): pid=3941 uid=0 auid=0 ses=84 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=CRED_DISP msg=audit(1414327288.441:2325): pid=3941 uid=0 auid=0 ses=84 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=USER_END msg=audit(1414327288.802:2326): pid=3941 uid=0 auid=0 ses=84 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1414327289.162:2327): pid=3941 uid=0 auid=0 ses=84 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327289.162:2328): pid=3941 uid=0 auid=0 ses=84 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=3941 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327289.162:2329): pid=3941 uid=0 auid=0 ses=84 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=3941 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327289.162:2330): pid=3941 uid=0 auid=0 ses=84 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=3941 suid=0 rport=50088 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327290.738:2331): pid=3952 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=3952 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327290.739:2332): pid=3952 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=3952 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414327290.740:2333): pid=3951 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=3952 suid=74 rport=59280 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414327290.740:2334): pid=3951 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=3952 suid=74 rport=59280 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327291.274:2335): pid=3951 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=59280 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327291.274:2336): pid=3951 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=e7:e2:3d:94:48:cf:f5:8c:5e:54:98:bd:89:a5:29:a9 rport=59280 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_ACCT msg=audit(1414327291.278:2337): pid=3951 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327291.279:2338): pid=3951 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=3952 suid=74 rport=59280 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327291.279:2339): pid=3951 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1414327291.280:2340): pid=3951 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=LOGIN msg=audit(1414327291.280:2341): pid=3951 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=85 res=1 >type=USER_ROLE_CHANGE msg=audit(1414327291.351:2342): pid=3951 uid=0 auid=0 ses=85 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_START msg=audit(1414327291.367:2343): pid=3951 uid=0 auid=0 ses=85 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1414327291.370:2344): pid=3951 uid=0 auid=0 ses=85 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_START msg=audit(1414327291.370:2345): pid=3951 uid=0 auid=0 ses=85 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327291.372:2346): pid=3954 uid=0 auid=0 ses=85 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=3954 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327291.372:2347): pid=3954 uid=0 auid=0 ses=85 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=3954 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRED_REFR msg=audit(1414327291.373:2348): pid=3954 uid=0 auid=0 ses=85 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_END msg=audit(1414327291.386:2349): pid=3951 uid=0 auid=0 ses=85 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRED_DISP msg=audit(1414327291.386:2350): pid=3951 uid=0 auid=0 ses=85 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_END msg=audit(1414327291.387:2351): pid=3951 uid=0 auid=0 ses=85 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1414327291.387:2352): pid=3951 uid=0 auid=0 ses=85 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327291.387:2353): pid=3951 uid=0 auid=0 ses=85 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=3951 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327291.387:2354): pid=3951 uid=0 auid=0 ses=85 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=3951 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327291.387:2355): pid=3951 uid=0 auid=0 ses=85 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=3951 suid=0 rport=59280 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327294.418:2356): pid=3960 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=3960 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327294.418:2357): pid=3960 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=3960 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414327294.419:2358): pid=3959 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=3960 suid=74 rport=50100 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414327294.419:2359): pid=3959 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=3960 suid=74 rport=50100 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=USER_AUTH msg=audit(1414327294.954:2360): pid=3959 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=50100 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=USER_AUTH msg=audit(1414327294.954:2361): pid=3959 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=e7:e2:3d:94:48:cf:f5:8c:5e:54:98:bd:89:a5:29:a9 rport=50100 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=USER_ACCT msg=audit(1414327295.325:2362): pid=3959 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327295.326:2363): pid=3959 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=3960 suid=74 rport=50100 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=USER_AUTH msg=audit(1414327295.329:2364): pid=3959 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1414327295.697:2365): pid=3959 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=LOGIN msg=audit(1414327295.697:2366): pid=3959 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=86 res=1 >type=USER_ROLE_CHANGE msg=audit(1414327296.127:2367): pid=3959 uid=0 auid=0 ses=86 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=USER_START msg=audit(1414327296.508:2368): pid=3959 uid=0 auid=0 ses=86 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1414327296.873:2369): pid=3959 uid=0 auid=0 ses=86 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=USER_START msg=audit(1414327297.234:2370): pid=3959 uid=0 auid=0 ses=86 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327297.236:2371): pid=3962 uid=0 auid=0 ses=86 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=3962 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327297.236:2372): pid=3962 uid=0 auid=0 ses=86 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=3962 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRED_REFR msg=audit(1414327297.597:2373): pid=3962 uid=0 auid=0 ses=86 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=USER_END msg=audit(1414327297.975:2374): pid=3959 uid=0 auid=0 ses=86 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=CRED_DISP msg=audit(1414327298.338:2375): pid=3959 uid=0 auid=0 ses=86 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=USER_END msg=audit(1414327298.706:2376): pid=3959 uid=0 auid=0 ses=86 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1414327299.067:2377): pid=3959 uid=0 auid=0 ses=86 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327299.067:2378): pid=3959 uid=0 auid=0 ses=86 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=3959 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327299.067:2379): pid=3959 uid=0 auid=0 ses=86 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=3959 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327299.067:2380): pid=3959 uid=0 auid=0 ses=86 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=3959 suid=0 rport=50100 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327300.635:2381): pid=3968 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=3968 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327300.635:2382): pid=3968 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=3968 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414327300.637:2383): pid=3967 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=3968 suid=74 rport=59295 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414327300.637:2384): pid=3967 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=3968 suid=74 rport=59295 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327301.176:2385): pid=3967 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=59295 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327301.176:2386): pid=3967 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=e7:e2:3d:94:48:cf:f5:8c:5e:54:98:bd:89:a5:29:a9 rport=59295 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_ACCT msg=audit(1414327301.180:2387): pid=3967 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327301.180:2388): pid=3967 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=3968 suid=74 rport=59295 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327301.182:2389): pid=3967 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1414327301.182:2390): pid=3967 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=LOGIN msg=audit(1414327301.182:2391): pid=3967 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=87 res=1 >type=USER_ROLE_CHANGE msg=audit(1414327301.252:2392): pid=3967 uid=0 auid=0 ses=87 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_START msg=audit(1414327301.268:2393): pid=3967 uid=0 auid=0 ses=87 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1414327301.273:2394): pid=3967 uid=0 auid=0 ses=87 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_START msg=audit(1414327301.273:2395): pid=3967 uid=0 auid=0 ses=87 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327301.274:2396): pid=3970 uid=0 auid=0 ses=87 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=3970 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327301.275:2397): pid=3970 uid=0 auid=0 ses=87 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=3970 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRED_REFR msg=audit(1414327301.275:2398): pid=3970 uid=0 auid=0 ses=87 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_END msg=audit(1414327301.290:2399): pid=3967 uid=0 auid=0 ses=87 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRED_DISP msg=audit(1414327301.290:2400): pid=3967 uid=0 auid=0 ses=87 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_END msg=audit(1414327301.290:2401): pid=3967 uid=0 auid=0 ses=87 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1414327301.291:2402): pid=3967 uid=0 auid=0 ses=87 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327301.291:2403): pid=3967 uid=0 auid=0 ses=87 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=3967 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327301.291:2404): pid=3967 uid=0 auid=0 ses=87 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=3967 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327301.291:2405): pid=3967 uid=0 auid=0 ses=87 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=3967 suid=0 rport=59295 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327304.312:2406): pid=3977 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=3977 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327304.312:2407): pid=3977 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=3977 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414327304.313:2408): pid=3976 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=3977 suid=74 rport=50117 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414327304.313:2409): pid=3976 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=3977 suid=74 rport=50117 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=USER_AUTH msg=audit(1414327304.845:2410): pid=3976 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=50117 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=USER_AUTH msg=audit(1414327304.845:2411): pid=3976 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=e7:e2:3d:94:48:cf:f5:8c:5e:54:98:bd:89:a5:29:a9 rport=50117 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=USER_ACCT msg=audit(1414327305.212:2412): pid=3976 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327305.214:2413): pid=3976 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=3977 suid=74 rport=50117 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=USER_AUTH msg=audit(1414327305.215:2414): pid=3976 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1414327305.577:2415): pid=3976 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=LOGIN msg=audit(1414327305.577:2416): pid=3976 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=88 res=1 >type=USER_ROLE_CHANGE msg=audit(1414327306.012:2417): pid=3976 uid=0 auid=0 ses=88 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=USER_START msg=audit(1414327306.390:2418): pid=3976 uid=0 auid=0 ses=88 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1414327306.753:2419): pid=3976 uid=0 auid=0 ses=88 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=USER_START msg=audit(1414327307.114:2420): pid=3976 uid=0 auid=0 ses=88 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327307.116:2421): pid=3979 uid=0 auid=0 ses=88 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=3979 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327307.116:2422): pid=3979 uid=0 auid=0 ses=88 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=3979 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRED_REFR msg=audit(1414327307.478:2423): pid=3979 uid=0 auid=0 ses=88 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=USER_END msg=audit(1414327307.855:2424): pid=3976 uid=0 auid=0 ses=88 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=CRED_DISP msg=audit(1414327308.217:2425): pid=3976 uid=0 auid=0 ses=88 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=USER_END msg=audit(1414327308.579:2426): pid=3976 uid=0 auid=0 ses=88 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1414327308.939:2427): pid=3976 uid=0 auid=0 ses=88 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327308.939:2428): pid=3976 uid=0 auid=0 ses=88 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=3976 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327308.939:2429): pid=3976 uid=0 auid=0 ses=88 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=3976 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327308.939:2430): pid=3976 uid=0 auid=0 ses=88 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=3976 suid=0 rport=50117 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327310.525:2431): pid=3985 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=3985 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327310.525:2432): pid=3985 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=3985 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414327310.526:2433): pid=3984 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=3985 suid=74 rport=59314 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414327310.526:2434): pid=3984 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=3985 suid=74 rport=59314 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327311.061:2435): pid=3984 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=59314 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327311.062:2436): pid=3984 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=e7:e2:3d:94:48:cf:f5:8c:5e:54:98:bd:89:a5:29:a9 rport=59314 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_ACCT msg=audit(1414327311.066:2437): pid=3984 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327311.066:2438): pid=3984 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=3985 suid=74 rport=59314 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327311.067:2439): pid=3984 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1414327311.067:2440): pid=3984 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=LOGIN msg=audit(1414327311.068:2441): pid=3984 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=89 res=1 >type=USER_ROLE_CHANGE msg=audit(1414327311.138:2442): pid=3984 uid=0 auid=0 ses=89 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_START msg=audit(1414327311.155:2443): pid=3984 uid=0 auid=0 ses=89 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1414327311.159:2444): pid=3984 uid=0 auid=0 ses=89 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_START msg=audit(1414327311.159:2445): pid=3984 uid=0 auid=0 ses=89 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327311.161:2446): pid=3987 uid=0 auid=0 ses=89 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=3987 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327311.161:2447): pid=3987 uid=0 auid=0 ses=89 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=3987 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRED_REFR msg=audit(1414327311.162:2448): pid=3987 uid=0 auid=0 ses=89 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_END msg=audit(1414327311.176:2449): pid=3984 uid=0 auid=0 ses=89 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRED_DISP msg=audit(1414327311.176:2450): pid=3984 uid=0 auid=0 ses=89 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_END msg=audit(1414327311.176:2451): pid=3984 uid=0 auid=0 ses=89 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1414327311.176:2452): pid=3984 uid=0 auid=0 ses=89 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327311.177:2453): pid=3984 uid=0 auid=0 ses=89 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=3984 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327311.177:2454): pid=3984 uid=0 auid=0 ses=89 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=3984 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327311.177:2455): pid=3984 uid=0 auid=0 ses=89 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=3984 suid=0 rport=59314 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327314.198:2456): pid=3993 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=3993 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327314.198:2457): pid=3993 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=3993 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414327314.200:2458): pid=3992 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=3993 suid=74 rport=50136 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414327314.200:2459): pid=3992 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=3993 suid=74 rport=50136 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=USER_AUTH msg=audit(1414327314.735:2460): pid=3992 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=50136 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=USER_AUTH msg=audit(1414327314.735:2461): pid=3992 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=e7:e2:3d:94:48:cf:f5:8c:5e:54:98:bd:89:a5:29:a9 rport=50136 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=USER_ACCT msg=audit(1414327315.106:2462): pid=3992 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327315.113:2463): pid=3992 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=3993 suid=74 rport=50136 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=USER_AUTH msg=audit(1414327315.114:2464): pid=3992 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1414327315.476:2465): pid=3992 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=LOGIN msg=audit(1414327315.476:2466): pid=3992 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=90 res=1 >type=USER_ROLE_CHANGE msg=audit(1414327315.906:2467): pid=3992 uid=0 auid=0 ses=90 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=USER_START msg=audit(1414327316.284:2468): pid=3992 uid=0 auid=0 ses=90 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1414327316.648:2469): pid=3992 uid=0 auid=0 ses=90 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=USER_START msg=audit(1414327317.008:2470): pid=3992 uid=0 auid=0 ses=90 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327317.010:2471): pid=3995 uid=0 auid=0 ses=90 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=3995 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327317.010:2472): pid=3995 uid=0 auid=0 ses=90 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=3995 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRED_REFR msg=audit(1414327317.378:2473): pid=3995 uid=0 auid=0 ses=90 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=USER_END msg=audit(1414327317.754:2474): pid=3992 uid=0 auid=0 ses=90 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=CRED_DISP msg=audit(1414327318.114:2475): pid=3992 uid=0 auid=0 ses=90 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=USER_END msg=audit(1414327318.475:2476): pid=3992 uid=0 auid=0 ses=90 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1414327318.836:2477): pid=3992 uid=0 auid=0 ses=90 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327318.836:2478): pid=3992 uid=0 auid=0 ses=90 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=3992 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327318.836:2479): pid=3992 uid=0 auid=0 ses=90 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=3992 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327318.836:2480): pid=3992 uid=0 auid=0 ses=90 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=3992 suid=0 rport=50136 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327320.415:2481): pid=4003 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=4003 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327320.415:2482): pid=4003 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=4003 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414327320.416:2483): pid=4002 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=4003 suid=74 rport=59328 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414327320.416:2484): pid=4002 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=4003 suid=74 rport=59328 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327320.956:2485): pid=4002 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=59328 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327320.956:2486): pid=4002 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=e7:e2:3d:94:48:cf:f5:8c:5e:54:98:bd:89:a5:29:a9 rport=59328 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_ACCT msg=audit(1414327320.960:2487): pid=4002 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327320.960:2488): pid=4002 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=4003 suid=74 rport=59328 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327320.961:2489): pid=4002 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1414327320.961:2490): pid=4002 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=LOGIN msg=audit(1414327320.961:2491): pid=4002 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=91 res=1 >type=USER_ROLE_CHANGE msg=audit(1414327321.033:2492): pid=4002 uid=0 auid=0 ses=91 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_START msg=audit(1414327321.048:2493): pid=4002 uid=0 auid=0 ses=91 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1414327321.051:2494): pid=4002 uid=0 auid=0 ses=91 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_START msg=audit(1414327321.051:2495): pid=4002 uid=0 auid=0 ses=91 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327321.053:2496): pid=4005 uid=0 auid=0 ses=91 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=4005 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327321.053:2497): pid=4005 uid=0 auid=0 ses=91 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=4005 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRED_REFR msg=audit(1414327321.054:2498): pid=4005 uid=0 auid=0 ses=91 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_END msg=audit(1414327321.068:2499): pid=4002 uid=0 auid=0 ses=91 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRED_DISP msg=audit(1414327321.068:2500): pid=4002 uid=0 auid=0 ses=91 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_END msg=audit(1414327321.068:2501): pid=4002 uid=0 auid=0 ses=91 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1414327321.069:2502): pid=4002 uid=0 auid=0 ses=91 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327321.069:2503): pid=4002 uid=0 auid=0 ses=91 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=4002 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327321.069:2504): pid=4002 uid=0 auid=0 ses=91 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=4002 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327321.069:2505): pid=4002 uid=0 auid=0 ses=91 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=4002 suid=0 rport=59328 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327324.089:2506): pid=4011 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=4011 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327324.089:2507): pid=4011 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=4011 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414327324.090:2508): pid=4010 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=4011 suid=74 rport=50145 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414327324.091:2509): pid=4010 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=4011 suid=74 rport=50145 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=USER_AUTH msg=audit(1414327324.622:2510): pid=4010 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=50145 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=USER_AUTH msg=audit(1414327324.622:2511): pid=4010 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=e7:e2:3d:94:48:cf:f5:8c:5e:54:98:bd:89:a5:29:a9 rport=50145 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=USER_ACCT msg=audit(1414327324.988:2512): pid=4010 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327324.988:2513): pid=4010 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=4011 suid=74 rport=50145 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=USER_AUTH msg=audit(1414327324.989:2514): pid=4010 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1414327325.351:2515): pid=4010 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=LOGIN msg=audit(1414327325.351:2516): pid=4010 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=92 res=1 >type=USER_ROLE_CHANGE msg=audit(1414327325.785:2517): pid=4010 uid=0 auid=0 ses=92 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=USER_START msg=audit(1414327326.161:2518): pid=4010 uid=0 auid=0 ses=92 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1414327326.530:2519): pid=4010 uid=0 auid=0 ses=92 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=USER_START msg=audit(1414327326.896:2520): pid=4010 uid=0 auid=0 ses=92 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327326.898:2521): pid=4013 uid=0 auid=0 ses=92 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=4013 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327326.898:2522): pid=4013 uid=0 auid=0 ses=92 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=4013 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRED_REFR msg=audit(1414327327.261:2523): pid=4013 uid=0 auid=0 ses=92 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=USER_END msg=audit(1414327327.637:2524): pid=4010 uid=0 auid=0 ses=92 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=CRED_DISP msg=audit(1414327327.998:2525): pid=4010 uid=0 auid=0 ses=92 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=USER_END msg=audit(1414327328.360:2526): pid=4010 uid=0 auid=0 ses=92 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1414327328.723:2527): pid=4010 uid=0 auid=0 ses=92 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327328.723:2528): pid=4010 uid=0 auid=0 ses=92 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=4010 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327328.723:2529): pid=4010 uid=0 auid=0 ses=92 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=4010 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327328.723:2530): pid=4010 uid=0 auid=0 ses=92 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=4010 suid=0 rport=50145 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327330.301:2531): pid=4019 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=4019 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327330.301:2532): pid=4019 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=4019 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414327330.303:2533): pid=4018 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=4019 suid=74 rport=59331 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414327330.303:2534): pid=4018 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=4019 suid=74 rport=59331 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327330.840:2535): pid=4018 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=59331 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327330.840:2536): pid=4018 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=e7:e2:3d:94:48:cf:f5:8c:5e:54:98:bd:89:a5:29:a9 rport=59331 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_ACCT msg=audit(1414327330.844:2537): pid=4018 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327330.844:2538): pid=4018 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=4019 suid=74 rport=59331 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327330.845:2539): pid=4018 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1414327330.846:2540): pid=4018 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=LOGIN msg=audit(1414327330.846:2541): pid=4018 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=93 res=1 >type=USER_ROLE_CHANGE msg=audit(1414327330.922:2542): pid=4018 uid=0 auid=0 ses=93 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_START msg=audit(1414327330.938:2543): pid=4018 uid=0 auid=0 ses=93 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1414327330.942:2544): pid=4018 uid=0 auid=0 ses=93 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_START msg=audit(1414327330.943:2545): pid=4018 uid=0 auid=0 ses=93 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327330.944:2546): pid=4021 uid=0 auid=0 ses=93 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=4021 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327330.944:2547): pid=4021 uid=0 auid=0 ses=93 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=4021 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRED_REFR msg=audit(1414327330.945:2548): pid=4021 uid=0 auid=0 ses=93 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_END msg=audit(1414327330.961:2549): pid=4018 uid=0 auid=0 ses=93 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRED_DISP msg=audit(1414327330.961:2550): pid=4018 uid=0 auid=0 ses=93 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_END msg=audit(1414327330.962:2551): pid=4018 uid=0 auid=0 ses=93 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1414327330.962:2552): pid=4018 uid=0 auid=0 ses=93 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327330.962:2553): pid=4018 uid=0 auid=0 ses=93 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=4018 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327330.962:2554): pid=4018 uid=0 auid=0 ses=93 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=4018 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327330.962:2555): pid=4018 uid=0 auid=0 ses=93 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=4018 suid=0 rport=59331 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327333.984:2556): pid=4027 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=4027 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327333.985:2557): pid=4027 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=4027 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414327333.986:2558): pid=4026 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=4027 suid=74 rport=50147 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414327333.986:2559): pid=4026 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=4027 suid=74 rport=50147 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=USER_AUTH msg=audit(1414327334.522:2560): pid=4026 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=50147 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=USER_AUTH msg=audit(1414327334.522:2561): pid=4026 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=e7:e2:3d:94:48:cf:f5:8c:5e:54:98:bd:89:a5:29:a9 rport=50147 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=USER_ACCT msg=audit(1414327334.887:2562): pid=4026 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327334.887:2563): pid=4026 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=4027 suid=74 rport=50147 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=USER_AUTH msg=audit(1414327334.888:2564): pid=4026 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1414327335.248:2565): pid=4026 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=LOGIN msg=audit(1414327335.248:2566): pid=4026 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=94 res=1 >type=USER_ROLE_CHANGE msg=audit(1414327335.680:2567): pid=4026 uid=0 auid=0 ses=94 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=USER_START msg=audit(1414327336.057:2568): pid=4026 uid=0 auid=0 ses=94 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1414327336.421:2569): pid=4026 uid=0 auid=0 ses=94 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=USER_START msg=audit(1414327336.783:2570): pid=4026 uid=0 auid=0 ses=94 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327336.785:2571): pid=4029 uid=0 auid=0 ses=94 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=4029 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327336.785:2572): pid=4029 uid=0 auid=0 ses=94 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=4029 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRED_REFR msg=audit(1414327337.153:2573): pid=4029 uid=0 auid=0 ses=94 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=USER_END msg=audit(1414327337.532:2574): pid=4026 uid=0 auid=0 ses=94 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=CRED_DISP msg=audit(1414327337.894:2575): pid=4026 uid=0 auid=0 ses=94 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=USER_END msg=audit(1414327338.256:2576): pid=4026 uid=0 auid=0 ses=94 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1414327338.617:2577): pid=4026 uid=0 auid=0 ses=94 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327338.617:2578): pid=4026 uid=0 auid=0 ses=94 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=4026 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327338.617:2579): pid=4026 uid=0 auid=0 ses=94 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=4026 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327338.617:2580): pid=4026 uid=0 auid=0 ses=94 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=4026 suid=0 rport=50147 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327340.192:2581): pid=4035 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=4035 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327340.192:2582): pid=4035 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=4035 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414327340.193:2583): pid=4034 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=4035 suid=74 rport=59333 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414327340.195:2584): pid=4034 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=4035 suid=74 rport=59333 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327340.732:2585): pid=4034 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=59333 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327340.732:2586): pid=4034 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=e7:e2:3d:94:48:cf:f5:8c:5e:54:98:bd:89:a5:29:a9 rport=59333 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_ACCT msg=audit(1414327340.736:2587): pid=4034 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327340.737:2588): pid=4034 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=4035 suid=74 rport=59333 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327340.738:2589): pid=4034 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1414327340.738:2590): pid=4034 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=LOGIN msg=audit(1414327340.738:2591): pid=4034 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=95 res=1 >type=USER_ROLE_CHANGE msg=audit(1414327340.812:2592): pid=4034 uid=0 auid=0 ses=95 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_START msg=audit(1414327340.829:2593): pid=4034 uid=0 auid=0 ses=95 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1414327340.833:2594): pid=4034 uid=0 auid=0 ses=95 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_START msg=audit(1414327340.833:2595): pid=4034 uid=0 auid=0 ses=95 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327340.835:2596): pid=4037 uid=0 auid=0 ses=95 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=4037 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327340.835:2597): pid=4037 uid=0 auid=0 ses=95 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=4037 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRED_REFR msg=audit(1414327340.836:2598): pid=4037 uid=0 auid=0 ses=95 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_END msg=audit(1414327340.852:2599): pid=4034 uid=0 auid=0 ses=95 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRED_DISP msg=audit(1414327340.852:2600): pid=4034 uid=0 auid=0 ses=95 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_END msg=audit(1414327340.852:2601): pid=4034 uid=0 auid=0 ses=95 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1414327340.853:2602): pid=4034 uid=0 auid=0 ses=95 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327340.853:2603): pid=4034 uid=0 auid=0 ses=95 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=4034 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327340.853:2604): pid=4034 uid=0 auid=0 ses=95 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=4034 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327340.853:2605): pid=4034 uid=0 auid=0 ses=95 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=4034 suid=0 rport=59333 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=ADD_GROUP msg=audit(1414327342.381:2606): pid=4053 uid=0 auid=0 ses=71 subj=unconfined_u:system_r:groupadd_t:s0-s0:c0.c1023 msg='op=adding group to /etc/group id=995 exe="/usr/sbin/groupadd" hostname=? addr=? terminal=? res=success' >type=ADD_GROUP msg=audit(1414327342.383:2607): pid=4053 uid=0 auid=0 ses=71 subj=unconfined_u:system_r:groupadd_t:s0-s0:c0.c1023 msg='op=adding group to /etc/gshadow id=995 exe="/usr/sbin/groupadd" hostname=? addr=? terminal=? res=success' >type=ADD_GROUP msg=audit(1414327342.384:2608): pid=4053 uid=0 auid=0 ses=71 subj=unconfined_u:system_r:groupadd_t:s0-s0:c0.c1023 msg='op= id=995 exe="/usr/sbin/groupadd" hostname=? addr=? terminal=? res=success' >type=ADD_USER msg=audit(1414327342.404:2609): pid=4058 uid=0 auid=0 ses=71 subj=unconfined_u:system_r:useradd_t:s0-s0:c0.c1023 msg='op=adding user id=997 exe="/usr/sbin/useradd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327343.877:2610): pid=4067 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=4067 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327343.877:2611): pid=4067 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=4067 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414327343.878:2612): pid=4066 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=4067 suid=74 rport=50149 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414327343.878:2613): pid=4066 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=4067 suid=74 rport=50149 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=USER_AUTH msg=audit(1414327344.413:2614): pid=4066 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=50149 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=USER_AUTH msg=audit(1414327344.413:2615): pid=4066 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=e7:e2:3d:94:48:cf:f5:8c:5e:54:98:bd:89:a5:29:a9 rport=50149 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=USER_ACCT msg=audit(1414327344.778:2616): pid=4066 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327344.779:2617): pid=4066 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=4067 suid=74 rport=50149 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=USER_AUTH msg=audit(1414327344.780:2618): pid=4066 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1414327345.150:2619): pid=4066 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=LOGIN msg=audit(1414327345.150:2620): pid=4066 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=96 res=1 >type=USER_ROLE_CHANGE msg=audit(1414327345.584:2621): pid=4066 uid=0 auid=0 ses=96 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=USER_START msg=audit(1414327345.963:2622): pid=4066 uid=0 auid=0 ses=96 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1414327346.330:2623): pid=4066 uid=0 auid=0 ses=96 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=USER_START msg=audit(1414327346.691:2624): pid=4066 uid=0 auid=0 ses=96 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327346.693:2625): pid=4072 uid=0 auid=0 ses=96 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=4072 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327346.694:2626): pid=4072 uid=0 auid=0 ses=96 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=4072 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRED_REFR msg=audit(1414327347.056:2627): pid=4072 uid=0 auid=0 ses=96 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=USER_END msg=audit(1414327347.435:2628): pid=4066 uid=0 auid=0 ses=96 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=CRED_DISP msg=audit(1414327347.797:2629): pid=4066 uid=0 auid=0 ses=96 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=USER_END msg=audit(1414327348.159:2630): pid=4066 uid=0 auid=0 ses=96 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1414327348.520:2631): pid=4066 uid=0 auid=0 ses=96 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327348.520:2632): pid=4066 uid=0 auid=0 ses=96 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=4066 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327348.520:2633): pid=4066 uid=0 auid=0 ses=96 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=4066 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327348.521:2634): pid=4066 uid=0 auid=0 ses=96 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=4066 suid=0 rport=50149 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327350.096:2635): pid=4099 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=4099 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327350.097:2636): pid=4099 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=4099 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414327350.098:2637): pid=4097 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=4099 suid=74 rport=59335 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414327350.098:2638): pid=4097 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=4099 suid=74 rport=59335 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327350.640:2639): pid=4097 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=59335 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327350.640:2640): pid=4097 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=e7:e2:3d:94:48:cf:f5:8c:5e:54:98:bd:89:a5:29:a9 rport=59335 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_ACCT msg=audit(1414327350.644:2641): pid=4097 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327350.644:2642): pid=4097 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=4099 suid=74 rport=59335 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327350.645:2643): pid=4097 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1414327350.645:2644): pid=4097 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=LOGIN msg=audit(1414327350.645:2645): pid=4097 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=97 res=1 >type=USER_ROLE_CHANGE msg=audit(1414327350.717:2646): pid=4097 uid=0 auid=0 ses=97 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_START msg=audit(1414327350.732:2647): pid=4097 uid=0 auid=0 ses=97 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1414327350.736:2648): pid=4097 uid=0 auid=0 ses=97 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_START msg=audit(1414327350.736:2649): pid=4097 uid=0 auid=0 ses=97 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327350.737:2650): pid=4101 uid=0 auid=0 ses=97 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=4101 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327350.737:2651): pid=4101 uid=0 auid=0 ses=97 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=4101 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRED_REFR msg=audit(1414327350.738:2652): pid=4101 uid=0 auid=0 ses=97 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_END msg=audit(1414327350.752:2653): pid=4097 uid=0 auid=0 ses=97 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRED_DISP msg=audit(1414327350.752:2654): pid=4097 uid=0 auid=0 ses=97 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_END msg=audit(1414327350.753:2655): pid=4097 uid=0 auid=0 ses=97 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1414327350.753:2656): pid=4097 uid=0 auid=0 ses=97 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327350.753:2657): pid=4097 uid=0 auid=0 ses=97 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=4097 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327350.753:2658): pid=4097 uid=0 auid=0 ses=97 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=4097 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327350.753:2659): pid=4097 uid=0 auid=0 ses=97 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=4097 suid=0 rport=59335 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327353.782:2660): pid=4136 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=4136 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327353.782:2661): pid=4136 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=4136 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414327353.783:2662): pid=4135 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=4136 suid=74 rport=50151 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414327353.783:2663): pid=4135 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=4136 suid=74 rport=50151 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=USER_AUTH msg=audit(1414327354.316:2664): pid=4135 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=50151 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=USER_AUTH msg=audit(1414327354.316:2665): pid=4135 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=e7:e2:3d:94:48:cf:f5:8c:5e:54:98:bd:89:a5:29:a9 rport=50151 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=USER_ACCT msg=audit(1414327354.680:2666): pid=4135 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327354.681:2667): pid=4135 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=4136 suid=74 rport=50151 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=USER_AUTH msg=audit(1414327354.684:2668): pid=4135 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1414327355.045:2669): pid=4135 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=LOGIN msg=audit(1414327355.045:2670): pid=4135 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=98 res=1 >type=USER_ROLE_CHANGE msg=audit(1414327355.497:2671): pid=4135 uid=0 auid=0 ses=98 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=USER_START msg=audit(1414327355.877:2672): pid=4135 uid=0 auid=0 ses=98 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1414327356.245:2673): pid=4135 uid=0 auid=0 ses=98 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=USER_START msg=audit(1414327356.605:2674): pid=4135 uid=0 auid=0 ses=98 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327356.607:2675): pid=4149 uid=0 auid=0 ses=98 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=4149 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327356.608:2676): pid=4149 uid=0 auid=0 ses=98 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=4149 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRED_REFR msg=audit(1414327356.970:2677): pid=4149 uid=0 auid=0 ses=98 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=USER_END msg=audit(1414327357.352:2678): pid=4135 uid=0 auid=0 ses=98 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=CRED_DISP msg=audit(1414327357.714:2679): pid=4135 uid=0 auid=0 ses=98 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=USER_END msg=audit(1414327358.076:2680): pid=4135 uid=0 auid=0 ses=98 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1414327358.440:2681): pid=4135 uid=0 auid=0 ses=98 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327358.440:2682): pid=4135 uid=0 auid=0 ses=98 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=4135 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327358.440:2683): pid=4135 uid=0 auid=0 ses=98 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=4135 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327358.440:2684): pid=4135 uid=0 auid=0 ses=98 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=4135 suid=0 rport=50151 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327360.013:2685): pid=4169 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=4169 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327360.013:2686): pid=4169 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=4169 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414327360.014:2687): pid=4168 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=4169 suid=74 rport=59337 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414327360.014:2688): pid=4168 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=4169 suid=74 rport=59337 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327360.548:2689): pid=4168 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=59337 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327360.548:2690): pid=4168 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=e7:e2:3d:94:48:cf:f5:8c:5e:54:98:bd:89:a5:29:a9 rport=59337 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_ACCT msg=audit(1414327360.552:2691): pid=4168 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327360.552:2692): pid=4168 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=4169 suid=74 rport=59337 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327360.553:2693): pid=4168 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1414327360.553:2694): pid=4168 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=LOGIN msg=audit(1414327360.554:2695): pid=4168 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=99 res=1 >type=USER_ROLE_CHANGE msg=audit(1414327360.626:2696): pid=4168 uid=0 auid=0 ses=99 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_START msg=audit(1414327360.642:2697): pid=4168 uid=0 auid=0 ses=99 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1414327360.646:2698): pid=4168 uid=0 auid=0 ses=99 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_START msg=audit(1414327360.646:2699): pid=4168 uid=0 auid=0 ses=99 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327360.648:2700): pid=4171 uid=0 auid=0 ses=99 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=4171 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327360.648:2701): pid=4171 uid=0 auid=0 ses=99 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=4171 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRED_REFR msg=audit(1414327360.649:2702): pid=4171 uid=0 auid=0 ses=99 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_END msg=audit(1414327360.663:2703): pid=4168 uid=0 auid=0 ses=99 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRED_DISP msg=audit(1414327360.664:2704): pid=4168 uid=0 auid=0 ses=99 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_END msg=audit(1414327360.664:2705): pid=4168 uid=0 auid=0 ses=99 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1414327360.664:2706): pid=4168 uid=0 auid=0 ses=99 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327360.664:2707): pid=4168 uid=0 auid=0 ses=99 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=4168 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327360.664:2708): pid=4168 uid=0 auid=0 ses=99 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=4168 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327360.664:2709): pid=4168 uid=0 auid=0 ses=99 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=4168 suid=0 rport=59337 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327363.685:2710): pid=4182 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=4182 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327363.685:2711): pid=4182 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=4182 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414327363.686:2712): pid=4181 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=4182 suid=74 rport=50154 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414327363.686:2713): pid=4181 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=4182 suid=74 rport=50154 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=USER_AUTH msg=audit(1414327364.222:2714): pid=4181 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=50154 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=USER_AUTH msg=audit(1414327364.222:2715): pid=4181 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=e7:e2:3d:94:48:cf:f5:8c:5e:54:98:bd:89:a5:29:a9 rport=50154 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=USER_ACCT msg=audit(1414327364.587:2716): pid=4181 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327364.587:2717): pid=4181 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=4182 suid=74 rport=50154 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=USER_AUTH msg=audit(1414327364.589:2718): pid=4181 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1414327364.951:2719): pid=4181 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=LOGIN msg=audit(1414327364.951:2720): pid=4181 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=100 res=1 >type=USER_ROLE_CHANGE msg=audit(1414327365.385:2721): pid=4181 uid=0 auid=0 ses=100 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=USER_START msg=audit(1414327365.767:2722): pid=4181 uid=0 auid=0 ses=100 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1414327366.132:2723): pid=4181 uid=0 auid=0 ses=100 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=USER_START msg=audit(1414327366.493:2724): pid=4181 uid=0 auid=0 ses=100 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327366.495:2725): pid=4184 uid=0 auid=0 ses=100 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=4184 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327366.495:2726): pid=4184 uid=0 auid=0 ses=100 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=4184 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRED_REFR msg=audit(1414327366.858:2727): pid=4184 uid=0 auid=0 ses=100 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=USER_END msg=audit(1414327367.236:2728): pid=4181 uid=0 auid=0 ses=100 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=CRED_DISP msg=audit(1414327367.597:2729): pid=4181 uid=0 auid=0 ses=100 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=USER_END msg=audit(1414327367.960:2730): pid=4181 uid=0 auid=0 ses=100 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1414327368.321:2731): pid=4181 uid=0 auid=0 ses=100 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327368.322:2732): pid=4181 uid=0 auid=0 ses=100 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=4181 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327368.322:2733): pid=4181 uid=0 auid=0 ses=100 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=4181 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327368.322:2734): pid=4181 uid=0 auid=0 ses=100 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=4181 suid=0 rport=50154 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327369.897:2735): pid=4190 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=4190 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327369.897:2736): pid=4190 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=4190 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414327369.898:2737): pid=4189 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=4190 suid=74 rport=59340 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414327369.898:2738): pid=4189 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=4190 suid=74 rport=59340 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327370.436:2739): pid=4189 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=59340 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327370.436:2740): pid=4189 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=e7:e2:3d:94:48:cf:f5:8c:5e:54:98:bd:89:a5:29:a9 rport=59340 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_ACCT msg=audit(1414327370.441:2741): pid=4189 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327370.441:2742): pid=4189 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=4190 suid=74 rport=59340 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327370.442:2743): pid=4189 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1414327370.442:2744): pid=4189 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=LOGIN msg=audit(1414327370.442:2745): pid=4189 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=101 res=1 >type=USER_ROLE_CHANGE msg=audit(1414327370.513:2746): pid=4189 uid=0 auid=0 ses=101 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_START msg=audit(1414327370.529:2747): pid=4189 uid=0 auid=0 ses=101 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1414327370.532:2748): pid=4189 uid=0 auid=0 ses=101 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_START msg=audit(1414327370.533:2749): pid=4189 uid=0 auid=0 ses=101 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327370.534:2750): pid=4192 uid=0 auid=0 ses=101 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=4192 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327370.534:2751): pid=4192 uid=0 auid=0 ses=101 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=4192 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRED_REFR msg=audit(1414327370.536:2752): pid=4192 uid=0 auid=0 ses=101 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_END msg=audit(1414327370.549:2753): pid=4189 uid=0 auid=0 ses=101 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRED_DISP msg=audit(1414327370.549:2754): pid=4189 uid=0 auid=0 ses=101 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_END msg=audit(1414327370.550:2755): pid=4189 uid=0 auid=0 ses=101 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1414327370.550:2756): pid=4189 uid=0 auid=0 ses=101 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327370.550:2757): pid=4189 uid=0 auid=0 ses=101 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=4189 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327370.550:2758): pid=4189 uid=0 auid=0 ses=101 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=4189 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327370.550:2759): pid=4189 uid=0 auid=0 ses=101 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=4189 suid=0 rport=59340 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327373.571:2760): pid=4198 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=4198 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327373.572:2761): pid=4198 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=4198 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414327373.573:2762): pid=4197 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=4198 suid=74 rport=50156 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414327373.573:2763): pid=4197 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=4198 suid=74 rport=50156 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=USER_AUTH msg=audit(1414327374.105:2764): pid=4197 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=50156 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=USER_AUTH msg=audit(1414327374.105:2765): pid=4197 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=e7:e2:3d:94:48:cf:f5:8c:5e:54:98:bd:89:a5:29:a9 rport=50156 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=USER_ACCT msg=audit(1414327374.470:2766): pid=4197 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327374.470:2767): pid=4197 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=4198 suid=74 rport=50156 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=USER_AUTH msg=audit(1414327374.471:2768): pid=4197 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1414327374.832:2769): pid=4197 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=LOGIN msg=audit(1414327374.832:2770): pid=4197 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=102 res=1 >type=USER_ROLE_CHANGE msg=audit(1414327375.264:2771): pid=4197 uid=0 auid=0 ses=102 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=USER_START msg=audit(1414327375.642:2772): pid=4197 uid=0 auid=0 ses=102 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1414327376.008:2773): pid=4197 uid=0 auid=0 ses=102 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=USER_START msg=audit(1414327376.367:2774): pid=4197 uid=0 auid=0 ses=102 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327376.369:2775): pid=4200 uid=0 auid=0 ses=102 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=4200 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327376.369:2776): pid=4200 uid=0 auid=0 ses=102 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=4200 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRED_REFR msg=audit(1414327376.731:2777): pid=4200 uid=0 auid=0 ses=102 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=USER_END msg=audit(1414327377.109:2778): pid=4197 uid=0 auid=0 ses=102 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=CRED_DISP msg=audit(1414327377.471:2779): pid=4197 uid=0 auid=0 ses=102 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=USER_END msg=audit(1414327377.834:2780): pid=4197 uid=0 auid=0 ses=102 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1414327378.196:2781): pid=4197 uid=0 auid=0 ses=102 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327378.196:2782): pid=4197 uid=0 auid=0 ses=102 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=4197 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327378.196:2783): pid=4197 uid=0 auid=0 ses=102 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=4197 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327378.196:2784): pid=4197 uid=0 auid=0 ses=102 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=4197 suid=0 rport=50156 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327379.770:2785): pid=4206 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=4206 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327379.770:2786): pid=4206 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=4206 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414327379.771:2787): pid=4205 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=4206 suid=74 rport=59342 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414327379.772:2788): pid=4205 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=4206 suid=74 rport=59342 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327380.307:2789): pid=4205 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=59342 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327380.307:2790): pid=4205 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=e7:e2:3d:94:48:cf:f5:8c:5e:54:98:bd:89:a5:29:a9 rport=59342 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_ACCT msg=audit(1414327380.311:2791): pid=4205 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327380.312:2792): pid=4205 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=4206 suid=74 rport=59342 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327380.313:2793): pid=4205 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1414327380.314:2794): pid=4205 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=LOGIN msg=audit(1414327380.314:2795): pid=4205 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=103 res=1 >type=USER_ROLE_CHANGE msg=audit(1414327380.386:2796): pid=4205 uid=0 auid=0 ses=103 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_START msg=audit(1414327380.402:2797): pid=4205 uid=0 auid=0 ses=103 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1414327380.405:2798): pid=4205 uid=0 auid=0 ses=103 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_START msg=audit(1414327380.405:2799): pid=4205 uid=0 auid=0 ses=103 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327380.407:2800): pid=4208 uid=0 auid=0 ses=103 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=4208 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327380.407:2801): pid=4208 uid=0 auid=0 ses=103 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=4208 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRED_REFR msg=audit(1414327380.408:2802): pid=4208 uid=0 auid=0 ses=103 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_END msg=audit(1414327380.422:2803): pid=4205 uid=0 auid=0 ses=103 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRED_DISP msg=audit(1414327380.422:2804): pid=4205 uid=0 auid=0 ses=103 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_END msg=audit(1414327380.423:2805): pid=4205 uid=0 auid=0 ses=103 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1414327380.423:2806): pid=4205 uid=0 auid=0 ses=103 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327380.423:2807): pid=4205 uid=0 auid=0 ses=103 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=4205 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327380.423:2808): pid=4205 uid=0 auid=0 ses=103 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=4205 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327380.423:2809): pid=4205 uid=0 auid=0 ses=103 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=4205 suid=0 rport=59342 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327383.444:2810): pid=4214 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=4214 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327383.444:2811): pid=4214 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=4214 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414327383.445:2812): pid=4213 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=4214 suid=74 rport=50158 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414327383.445:2813): pid=4213 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=4214 suid=74 rport=50158 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=USER_AUTH msg=audit(1414327383.983:2814): pid=4213 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=50158 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=USER_AUTH msg=audit(1414327383.983:2815): pid=4213 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=e7:e2:3d:94:48:cf:f5:8c:5e:54:98:bd:89:a5:29:a9 rport=50158 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=USER_ACCT msg=audit(1414327384.349:2816): pid=4213 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327384.349:2817): pid=4213 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=4214 suid=74 rport=50158 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=USER_AUTH msg=audit(1414327384.351:2818): pid=4213 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1414327384.713:2819): pid=4213 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=LOGIN msg=audit(1414327384.713:2820): pid=4213 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=104 res=1 >type=USER_ROLE_CHANGE msg=audit(1414327385.145:2821): pid=4213 uid=0 auid=0 ses=104 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=USER_START msg=audit(1414327385.524:2822): pid=4213 uid=0 auid=0 ses=104 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1414327385.890:2823): pid=4213 uid=0 auid=0 ses=104 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=USER_START msg=audit(1414327386.254:2824): pid=4213 uid=0 auid=0 ses=104 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327386.256:2825): pid=4216 uid=0 auid=0 ses=104 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=4216 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327386.256:2826): pid=4216 uid=0 auid=0 ses=104 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=4216 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRED_REFR msg=audit(1414327386.618:2827): pid=4216 uid=0 auid=0 ses=104 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=USER_END msg=audit(1414327386.997:2828): pid=4213 uid=0 auid=0 ses=104 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=CRED_DISP msg=audit(1414327387.359:2829): pid=4213 uid=0 auid=0 ses=104 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=USER_END msg=audit(1414327387.720:2830): pid=4213 uid=0 auid=0 ses=104 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1414327388.080:2831): pid=4213 uid=0 auid=0 ses=104 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327388.080:2832): pid=4213 uid=0 auid=0 ses=104 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=4213 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327388.080:2833): pid=4213 uid=0 auid=0 ses=104 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=4213 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327388.080:2834): pid=4213 uid=0 auid=0 ses=104 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=4213 suid=0 rport=50158 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327389.664:2835): pid=4222 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=4222 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327389.665:2836): pid=4222 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=4222 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414327389.666:2837): pid=4221 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=4222 suid=74 rport=59344 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414327389.666:2838): pid=4221 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=4222 suid=74 rport=59344 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327390.203:2839): pid=4221 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=59344 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327390.203:2840): pid=4221 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=e7:e2:3d:94:48:cf:f5:8c:5e:54:98:bd:89:a5:29:a9 rport=59344 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_ACCT msg=audit(1414327390.207:2841): pid=4221 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327390.207:2842): pid=4221 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=4222 suid=74 rport=59344 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327390.208:2843): pid=4221 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1414327390.209:2844): pid=4221 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=LOGIN msg=audit(1414327390.209:2845): pid=4221 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=105 res=1 >type=USER_ROLE_CHANGE msg=audit(1414327390.279:2846): pid=4221 uid=0 auid=0 ses=105 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_START msg=audit(1414327390.297:2847): pid=4221 uid=0 auid=0 ses=105 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1414327390.300:2848): pid=4221 uid=0 auid=0 ses=105 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_START msg=audit(1414327390.300:2849): pid=4221 uid=0 auid=0 ses=105 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327390.302:2850): pid=4224 uid=0 auid=0 ses=105 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=4224 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327390.302:2851): pid=4224 uid=0 auid=0 ses=105 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=4224 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRED_REFR msg=audit(1414327390.303:2852): pid=4224 uid=0 auid=0 ses=105 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_END msg=audit(1414327390.321:2853): pid=4221 uid=0 auid=0 ses=105 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRED_DISP msg=audit(1414327390.321:2854): pid=4221 uid=0 auid=0 ses=105 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_END msg=audit(1414327390.322:2855): pid=4221 uid=0 auid=0 ses=105 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1414327390.322:2856): pid=4221 uid=0 auid=0 ses=105 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327390.322:2857): pid=4221 uid=0 auid=0 ses=105 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=4221 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327390.322:2858): pid=4221 uid=0 auid=0 ses=105 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=4221 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327390.322:2859): pid=4221 uid=0 auid=0 ses=105 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=4221 suid=0 rport=59344 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327393.342:2860): pid=4231 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=4231 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327393.342:2861): pid=4231 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=4231 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414327393.343:2862): pid=4230 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=4231 suid=74 rport=50160 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414327393.344:2863): pid=4230 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=4231 suid=74 rport=50160 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=USER_AUTH msg=audit(1414327393.877:2864): pid=4230 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=50160 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=USER_AUTH msg=audit(1414327393.877:2865): pid=4230 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=e7:e2:3d:94:48:cf:f5:8c:5e:54:98:bd:89:a5:29:a9 rport=50160 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=USER_ACCT msg=audit(1414327394.242:2866): pid=4230 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327394.243:2867): pid=4230 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=4231 suid=74 rport=50160 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=USER_AUTH msg=audit(1414327394.246:2868): pid=4230 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1414327394.608:2869): pid=4230 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=LOGIN msg=audit(1414327394.608:2870): pid=4230 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=106 res=1 >type=USER_ROLE_CHANGE msg=audit(1414327395.041:2871): pid=4230 uid=0 auid=0 ses=106 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=USER_START msg=audit(1414327395.420:2872): pid=4230 uid=0 auid=0 ses=106 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1414327395.787:2873): pid=4230 uid=0 auid=0 ses=106 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=USER_START msg=audit(1414327396.148:2874): pid=4230 uid=0 auid=0 ses=106 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327396.149:2875): pid=4233 uid=0 auid=0 ses=106 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=4233 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327396.150:2876): pid=4233 uid=0 auid=0 ses=106 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=4233 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRED_REFR msg=audit(1414327396.512:2877): pid=4233 uid=0 auid=0 ses=106 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=USER_END msg=audit(1414327396.890:2878): pid=4230 uid=0 auid=0 ses=106 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=CRED_DISP msg=audit(1414327397.250:2879): pid=4230 uid=0 auid=0 ses=106 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=USER_END msg=audit(1414327397.611:2880): pid=4230 uid=0 auid=0 ses=106 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1414327397.973:2881): pid=4230 uid=0 auid=0 ses=106 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327397.973:2882): pid=4230 uid=0 auid=0 ses=106 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=4230 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327397.973:2883): pid=4230 uid=0 auid=0 ses=106 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=4230 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327397.973:2884): pid=4230 uid=0 auid=0 ses=106 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=4230 suid=0 rport=50160 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327399.555:2885): pid=4239 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=4239 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327399.555:2886): pid=4239 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=4239 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414327399.557:2887): pid=4238 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=4239 suid=74 rport=59346 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414327399.557:2888): pid=4238 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=4239 suid=74 rport=59346 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327400.094:2889): pid=4238 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=59346 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327400.094:2890): pid=4238 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=e7:e2:3d:94:48:cf:f5:8c:5e:54:98:bd:89:a5:29:a9 rport=59346 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_ACCT msg=audit(1414327400.098:2891): pid=4238 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327400.098:2892): pid=4238 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=4239 suid=74 rport=59346 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327400.100:2893): pid=4238 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1414327400.100:2894): pid=4238 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=LOGIN msg=audit(1414327400.100:2895): pid=4238 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=107 res=1 >type=USER_ROLE_CHANGE msg=audit(1414327400.169:2896): pid=4238 uid=0 auid=0 ses=107 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_START msg=audit(1414327400.187:2897): pid=4238 uid=0 auid=0 ses=107 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1414327400.191:2898): pid=4238 uid=0 auid=0 ses=107 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_START msg=audit(1414327400.191:2899): pid=4238 uid=0 auid=0 ses=107 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327400.192:2900): pid=4241 uid=0 auid=0 ses=107 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=4241 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327400.193:2901): pid=4241 uid=0 auid=0 ses=107 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=4241 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRED_REFR msg=audit(1414327400.193:2902): pid=4241 uid=0 auid=0 ses=107 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_END msg=audit(1414327400.207:2903): pid=4238 uid=0 auid=0 ses=107 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRED_DISP msg=audit(1414327400.208:2904): pid=4238 uid=0 auid=0 ses=107 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_END msg=audit(1414327400.208:2905): pid=4238 uid=0 auid=0 ses=107 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1414327400.208:2906): pid=4238 uid=0 auid=0 ses=107 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327400.209:2907): pid=4238 uid=0 auid=0 ses=107 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=4238 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327400.209:2908): pid=4238 uid=0 auid=0 ses=107 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=4238 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327400.209:2909): pid=4238 uid=0 auid=0 ses=107 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=4238 suid=0 rport=59346 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327403.231:2910): pid=4247 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=4247 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327403.232:2911): pid=4247 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=4247 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414327403.233:2912): pid=4246 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=4247 suid=74 rport=50162 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414327403.234:2913): pid=4246 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=4247 suid=74 rport=50162 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=USER_AUTH msg=audit(1414327403.772:2914): pid=4246 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=50162 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=USER_AUTH msg=audit(1414327403.772:2915): pid=4246 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=e7:e2:3d:94:48:cf:f5:8c:5e:54:98:bd:89:a5:29:a9 rport=50162 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=USER_ACCT msg=audit(1414327404.138:2916): pid=4246 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327404.139:2917): pid=4246 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=4247 suid=74 rport=50162 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=USER_AUTH msg=audit(1414327404.140:2918): pid=4246 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1414327404.504:2919): pid=4246 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=LOGIN msg=audit(1414327404.504:2920): pid=4246 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=108 res=1 >type=USER_ROLE_CHANGE msg=audit(1414327404.935:2921): pid=4246 uid=0 auid=0 ses=108 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=USER_START msg=audit(1414327405.312:2922): pid=4246 uid=0 auid=0 ses=108 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1414327405.677:2923): pid=4246 uid=0 auid=0 ses=108 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=USER_START msg=audit(1414327406.039:2924): pid=4246 uid=0 auid=0 ses=108 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327406.040:2925): pid=4249 uid=0 auid=0 ses=108 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=4249 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327406.041:2926): pid=4249 uid=0 auid=0 ses=108 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=4249 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRED_REFR msg=audit(1414327406.405:2927): pid=4249 uid=0 auid=0 ses=108 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=USER_END msg=audit(1414327406.783:2928): pid=4246 uid=0 auid=0 ses=108 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=CRED_DISP msg=audit(1414327407.144:2929): pid=4246 uid=0 auid=0 ses=108 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=USER_END msg=audit(1414327407.506:2930): pid=4246 uid=0 auid=0 ses=108 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1414327407.867:2931): pid=4246 uid=0 auid=0 ses=108 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327407.867:2932): pid=4246 uid=0 auid=0 ses=108 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=4246 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327407.867:2933): pid=4246 uid=0 auid=0 ses=108 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=4246 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327407.867:2934): pid=4246 uid=0 auid=0 ses=108 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=4246 suid=0 rport=50162 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327409.447:2935): pid=4255 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=4255 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327409.447:2936): pid=4255 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=4255 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414327409.448:2937): pid=4254 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=4255 suid=74 rport=59348 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414327409.449:2938): pid=4254 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=4255 suid=74 rport=59348 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327409.985:2939): pid=4254 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=59348 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327409.985:2940): pid=4254 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=e7:e2:3d:94:48:cf:f5:8c:5e:54:98:bd:89:a5:29:a9 rport=59348 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_ACCT msg=audit(1414327409.989:2941): pid=4254 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327409.989:2942): pid=4254 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=4255 suid=74 rport=59348 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327409.990:2943): pid=4254 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1414327409.990:2944): pid=4254 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=LOGIN msg=audit(1414327409.991:2945): pid=4254 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=109 res=1 >type=USER_ROLE_CHANGE msg=audit(1414327410.063:2946): pid=4254 uid=0 auid=0 ses=109 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_START msg=audit(1414327410.083:2947): pid=4254 uid=0 auid=0 ses=109 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1414327410.087:2948): pid=4254 uid=0 auid=0 ses=109 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_START msg=audit(1414327410.087:2949): pid=4254 uid=0 auid=0 ses=109 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327410.089:2950): pid=4257 uid=0 auid=0 ses=109 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=4257 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327410.089:2951): pid=4257 uid=0 auid=0 ses=109 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=4257 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRED_REFR msg=audit(1414327410.090:2952): pid=4257 uid=0 auid=0 ses=109 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_END msg=audit(1414327410.106:2953): pid=4254 uid=0 auid=0 ses=109 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRED_DISP msg=audit(1414327410.107:2954): pid=4254 uid=0 auid=0 ses=109 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_END msg=audit(1414327410.108:2955): pid=4254 uid=0 auid=0 ses=109 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1414327410.108:2956): pid=4254 uid=0 auid=0 ses=109 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327410.108:2957): pid=4254 uid=0 auid=0 ses=109 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=4254 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327410.108:2958): pid=4254 uid=0 auid=0 ses=109 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=4254 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327410.108:2959): pid=4254 uid=0 auid=0 ses=109 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=4254 suid=0 rport=59348 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327413.127:2960): pid=4263 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=4263 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327413.127:2961): pid=4263 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=4263 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414327413.128:2962): pid=4262 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=4263 suid=74 rport=50164 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414327413.129:2963): pid=4262 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=4263 suid=74 rport=50164 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=USER_AUTH msg=audit(1414327413.668:2964): pid=4262 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=50164 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=USER_AUTH msg=audit(1414327413.668:2965): pid=4262 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=e7:e2:3d:94:48:cf:f5:8c:5e:54:98:bd:89:a5:29:a9 rport=50164 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=USER_ACCT msg=audit(1414327414.035:2966): pid=4262 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327414.035:2967): pid=4262 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=4263 suid=74 rport=50164 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=USER_AUTH msg=audit(1414327414.036:2968): pid=4262 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1414327414.398:2969): pid=4262 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=LOGIN msg=audit(1414327414.398:2970): pid=4262 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=110 res=1 >type=USER_ROLE_CHANGE msg=audit(1414327414.829:2971): pid=4262 uid=0 auid=0 ses=110 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=USER_START msg=audit(1414327415.209:2972): pid=4262 uid=0 auid=0 ses=110 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1414327415.573:2973): pid=4262 uid=0 auid=0 ses=110 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=USER_START msg=audit(1414327415.934:2974): pid=4262 uid=0 auid=0 ses=110 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327415.936:2975): pid=4265 uid=0 auid=0 ses=110 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=4265 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327415.936:2976): pid=4265 uid=0 auid=0 ses=110 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=4265 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRED_REFR msg=audit(1414327416.299:2977): pid=4265 uid=0 auid=0 ses=110 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=USER_END msg=audit(1414327416.678:2978): pid=4262 uid=0 auid=0 ses=110 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=CRED_DISP msg=audit(1414327417.040:2979): pid=4262 uid=0 auid=0 ses=110 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=USER_END msg=audit(1414327417.402:2980): pid=4262 uid=0 auid=0 ses=110 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1414327417.764:2981): pid=4262 uid=0 auid=0 ses=110 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327417.764:2982): pid=4262 uid=0 auid=0 ses=110 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=4262 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327417.764:2983): pid=4262 uid=0 auid=0 ses=110 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=4262 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327417.764:2984): pid=4262 uid=0 auid=0 ses=110 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=4262 suid=0 rport=50164 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327419.339:2985): pid=4271 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=4271 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327419.339:2986): pid=4271 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=4271 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414327419.340:2987): pid=4270 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=4271 suid=74 rport=59350 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414327419.341:2988): pid=4270 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=4271 suid=74 rport=59350 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327419.878:2989): pid=4270 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=59350 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327419.878:2990): pid=4270 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=e7:e2:3d:94:48:cf:f5:8c:5e:54:98:bd:89:a5:29:a9 rport=59350 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_ACCT msg=audit(1414327419.883:2991): pid=4270 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327419.883:2992): pid=4270 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=4271 suid=74 rport=59350 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327419.884:2993): pid=4270 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1414327419.884:2994): pid=4270 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=LOGIN msg=audit(1414327419.885:2995): pid=4270 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=111 res=1 >type=USER_ROLE_CHANGE msg=audit(1414327419.958:2996): pid=4270 uid=0 auid=0 ses=111 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_START msg=audit(1414327419.975:2997): pid=4270 uid=0 auid=0 ses=111 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1414327419.979:2998): pid=4270 uid=0 auid=0 ses=111 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_START msg=audit(1414327419.979:2999): pid=4270 uid=0 auid=0 ses=111 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327419.981:3000): pid=4273 uid=0 auid=0 ses=111 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=4273 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327419.982:3001): pid=4273 uid=0 auid=0 ses=111 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=4273 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRED_REFR msg=audit(1414327419.982:3002): pid=4273 uid=0 auid=0 ses=111 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_END msg=audit(1414327419.998:3003): pid=4270 uid=0 auid=0 ses=111 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRED_DISP msg=audit(1414327419.998:3004): pid=4270 uid=0 auid=0 ses=111 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_END msg=audit(1414327419.998:3005): pid=4270 uid=0 auid=0 ses=111 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1414327419.998:3006): pid=4270 uid=0 auid=0 ses=111 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327419.998:3007): pid=4270 uid=0 auid=0 ses=111 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=4270 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327419.999:3008): pid=4270 uid=0 auid=0 ses=111 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=4270 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327419.999:3009): pid=4270 uid=0 auid=0 ses=111 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=4270 suid=0 rport=59350 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327423.021:3010): pid=4279 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=4279 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327423.021:3011): pid=4279 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=4279 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414327423.023:3012): pid=4278 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=4279 suid=74 rport=50166 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414327423.023:3013): pid=4278 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=4279 suid=74 rport=50166 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=USER_AUTH msg=audit(1414327423.557:3014): pid=4278 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=50166 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=USER_AUTH msg=audit(1414327423.557:3015): pid=4278 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=e7:e2:3d:94:48:cf:f5:8c:5e:54:98:bd:89:a5:29:a9 rport=50166 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=USER_ACCT msg=audit(1414327423.923:3016): pid=4278 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327423.923:3017): pid=4278 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=4279 suid=74 rport=50166 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=USER_AUTH msg=audit(1414327423.926:3018): pid=4278 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1414327424.288:3019): pid=4278 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=LOGIN msg=audit(1414327424.289:3020): pid=4278 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=112 res=1 >type=USER_ROLE_CHANGE msg=audit(1414327424.725:3021): pid=4278 uid=0 auid=0 ses=112 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=USER_START msg=audit(1414327425.107:3022): pid=4278 uid=0 auid=0 ses=112 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1414327425.472:3023): pid=4278 uid=0 auid=0 ses=112 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=USER_START msg=audit(1414327425.833:3024): pid=4278 uid=0 auid=0 ses=112 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327425.835:3025): pid=4281 uid=0 auid=0 ses=112 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=4281 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327425.835:3026): pid=4281 uid=0 auid=0 ses=112 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=4281 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRED_REFR msg=audit(1414327426.197:3027): pid=4281 uid=0 auid=0 ses=112 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=USER_END msg=audit(1414327426.574:3028): pid=4278 uid=0 auid=0 ses=112 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=CRED_DISP msg=audit(1414327426.937:3029): pid=4278 uid=0 auid=0 ses=112 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=USER_END msg=audit(1414327427.298:3030): pid=4278 uid=0 auid=0 ses=112 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1414327427.658:3031): pid=4278 uid=0 auid=0 ses=112 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327427.658:3032): pid=4278 uid=0 auid=0 ses=112 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=4278 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327427.658:3033): pid=4278 uid=0 auid=0 ses=112 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=4278 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327427.658:3034): pid=4278 uid=0 auid=0 ses=112 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=4278 suid=0 rport=50166 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327429.235:3035): pid=4287 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=4287 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327429.235:3036): pid=4287 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=4287 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414327429.237:3037): pid=4286 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=4287 suid=74 rport=59352 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414327429.237:3038): pid=4286 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=4287 suid=74 rport=59352 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327429.780:3039): pid=4286 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=59352 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327429.780:3040): pid=4286 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=e7:e2:3d:94:48:cf:f5:8c:5e:54:98:bd:89:a5:29:a9 rport=59352 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_ACCT msg=audit(1414327429.785:3041): pid=4286 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327429.786:3042): pid=4286 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=4287 suid=74 rport=59352 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327429.787:3043): pid=4286 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1414327429.787:3044): pid=4286 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=LOGIN msg=audit(1414327429.787:3045): pid=4286 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=113 res=1 >type=USER_ROLE_CHANGE msg=audit(1414327429.865:3046): pid=4286 uid=0 auid=0 ses=113 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_START msg=audit(1414327429.882:3047): pid=4286 uid=0 auid=0 ses=113 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1414327429.886:3048): pid=4286 uid=0 auid=0 ses=113 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_START msg=audit(1414327429.886:3049): pid=4286 uid=0 auid=0 ses=113 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327429.888:3050): pid=4289 uid=0 auid=0 ses=113 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=4289 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327429.888:3051): pid=4289 uid=0 auid=0 ses=113 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=4289 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRED_REFR msg=audit(1414327429.889:3052): pid=4289 uid=0 auid=0 ses=113 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_END msg=audit(1414327429.904:3053): pid=4286 uid=0 auid=0 ses=113 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRED_DISP msg=audit(1414327429.904:3054): pid=4286 uid=0 auid=0 ses=113 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_END msg=audit(1414327429.904:3055): pid=4286 uid=0 auid=0 ses=113 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1414327429.905:3056): pid=4286 uid=0 auid=0 ses=113 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327429.905:3057): pid=4286 uid=0 auid=0 ses=113 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=4286 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327429.905:3058): pid=4286 uid=0 auid=0 ses=113 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=4286 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327429.905:3059): pid=4286 uid=0 auid=0 ses=113 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=4286 suid=0 rport=59352 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327432.925:3060): pid=4295 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=4295 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327432.925:3061): pid=4295 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=4295 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414327432.926:3062): pid=4294 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=4295 suid=74 rport=50168 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414327432.926:3063): pid=4294 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=4295 suid=74 rport=50168 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=USER_AUTH msg=audit(1414327433.462:3064): pid=4294 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=50168 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=USER_AUTH msg=audit(1414327433.462:3065): pid=4294 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=e7:e2:3d:94:48:cf:f5:8c:5e:54:98:bd:89:a5:29:a9 rport=50168 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=USER_ACCT msg=audit(1414327433.827:3066): pid=4294 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327433.827:3067): pid=4294 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=4295 suid=74 rport=50168 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=USER_AUTH msg=audit(1414327433.829:3068): pid=4294 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1414327434.190:3069): pid=4294 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=LOGIN msg=audit(1414327434.190:3070): pid=4294 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=114 res=1 >type=USER_ROLE_CHANGE msg=audit(1414327434.621:3071): pid=4294 uid=0 auid=0 ses=114 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=USER_START msg=audit(1414327435.000:3072): pid=4294 uid=0 auid=0 ses=114 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1414327435.369:3073): pid=4294 uid=0 auid=0 ses=114 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=USER_START msg=audit(1414327435.729:3074): pid=4294 uid=0 auid=0 ses=114 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327435.731:3075): pid=4297 uid=0 auid=0 ses=114 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=4297 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327435.731:3076): pid=4297 uid=0 auid=0 ses=114 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=4297 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRED_REFR msg=audit(1414327436.093:3077): pid=4297 uid=0 auid=0 ses=114 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=USER_END msg=audit(1414327436.473:3078): pid=4294 uid=0 auid=0 ses=114 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=CRED_DISP msg=audit(1414327436.833:3079): pid=4294 uid=0 auid=0 ses=114 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=USER_END msg=audit(1414327437.195:3080): pid=4294 uid=0 auid=0 ses=114 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1414327437.556:3081): pid=4294 uid=0 auid=0 ses=114 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327437.556:3082): pid=4294 uid=0 auid=0 ses=114 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=4294 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327437.556:3083): pid=4294 uid=0 auid=0 ses=114 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=4294 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327437.556:3084): pid=4294 uid=0 auid=0 ses=114 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=4294 suid=0 rport=50168 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327439.142:3085): pid=4303 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=4303 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327439.142:3086): pid=4303 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=4303 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414327439.143:3087): pid=4302 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=4303 suid=74 rport=59354 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414327439.144:3088): pid=4302 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=4303 suid=74 rport=59354 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327439.681:3089): pid=4302 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=59354 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327439.681:3090): pid=4302 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=e7:e2:3d:94:48:cf:f5:8c:5e:54:98:bd:89:a5:29:a9 rport=59354 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_ACCT msg=audit(1414327439.686:3091): pid=4302 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327439.686:3092): pid=4302 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=4303 suid=74 rport=59354 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327439.687:3093): pid=4302 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1414327439.687:3094): pid=4302 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=LOGIN msg=audit(1414327439.687:3095): pid=4302 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=115 res=1 >type=USER_ROLE_CHANGE msg=audit(1414327439.760:3096): pid=4302 uid=0 auid=0 ses=115 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_START msg=audit(1414327439.776:3097): pid=4302 uid=0 auid=0 ses=115 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1414327439.780:3098): pid=4302 uid=0 auid=0 ses=115 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_START msg=audit(1414327439.780:3099): pid=4302 uid=0 auid=0 ses=115 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327439.782:3100): pid=4305 uid=0 auid=0 ses=115 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=4305 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327439.782:3101): pid=4305 uid=0 auid=0 ses=115 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=4305 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRED_REFR msg=audit(1414327439.783:3102): pid=4305 uid=0 auid=0 ses=115 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_END msg=audit(1414327439.799:3103): pid=4302 uid=0 auid=0 ses=115 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRED_DISP msg=audit(1414327439.800:3104): pid=4302 uid=0 auid=0 ses=115 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_END msg=audit(1414327439.800:3105): pid=4302 uid=0 auid=0 ses=115 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1414327439.801:3106): pid=4302 uid=0 auid=0 ses=115 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327439.801:3107): pid=4302 uid=0 auid=0 ses=115 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=4302 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327439.801:3108): pid=4302 uid=0 auid=0 ses=115 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=4302 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327439.801:3109): pid=4302 uid=0 auid=0 ses=115 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=4302 suid=0 rport=59354 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327442.818:3110): pid=4311 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=4311 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327442.819:3111): pid=4311 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=4311 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414327442.820:3112): pid=4310 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=4311 suid=74 rport=50170 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414327442.820:3113): pid=4310 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=4311 suid=74 rport=50170 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=USER_AUTH msg=audit(1414327443.353:3114): pid=4310 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=50170 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=USER_AUTH msg=audit(1414327443.353:3115): pid=4310 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=e7:e2:3d:94:48:cf:f5:8c:5e:54:98:bd:89:a5:29:a9 rport=50170 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=USER_ACCT msg=audit(1414327443.718:3116): pid=4310 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327443.719:3117): pid=4310 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=4311 suid=74 rport=50170 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=USER_AUTH msg=audit(1414327443.720:3118): pid=4310 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1414327444.082:3119): pid=4310 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=LOGIN msg=audit(1414327444.082:3120): pid=4310 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=116 res=1 >type=USER_ROLE_CHANGE msg=audit(1414327444.514:3121): pid=4310 uid=0 auid=0 ses=116 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=USER_START msg=audit(1414327444.894:3122): pid=4310 uid=0 auid=0 ses=116 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1414327445.262:3123): pid=4310 uid=0 auid=0 ses=116 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=USER_START msg=audit(1414327445.623:3124): pid=4310 uid=0 auid=0 ses=116 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327445.625:3125): pid=4313 uid=0 auid=0 ses=116 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=4313 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327445.625:3126): pid=4313 uid=0 auid=0 ses=116 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=4313 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRED_REFR msg=audit(1414327445.988:3127): pid=4313 uid=0 auid=0 ses=116 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=USER_END msg=audit(1414327446.363:3128): pid=4310 uid=0 auid=0 ses=116 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=CRED_DISP msg=audit(1414327446.724:3129): pid=4310 uid=0 auid=0 ses=116 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=USER_END msg=audit(1414327447.085:3130): pid=4310 uid=0 auid=0 ses=116 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1414327447.446:3131): pid=4310 uid=0 auid=0 ses=116 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327447.446:3132): pid=4310 uid=0 auid=0 ses=116 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=4310 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327447.446:3133): pid=4310 uid=0 auid=0 ses=116 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=4310 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327447.446:3134): pid=4310 uid=0 auid=0 ses=116 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=4310 suid=0 rport=50170 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327449.024:3135): pid=4319 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=4319 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327449.024:3136): pid=4319 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=4319 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414327449.026:3137): pid=4318 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=4319 suid=74 rport=59356 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414327449.026:3138): pid=4318 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=4319 suid=74 rport=59356 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327449.563:3139): pid=4318 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=59356 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327449.563:3140): pid=4318 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=e7:e2:3d:94:48:cf:f5:8c:5e:54:98:bd:89:a5:29:a9 rport=59356 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_ACCT msg=audit(1414327449.568:3141): pid=4318 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327449.568:3142): pid=4318 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=4319 suid=74 rport=59356 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327449.569:3143): pid=4318 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1414327449.569:3144): pid=4318 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=LOGIN msg=audit(1414327449.569:3145): pid=4318 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=117 res=1 >type=USER_ROLE_CHANGE msg=audit(1414327449.640:3146): pid=4318 uid=0 auid=0 ses=117 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_START msg=audit(1414327449.656:3147): pid=4318 uid=0 auid=0 ses=117 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1414327449.660:3148): pid=4318 uid=0 auid=0 ses=117 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_START msg=audit(1414327449.660:3149): pid=4318 uid=0 auid=0 ses=117 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327449.662:3150): pid=4321 uid=0 auid=0 ses=117 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=4321 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327449.662:3151): pid=4321 uid=0 auid=0 ses=117 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=4321 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRED_REFR msg=audit(1414327449.663:3152): pid=4321 uid=0 auid=0 ses=117 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_END msg=audit(1414327449.677:3153): pid=4318 uid=0 auid=0 ses=117 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRED_DISP msg=audit(1414327449.677:3154): pid=4318 uid=0 auid=0 ses=117 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_END msg=audit(1414327449.678:3155): pid=4318 uid=0 auid=0 ses=117 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1414327449.678:3156): pid=4318 uid=0 auid=0 ses=117 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327449.678:3157): pid=4318 uid=0 auid=0 ses=117 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=4318 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327449.678:3158): pid=4318 uid=0 auid=0 ses=117 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=4318 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327449.678:3159): pid=4318 uid=0 auid=0 ses=117 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=4318 suid=0 rport=59356 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327452.697:3160): pid=4327 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=4327 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327452.697:3161): pid=4327 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=4327 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414327452.698:3162): pid=4326 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=4327 suid=74 rport=50172 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414327452.698:3163): pid=4326 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=4327 suid=74 rport=50172 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=USER_AUTH msg=audit(1414327453.230:3164): pid=4326 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=50172 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=USER_AUTH msg=audit(1414327453.230:3165): pid=4326 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=e7:e2:3d:94:48:cf:f5:8c:5e:54:98:bd:89:a5:29:a9 rport=50172 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=USER_ACCT msg=audit(1414327453.596:3166): pid=4326 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327453.596:3167): pid=4326 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=4327 suid=74 rport=50172 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=USER_AUTH msg=audit(1414327453.598:3168): pid=4326 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1414327453.958:3169): pid=4326 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=LOGIN msg=audit(1414327453.958:3170): pid=4326 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=118 res=1 >type=USER_ROLE_CHANGE msg=audit(1414327454.402:3171): pid=4326 uid=0 auid=0 ses=118 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=USER_START msg=audit(1414327454.782:3172): pid=4326 uid=0 auid=0 ses=118 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1414327455.147:3173): pid=4326 uid=0 auid=0 ses=118 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=USER_START msg=audit(1414327455.507:3174): pid=4326 uid=0 auid=0 ses=118 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327455.509:3175): pid=4329 uid=0 auid=0 ses=118 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=4329 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327455.509:3176): pid=4329 uid=0 auid=0 ses=118 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=4329 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRED_REFR msg=audit(1414327455.871:3177): pid=4329 uid=0 auid=0 ses=118 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=USER_END msg=audit(1414327456.248:3178): pid=4326 uid=0 auid=0 ses=118 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=CRED_DISP msg=audit(1414327456.609:3179): pid=4326 uid=0 auid=0 ses=118 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=USER_END msg=audit(1414327456.972:3180): pid=4326 uid=0 auid=0 ses=118 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1414327457.333:3181): pid=4326 uid=0 auid=0 ses=118 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327457.333:3182): pid=4326 uid=0 auid=0 ses=118 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=4326 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327457.333:3183): pid=4326 uid=0 auid=0 ses=118 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=4326 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327457.333:3184): pid=4326 uid=0 auid=0 ses=118 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=4326 suid=0 rport=50172 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327458.909:3185): pid=4335 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=4335 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327458.909:3186): pid=4335 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=4335 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414327458.910:3187): pid=4334 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=4335 suid=74 rport=59358 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414327458.910:3188): pid=4334 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=4335 suid=74 rport=59358 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327459.446:3189): pid=4334 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=59358 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327459.446:3190): pid=4334 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=e7:e2:3d:94:48:cf:f5:8c:5e:54:98:bd:89:a5:29:a9 rport=59358 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_ACCT msg=audit(1414327459.450:3191): pid=4334 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327459.450:3192): pid=4334 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=4335 suid=74 rport=59358 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327459.451:3193): pid=4334 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1414327459.451:3194): pid=4334 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=LOGIN msg=audit(1414327459.452:3195): pid=4334 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=119 res=1 >type=USER_ROLE_CHANGE msg=audit(1414327459.522:3196): pid=4334 uid=0 auid=0 ses=119 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_START msg=audit(1414327459.538:3197): pid=4334 uid=0 auid=0 ses=119 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1414327459.541:3198): pid=4334 uid=0 auid=0 ses=119 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_START msg=audit(1414327459.541:3199): pid=4334 uid=0 auid=0 ses=119 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327459.543:3200): pid=4337 uid=0 auid=0 ses=119 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=4337 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327459.543:3201): pid=4337 uid=0 auid=0 ses=119 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=4337 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRED_REFR msg=audit(1414327459.544:3202): pid=4337 uid=0 auid=0 ses=119 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_END msg=audit(1414327459.555:3203): pid=4334 uid=0 auid=0 ses=119 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1414327459.555:3204): pid=4334 uid=0 auid=0 ses=119 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_END msg=audit(1414327459.560:3205): pid=4334 uid=0 auid=0 ses=119 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRED_DISP msg=audit(1414327459.560:3206): pid=4334 uid=0 auid=0 ses=119 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327459.561:3207): pid=4334 uid=0 auid=0 ses=119 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=4334 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327459.561:3208): pid=4334 uid=0 auid=0 ses=119 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=4334 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327459.561:3209): pid=4334 uid=0 auid=0 ses=119 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=4334 suid=0 rport=59358 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327462.580:3210): pid=4343 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=4343 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327462.581:3211): pid=4343 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=4343 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414327462.582:3212): pid=4342 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=4343 suid=74 rport=50174 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414327462.582:3213): pid=4342 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=4343 suid=74 rport=50174 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=USER_AUTH msg=audit(1414327463.114:3214): pid=4342 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=50174 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=USER_AUTH msg=audit(1414327463.114:3215): pid=4342 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=e7:e2:3d:94:48:cf:f5:8c:5e:54:98:bd:89:a5:29:a9 rport=50174 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=USER_ACCT msg=audit(1414327463.478:3216): pid=4342 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327463.478:3217): pid=4342 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=4343 suid=74 rport=50174 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=USER_AUTH msg=audit(1414327463.480:3218): pid=4342 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1414327463.841:3219): pid=4342 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=LOGIN msg=audit(1414327463.841:3220): pid=4342 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=120 res=1 >type=USER_ROLE_CHANGE msg=audit(1414327464.274:3221): pid=4342 uid=0 auid=0 ses=120 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=USER_START msg=audit(1414327464.652:3222): pid=4342 uid=0 auid=0 ses=120 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1414327465.016:3223): pid=4342 uid=0 auid=0 ses=120 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=USER_START msg=audit(1414327465.376:3224): pid=4342 uid=0 auid=0 ses=120 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327465.378:3225): pid=4345 uid=0 auid=0 ses=120 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=4345 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327465.378:3226): pid=4345 uid=0 auid=0 ses=120 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=4345 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRED_REFR msg=audit(1414327465.740:3227): pid=4345 uid=0 auid=0 ses=120 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=USER_END msg=audit(1414327466.150:3228): pid=4342 uid=0 auid=0 ses=120 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=CRED_DISP msg=audit(1414327466.511:3229): pid=4342 uid=0 auid=0 ses=120 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=USER_END msg=audit(1414327466.872:3230): pid=4342 uid=0 auid=0 ses=120 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1414327467.233:3231): pid=4342 uid=0 auid=0 ses=120 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327467.233:3232): pid=4342 uid=0 auid=0 ses=120 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=4342 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327467.233:3233): pid=4342 uid=0 auid=0 ses=120 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=4342 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327467.233:3234): pid=4342 uid=0 auid=0 ses=120 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=4342 suid=0 rport=50174 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327468.815:3235): pid=4351 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=4351 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327468.816:3236): pid=4351 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=4351 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414327468.817:3237): pid=4350 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=4351 suid=74 rport=59360 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414327468.817:3238): pid=4350 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=4351 suid=74 rport=59360 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327469.353:3239): pid=4350 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=59360 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327469.353:3240): pid=4350 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=e7:e2:3d:94:48:cf:f5:8c:5e:54:98:bd:89:a5:29:a9 rport=59360 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_ACCT msg=audit(1414327469.358:3241): pid=4350 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327469.358:3242): pid=4350 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=4351 suid=74 rport=59360 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327469.359:3243): pid=4350 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1414327469.359:3244): pid=4350 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=LOGIN msg=audit(1414327469.359:3245): pid=4350 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=121 res=1 >type=USER_ROLE_CHANGE msg=audit(1414327469.429:3246): pid=4350 uid=0 auid=0 ses=121 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_START msg=audit(1414327469.445:3247): pid=4350 uid=0 auid=0 ses=121 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1414327469.449:3248): pid=4350 uid=0 auid=0 ses=121 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_START msg=audit(1414327469.449:3249): pid=4350 uid=0 auid=0 ses=121 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327469.451:3250): pid=4353 uid=0 auid=0 ses=121 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=4353 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327469.451:3251): pid=4353 uid=0 auid=0 ses=121 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=4353 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRED_REFR msg=audit(1414327469.452:3252): pid=4353 uid=0 auid=0 ses=121 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_END msg=audit(1414327469.465:3253): pid=4350 uid=0 auid=0 ses=121 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRED_DISP msg=audit(1414327469.465:3254): pid=4350 uid=0 auid=0 ses=121 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_END msg=audit(1414327469.466:3255): pid=4350 uid=0 auid=0 ses=121 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1414327469.466:3256): pid=4350 uid=0 auid=0 ses=121 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327469.466:3257): pid=4350 uid=0 auid=0 ses=121 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=4350 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327469.467:3258): pid=4350 uid=0 auid=0 ses=121 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=4350 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327469.467:3259): pid=4350 uid=0 auid=0 ses=121 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=4350 suid=0 rport=59360 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327472.488:3260): pid=4359 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=4359 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327472.488:3261): pid=4359 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=4359 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414327472.489:3262): pid=4358 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=4359 suid=74 rport=50176 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414327472.489:3263): pid=4358 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=4359 suid=74 rport=50176 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=USER_AUTH msg=audit(1414327473.021:3264): pid=4358 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=50176 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=USER_AUTH msg=audit(1414327473.021:3265): pid=4358 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=e7:e2:3d:94:48:cf:f5:8c:5e:54:98:bd:89:a5:29:a9 rport=50176 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=USER_ACCT msg=audit(1414327473.386:3266): pid=4358 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327473.386:3267): pid=4358 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=4359 suid=74 rport=50176 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=USER_AUTH msg=audit(1414327473.387:3268): pid=4358 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1414327473.748:3269): pid=4358 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=LOGIN msg=audit(1414327473.748:3270): pid=4358 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=122 res=1 >type=USER_ROLE_CHANGE msg=audit(1414327474.181:3271): pid=4358 uid=0 auid=0 ses=122 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=USER_START msg=audit(1414327474.557:3272): pid=4358 uid=0 auid=0 ses=122 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1414327474.922:3273): pid=4358 uid=0 auid=0 ses=122 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=USER_START msg=audit(1414327475.282:3274): pid=4358 uid=0 auid=0 ses=122 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327475.283:3275): pid=4361 uid=0 auid=0 ses=122 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=4361 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327475.283:3276): pid=4361 uid=0 auid=0 ses=122 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=4361 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRED_REFR msg=audit(1414327475.645:3277): pid=4361 uid=0 auid=0 ses=122 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=USER_END msg=audit(1414327476.023:3278): pid=4358 uid=0 auid=0 ses=122 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=CRED_DISP msg=audit(1414327476.390:3279): pid=4358 uid=0 auid=0 ses=122 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=USER_END msg=audit(1414327476.754:3280): pid=4358 uid=0 auid=0 ses=122 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1414327477.115:3281): pid=4358 uid=0 auid=0 ses=122 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327477.115:3282): pid=4358 uid=0 auid=0 ses=122 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=4358 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327477.115:3283): pid=4358 uid=0 auid=0 ses=122 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=4358 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327477.115:3284): pid=4358 uid=0 auid=0 ses=122 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=4358 suid=0 rport=50176 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327478.682:3285): pid=4367 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=4367 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327478.683:3286): pid=4367 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=4367 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414327478.684:3287): pid=4366 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=4367 suid=74 rport=59362 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414327478.684:3288): pid=4366 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=4367 suid=74 rport=59362 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327479.220:3289): pid=4366 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=59362 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327479.220:3290): pid=4366 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=e7:e2:3d:94:48:cf:f5:8c:5e:54:98:bd:89:a5:29:a9 rport=59362 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_ACCT msg=audit(1414327479.224:3291): pid=4366 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327479.224:3292): pid=4366 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=4367 suid=74 rport=59362 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327479.225:3293): pid=4366 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1414327479.226:3294): pid=4366 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=LOGIN msg=audit(1414327479.226:3295): pid=4366 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=123 res=1 >type=USER_ROLE_CHANGE msg=audit(1414327479.293:3296): pid=4366 uid=0 auid=0 ses=123 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_START msg=audit(1414327479.310:3297): pid=4366 uid=0 auid=0 ses=123 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1414327479.314:3298): pid=4366 uid=0 auid=0 ses=123 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_START msg=audit(1414327479.314:3299): pid=4366 uid=0 auid=0 ses=123 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327479.316:3300): pid=4369 uid=0 auid=0 ses=123 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=4369 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327479.316:3301): pid=4369 uid=0 auid=0 ses=123 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=4369 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRED_REFR msg=audit(1414327479.317:3302): pid=4369 uid=0 auid=0 ses=123 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_END msg=audit(1414327479.330:3303): pid=4366 uid=0 auid=0 ses=123 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRED_DISP msg=audit(1414327479.331:3304): pid=4366 uid=0 auid=0 ses=123 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_END msg=audit(1414327479.331:3305): pid=4366 uid=0 auid=0 ses=123 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1414327479.331:3306): pid=4366 uid=0 auid=0 ses=123 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327479.331:3307): pid=4366 uid=0 auid=0 ses=123 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=4366 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327479.332:3308): pid=4366 uid=0 auid=0 ses=123 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=4366 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327479.332:3309): pid=4366 uid=0 auid=0 ses=123 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=4366 suid=0 rport=59362 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327482.360:3310): pid=4375 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=4375 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327482.360:3311): pid=4375 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=4375 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414327482.362:3312): pid=4374 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=4375 suid=74 rport=50178 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414327482.362:3313): pid=4374 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=4375 suid=74 rport=50178 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=USER_AUTH msg=audit(1414327482.899:3314): pid=4374 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=50178 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=USER_AUTH msg=audit(1414327482.899:3315): pid=4374 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=e7:e2:3d:94:48:cf:f5:8c:5e:54:98:bd:89:a5:29:a9 rport=50178 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=USER_ACCT msg=audit(1414327483.264:3316): pid=4374 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327483.264:3317): pid=4374 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=4375 suid=74 rport=50178 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=USER_AUTH msg=audit(1414327483.266:3318): pid=4374 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1414327483.627:3319): pid=4374 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=LOGIN msg=audit(1414327483.627:3320): pid=4374 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=124 res=1 >type=USER_ROLE_CHANGE msg=audit(1414327484.061:3321): pid=4374 uid=0 auid=0 ses=124 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=USER_START msg=audit(1414327484.438:3322): pid=4374 uid=0 auid=0 ses=124 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1414327484.803:3323): pid=4374 uid=0 auid=0 ses=124 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=USER_START msg=audit(1414327485.164:3324): pid=4374 uid=0 auid=0 ses=124 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327485.166:3325): pid=4377 uid=0 auid=0 ses=124 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=4377 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327485.166:3326): pid=4377 uid=0 auid=0 ses=124 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=4377 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRED_REFR msg=audit(1414327485.528:3327): pid=4377 uid=0 auid=0 ses=124 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=USER_END msg=audit(1414327485.904:3328): pid=4374 uid=0 auid=0 ses=124 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=CRED_DISP msg=audit(1414327486.265:3329): pid=4374 uid=0 auid=0 ses=124 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=USER_END msg=audit(1414327486.628:3330): pid=4374 uid=0 auid=0 ses=124 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1414327486.989:3331): pid=4374 uid=0 auid=0 ses=124 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327486.989:3332): pid=4374 uid=0 auid=0 ses=124 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=4374 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327486.989:3333): pid=4374 uid=0 auid=0 ses=124 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=4374 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327486.989:3334): pid=4374 uid=0 auid=0 ses=124 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=4374 suid=0 rport=50178 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327488.563:3335): pid=4383 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=4383 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327488.563:3336): pid=4383 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=4383 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414327488.565:3337): pid=4382 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=4383 suid=74 rport=59364 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414327488.565:3338): pid=4382 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=4383 suid=74 rport=59364 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327489.101:3339): pid=4382 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=59364 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327489.101:3340): pid=4382 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=e7:e2:3d:94:48:cf:f5:8c:5e:54:98:bd:89:a5:29:a9 rport=59364 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_ACCT msg=audit(1414327489.105:3341): pid=4382 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327489.105:3342): pid=4382 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=4383 suid=74 rport=59364 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327489.106:3343): pid=4382 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1414327489.106:3344): pid=4382 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=LOGIN msg=audit(1414327489.107:3345): pid=4382 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=125 res=1 >type=USER_ROLE_CHANGE msg=audit(1414327489.176:3346): pid=4382 uid=0 auid=0 ses=125 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_START msg=audit(1414327489.191:3347): pid=4382 uid=0 auid=0 ses=125 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1414327489.195:3348): pid=4382 uid=0 auid=0 ses=125 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_START msg=audit(1414327489.195:3349): pid=4382 uid=0 auid=0 ses=125 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327489.197:3350): pid=4385 uid=0 auid=0 ses=125 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=4385 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327489.197:3351): pid=4385 uid=0 auid=0 ses=125 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=4385 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRED_REFR msg=audit(1414327489.198:3352): pid=4385 uid=0 auid=0 ses=125 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_END msg=audit(1414327489.212:3353): pid=4382 uid=0 auid=0 ses=125 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRED_DISP msg=audit(1414327489.212:3354): pid=4382 uid=0 auid=0 ses=125 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_END msg=audit(1414327489.212:3355): pid=4382 uid=0 auid=0 ses=125 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1414327489.212:3356): pid=4382 uid=0 auid=0 ses=125 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327489.212:3357): pid=4382 uid=0 auid=0 ses=125 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=4382 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327489.213:3358): pid=4382 uid=0 auid=0 ses=125 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=4382 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327489.213:3359): pid=4382 uid=0 auid=0 ses=125 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=4382 suid=0 rport=59364 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327492.232:3360): pid=4391 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=4391 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327492.232:3361): pid=4391 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=4391 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414327492.233:3362): pid=4390 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=4391 suid=74 rport=50180 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414327492.233:3363): pid=4390 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=4391 suid=74 rport=50180 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=USER_AUTH msg=audit(1414327492.765:3364): pid=4390 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=50180 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=USER_AUTH msg=audit(1414327492.765:3365): pid=4390 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=e7:e2:3d:94:48:cf:f5:8c:5e:54:98:bd:89:a5:29:a9 rport=50180 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=USER_ACCT msg=audit(1414327493.130:3366): pid=4390 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327493.130:3367): pid=4390 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=4391 suid=74 rport=50180 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=USER_AUTH msg=audit(1414327493.133:3368): pid=4390 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1414327493.494:3369): pid=4390 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=LOGIN msg=audit(1414327493.494:3370): pid=4390 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=126 res=1 >type=USER_ROLE_CHANGE msg=audit(1414327493.926:3371): pid=4390 uid=0 auid=0 ses=126 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=USER_START msg=audit(1414327494.305:3372): pid=4390 uid=0 auid=0 ses=126 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1414327494.669:3373): pid=4390 uid=0 auid=0 ses=126 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=USER_START msg=audit(1414327495.030:3374): pid=4390 uid=0 auid=0 ses=126 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327495.032:3375): pid=4393 uid=0 auid=0 ses=126 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=4393 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327495.032:3376): pid=4393 uid=0 auid=0 ses=126 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=4393 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRED_REFR msg=audit(1414327495.394:3377): pid=4393 uid=0 auid=0 ses=126 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=USER_END msg=audit(1414327495.770:3378): pid=4390 uid=0 auid=0 ses=126 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=CRED_DISP msg=audit(1414327496.132:3379): pid=4390 uid=0 auid=0 ses=126 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=USER_END msg=audit(1414327496.493:3380): pid=4390 uid=0 auid=0 ses=126 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1414327496.853:3381): pid=4390 uid=0 auid=0 ses=126 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327496.853:3382): pid=4390 uid=0 auid=0 ses=126 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=4390 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327496.853:3383): pid=4390 uid=0 auid=0 ses=126 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=4390 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327496.853:3384): pid=4390 uid=0 auid=0 ses=126 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=4390 suid=0 rport=50180 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327498.430:3385): pid=4399 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=4399 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327498.430:3386): pid=4399 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=4399 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414327498.431:3387): pid=4398 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=4399 suid=74 rport=59366 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414327498.432:3388): pid=4398 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=4399 suid=74 rport=59366 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327498.969:3389): pid=4398 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=59366 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327498.969:3390): pid=4398 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=e7:e2:3d:94:48:cf:f5:8c:5e:54:98:bd:89:a5:29:a9 rport=59366 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_ACCT msg=audit(1414327498.973:3391): pid=4398 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327498.973:3392): pid=4398 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=4399 suid=74 rport=59366 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327498.975:3393): pid=4398 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1414327498.975:3394): pid=4398 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=LOGIN msg=audit(1414327498.975:3395): pid=4398 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=127 res=1 >type=USER_ROLE_CHANGE msg=audit(1414327499.046:3396): pid=4398 uid=0 auid=0 ses=127 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_START msg=audit(1414327499.061:3397): pid=4398 uid=0 auid=0 ses=127 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1414327499.065:3398): pid=4398 uid=0 auid=0 ses=127 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_START msg=audit(1414327499.065:3399): pid=4398 uid=0 auid=0 ses=127 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327499.066:3400): pid=4401 uid=0 auid=0 ses=127 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=4401 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327499.067:3401): pid=4401 uid=0 auid=0 ses=127 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=4401 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRED_REFR msg=audit(1414327499.067:3402): pid=4401 uid=0 auid=0 ses=127 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_END msg=audit(1414327499.081:3403): pid=4398 uid=0 auid=0 ses=127 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRED_DISP msg=audit(1414327499.082:3404): pid=4398 uid=0 auid=0 ses=127 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_END msg=audit(1414327499.082:3405): pid=4398 uid=0 auid=0 ses=127 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1414327499.082:3406): pid=4398 uid=0 auid=0 ses=127 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327499.083:3407): pid=4398 uid=0 auid=0 ses=127 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=4398 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327499.083:3408): pid=4398 uid=0 auid=0 ses=127 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=4398 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327499.083:3409): pid=4398 uid=0 auid=0 ses=127 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=4398 suid=0 rport=59366 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327502.102:3410): pid=4407 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=4407 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327502.102:3411): pid=4407 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=4407 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414327502.103:3412): pid=4406 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=4407 suid=74 rport=50182 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414327502.103:3413): pid=4406 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=4407 suid=74 rport=50182 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=USER_AUTH msg=audit(1414327502.679:3414): pid=4406 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=50182 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=USER_AUTH msg=audit(1414327502.679:3415): pid=4406 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=e7:e2:3d:94:48:cf:f5:8c:5e:54:98:bd:89:a5:29:a9 rport=50182 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=USER_ACCT msg=audit(1414327503.046:3416): pid=4406 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327503.046:3417): pid=4406 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=4407 suid=74 rport=50182 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=USER_AUTH msg=audit(1414327503.048:3418): pid=4406 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1414327503.410:3419): pid=4406 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=LOGIN msg=audit(1414327503.410:3420): pid=4406 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=128 res=1 >type=USER_ROLE_CHANGE msg=audit(1414327503.839:3421): pid=4406 uid=0 auid=0 ses=128 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=USER_START msg=audit(1414327504.219:3422): pid=4406 uid=0 auid=0 ses=128 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1414327504.584:3423): pid=4406 uid=0 auid=0 ses=128 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=USER_START msg=audit(1414327504.944:3424): pid=4406 uid=0 auid=0 ses=128 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327504.945:3425): pid=4409 uid=0 auid=0 ses=128 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=4409 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327504.946:3426): pid=4409 uid=0 auid=0 ses=128 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=4409 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRED_REFR msg=audit(1414327505.307:3427): pid=4409 uid=0 auid=0 ses=128 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=USER_END msg=audit(1414327505.683:3428): pid=4406 uid=0 auid=0 ses=128 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=CRED_DISP msg=audit(1414327506.044:3429): pid=4406 uid=0 auid=0 ses=128 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=USER_END msg=audit(1414327506.405:3430): pid=4406 uid=0 auid=0 ses=128 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1414327506.764:3431): pid=4406 uid=0 auid=0 ses=128 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327506.764:3432): pid=4406 uid=0 auid=0 ses=128 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=4406 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327506.764:3433): pid=4406 uid=0 auid=0 ses=128 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=4406 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327506.764:3434): pid=4406 uid=0 auid=0 ses=128 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=4406 suid=0 rport=50182 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327508.345:3435): pid=4415 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=4415 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327508.345:3436): pid=4415 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=4415 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414327508.346:3437): pid=4414 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=4415 suid=74 rport=59368 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414327508.347:3438): pid=4414 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=4415 suid=74 rport=59368 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327508.880:3439): pid=4414 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=59368 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327508.880:3440): pid=4414 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=e7:e2:3d:94:48:cf:f5:8c:5e:54:98:bd:89:a5:29:a9 rport=59368 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_ACCT msg=audit(1414327508.884:3441): pid=4414 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327508.885:3442): pid=4414 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=4415 suid=74 rport=59368 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327508.886:3443): pid=4414 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1414327508.886:3444): pid=4414 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=LOGIN msg=audit(1414327508.886:3445): pid=4414 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=129 res=1 >type=USER_ROLE_CHANGE msg=audit(1414327508.957:3446): pid=4414 uid=0 auid=0 ses=129 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_START msg=audit(1414327508.972:3447): pid=4414 uid=0 auid=0 ses=129 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1414327508.976:3448): pid=4414 uid=0 auid=0 ses=129 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_START msg=audit(1414327508.976:3449): pid=4414 uid=0 auid=0 ses=129 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327508.978:3450): pid=4417 uid=0 auid=0 ses=129 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=4417 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327508.978:3451): pid=4417 uid=0 auid=0 ses=129 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=4417 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRED_REFR msg=audit(1414327508.979:3452): pid=4417 uid=0 auid=0 ses=129 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_END msg=audit(1414327508.992:3453): pid=4414 uid=0 auid=0 ses=129 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRED_DISP msg=audit(1414327508.992:3454): pid=4414 uid=0 auid=0 ses=129 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_END msg=audit(1414327508.993:3455): pid=4414 uid=0 auid=0 ses=129 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1414327508.993:3456): pid=4414 uid=0 auid=0 ses=129 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327508.993:3457): pid=4414 uid=0 auid=0 ses=129 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=4414 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327508.993:3458): pid=4414 uid=0 auid=0 ses=129 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=4414 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327508.993:3459): pid=4414 uid=0 auid=0 ses=129 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=4414 suid=0 rport=59368 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327512.015:3460): pid=4423 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=4423 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327512.015:3461): pid=4423 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=4423 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414327512.016:3462): pid=4422 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=4423 suid=74 rport=50184 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414327512.016:3463): pid=4422 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=4423 suid=74 rport=50184 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=USER_AUTH msg=audit(1414327512.549:3464): pid=4422 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=50184 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=USER_AUTH msg=audit(1414327512.549:3465): pid=4422 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=e7:e2:3d:94:48:cf:f5:8c:5e:54:98:bd:89:a5:29:a9 rport=50184 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=USER_ACCT msg=audit(1414327512.913:3466): pid=4422 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327512.914:3467): pid=4422 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=4423 suid=74 rport=50184 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=USER_AUTH msg=audit(1414327512.915:3468): pid=4422 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1414327513.277:3469): pid=4422 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=LOGIN msg=audit(1414327513.277:3470): pid=4422 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=130 res=1 >type=USER_ROLE_CHANGE msg=audit(1414327513.707:3471): pid=4422 uid=0 auid=0 ses=130 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=USER_START msg=audit(1414327514.085:3472): pid=4422 uid=0 auid=0 ses=130 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1414327514.448:3473): pid=4422 uid=0 auid=0 ses=130 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=USER_START msg=audit(1414327514.809:3474): pid=4422 uid=0 auid=0 ses=130 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327514.811:3475): pid=4425 uid=0 auid=0 ses=130 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=4425 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327514.811:3476): pid=4425 uid=0 auid=0 ses=130 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=4425 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRED_REFR msg=audit(1414327515.173:3477): pid=4425 uid=0 auid=0 ses=130 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=USER_END msg=audit(1414327515.556:3478): pid=4422 uid=0 auid=0 ses=130 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=CRED_DISP msg=audit(1414327515.917:3479): pid=4422 uid=0 auid=0 ses=130 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=USER_END msg=audit(1414327516.279:3480): pid=4422 uid=0 auid=0 ses=130 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1414327516.638:3481): pid=4422 uid=0 auid=0 ses=130 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327516.639:3482): pid=4422 uid=0 auid=0 ses=130 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=4422 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327516.639:3483): pid=4422 uid=0 auid=0 ses=130 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=4422 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327516.639:3484): pid=4422 uid=0 auid=0 ses=130 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=4422 suid=0 rport=50184 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=ADD_GROUP msg=audit(1414327517.256:3485): pid=4429 uid=0 auid=0 ses=71 subj=unconfined_u:system_r:groupadd_t:s0-s0:c0.c1023 msg='op=adding group to /etc/group id=994 exe="/usr/sbin/groupadd" hostname=? addr=? terminal=? res=success' >type=ADD_GROUP msg=audit(1414327517.258:3486): pid=4429 uid=0 auid=0 ses=71 subj=unconfined_u:system_r:groupadd_t:s0-s0:c0.c1023 msg='op=adding group to /etc/gshadow id=994 exe="/usr/sbin/groupadd" hostname=? addr=? terminal=? res=success' >type=ADD_GROUP msg=audit(1414327517.259:3487): pid=4429 uid=0 auid=0 ses=71 subj=unconfined_u:system_r:groupadd_t:s0-s0:c0.c1023 msg='op= id=994 exe="/usr/sbin/groupadd" hostname=? addr=? terminal=? res=success' >type=ADD_USER msg=audit(1414327517.278:3488): pid=4434 uid=0 auid=0 ses=71 subj=unconfined_u:system_r:useradd_t:s0-s0:c0.c1023 msg='op=adding user id=996 exe="/usr/sbin/useradd" hostname=? addr=? terminal=? res=success' >type=NETFILTER_CFG msg=audit(1414327518.098:3489): table=filter family=2 entries=12 >type=SYSCALL msg=audit(1414327518.098:3489): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=1bf1c60 items=0 ppid=3335 pid=4456 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=71 comm="iptables" exe="/usr/sbin/xtables-multi" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null) >type=CRYPTO_KEY_USER msg=audit(1414327518.222:3490): pid=4496 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=4496 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327518.222:3491): pid=4496 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=4496 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414327518.223:3492): pid=4495 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=4496 suid=74 rport=59370 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414327518.223:3493): pid=4495 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=4496 suid=74 rport=59370 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327518.771:3494): pid=4495 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=59370 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327518.771:3495): pid=4495 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=e7:e2:3d:94:48:cf:f5:8c:5e:54:98:bd:89:a5:29:a9 rport=59370 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_ACCT msg=audit(1414327518.776:3496): pid=4495 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327518.776:3497): pid=4495 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=4496 suid=74 rport=59370 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327518.777:3498): pid=4495 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1414327518.778:3499): pid=4495 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=LOGIN msg=audit(1414327518.778:3500): pid=4495 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=131 res=1 >type=USER_ROLE_CHANGE msg=audit(1414327518.867:3501): pid=4495 uid=0 auid=0 ses=131 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_START msg=audit(1414327518.892:3502): pid=4495 uid=0 auid=0 ses=131 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1414327518.897:3503): pid=4495 uid=0 auid=0 ses=131 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_START msg=audit(1414327518.897:3504): pid=4495 uid=0 auid=0 ses=131 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327518.899:3505): pid=4533 uid=0 auid=0 ses=131 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=4533 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327518.899:3506): pid=4533 uid=0 auid=0 ses=131 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=4533 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRED_REFR msg=audit(1414327518.900:3507): pid=4533 uid=0 auid=0 ses=131 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_END msg=audit(1414327518.915:3508): pid=4495 uid=0 auid=0 ses=131 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRED_DISP msg=audit(1414327518.915:3509): pid=4495 uid=0 auid=0 ses=131 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_END msg=audit(1414327518.916:3510): pid=4495 uid=0 auid=0 ses=131 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1414327518.916:3511): pid=4495 uid=0 auid=0 ses=131 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327518.916:3512): pid=4495 uid=0 auid=0 ses=131 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=4495 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327518.916:3513): pid=4495 uid=0 auid=0 ses=131 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=4495 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327518.916:3514): pid=4495 uid=0 auid=0 ses=131 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=4495 suid=0 rport=59370 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327521.941:3515): pid=4664 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=4664 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327521.941:3516): pid=4664 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=4664 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414327521.943:3517): pid=4663 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=4664 suid=74 rport=50187 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414327521.943:3518): pid=4663 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=4664 suid=74 rport=50187 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=USER_AUTH msg=audit(1414327522.475:3519): pid=4663 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=50187 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=USER_AUTH msg=audit(1414327522.475:3520): pid=4663 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=e7:e2:3d:94:48:cf:f5:8c:5e:54:98:bd:89:a5:29:a9 rport=50187 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=USER_ACCT msg=audit(1414327522.840:3521): pid=4663 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327522.841:3522): pid=4663 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=4664 suid=74 rport=50187 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=USER_AUTH msg=audit(1414327522.842:3523): pid=4663 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=ssh res=success' >type=SERVICE_START msg=audit(1414327522.922:3524): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="rabbitmq-server" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=CRED_ACQ msg=audit(1414327523.205:3525): pid=4663 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=LOGIN msg=audit(1414327523.205:3526): pid=4663 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=132 res=1 >type=USER_ROLE_CHANGE msg=audit(1414327523.639:3527): pid=4663 uid=0 auid=0 ses=132 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=USER_START msg=audit(1414327524.041:3528): pid=4663 uid=0 auid=0 ses=132 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1414327524.407:3529): pid=4663 uid=0 auid=0 ses=132 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=USER_START msg=audit(1414327524.767:3530): pid=4663 uid=0 auid=0 ses=132 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327524.769:3531): pid=4690 uid=0 auid=0 ses=132 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=4690 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327524.769:3532): pid=4690 uid=0 auid=0 ses=132 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=4690 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRED_REFR msg=audit(1414327525.130:3533): pid=4690 uid=0 auid=0 ses=132 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=USER_END msg=audit(1414327525.508:3534): pid=4663 uid=0 auid=0 ses=132 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=CRED_DISP msg=audit(1414327525.868:3535): pid=4663 uid=0 auid=0 ses=132 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=USER_END msg=audit(1414327526.231:3536): pid=4663 uid=0 auid=0 ses=132 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1414327526.592:3537): pid=4663 uid=0 auid=0 ses=132 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327526.592:3538): pid=4663 uid=0 auid=0 ses=132 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=4663 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327526.593:3539): pid=4663 uid=0 auid=0 ses=132 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=4663 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327526.593:3540): pid=4663 uid=0 auid=0 ses=132 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=4663 suid=0 rport=50187 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327528.171:3541): pid=4696 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=4696 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327528.171:3542): pid=4696 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=4696 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414327528.173:3543): pid=4695 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=4696 suid=74 rport=59373 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414327528.173:3544): pid=4695 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=4696 suid=74 rport=59373 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327528.711:3545): pid=4695 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=59373 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327528.711:3546): pid=4695 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=e7:e2:3d:94:48:cf:f5:8c:5e:54:98:bd:89:a5:29:a9 rport=59373 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_ACCT msg=audit(1414327528.715:3547): pid=4695 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327528.716:3548): pid=4695 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=4696 suid=74 rport=59373 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327528.717:3549): pid=4695 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1414327528.717:3550): pid=4695 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=LOGIN msg=audit(1414327528.717:3551): pid=4695 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=133 res=1 >type=USER_ROLE_CHANGE msg=audit(1414327528.794:3552): pid=4695 uid=0 auid=0 ses=133 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_START msg=audit(1414327528.812:3553): pid=4695 uid=0 auid=0 ses=133 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1414327528.822:3554): pid=4695 uid=0 auid=0 ses=133 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_START msg=audit(1414327528.822:3555): pid=4695 uid=0 auid=0 ses=133 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327528.824:3556): pid=4704 uid=0 auid=0 ses=133 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=4704 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327528.824:3557): pid=4704 uid=0 auid=0 ses=133 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=4704 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRED_REFR msg=audit(1414327528.825:3558): pid=4704 uid=0 auid=0 ses=133 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_END msg=audit(1414327528.850:3559): pid=4695 uid=0 auid=0 ses=133 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRED_DISP msg=audit(1414327528.850:3560): pid=4695 uid=0 auid=0 ses=133 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_END msg=audit(1414327528.851:3561): pid=4695 uid=0 auid=0 ses=133 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1414327528.851:3562): pid=4695 uid=0 auid=0 ses=133 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327528.851:3563): pid=4695 uid=0 auid=0 ses=133 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=4695 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327528.851:3564): pid=4695 uid=0 auid=0 ses=133 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=4695 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327528.851:3565): pid=4695 uid=0 auid=0 ses=133 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=4695 suid=0 rport=59373 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327528.871:3566): pid=4710 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=4710 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327528.871:3567): pid=4710 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=4710 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414327528.872:3568): pid=4709 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=4710 suid=74 rport=50189 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414327528.872:3569): pid=4709 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=4710 suid=74 rport=50189 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=USER_AUTH msg=audit(1414327529.413:3570): pid=4709 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=50189 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=USER_AUTH msg=audit(1414327529.413:3571): pid=4709 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=e7:e2:3d:94:48:cf:f5:8c:5e:54:98:bd:89:a5:29:a9 rport=50189 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=USER_ACCT msg=audit(1414327529.782:3572): pid=4709 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327529.783:3573): pid=4709 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=4710 suid=74 rport=50189 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=USER_AUTH msg=audit(1414327529.785:3574): pid=4709 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1414327530.147:3575): pid=4709 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=LOGIN msg=audit(1414327530.147:3576): pid=4709 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=134 res=1 >type=USER_ROLE_CHANGE msg=audit(1414327530.579:3577): pid=4709 uid=0 auid=0 ses=134 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=USER_START msg=audit(1414327530.962:3578): pid=4709 uid=0 auid=0 ses=134 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1414327531.328:3579): pid=4709 uid=0 auid=0 ses=134 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=USER_START msg=audit(1414327531.690:3580): pid=4709 uid=0 auid=0 ses=134 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327531.692:3581): pid=4715 uid=0 auid=0 ses=134 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=4715 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327531.692:3582): pid=4715 uid=0 auid=0 ses=134 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=4715 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRED_REFR msg=audit(1414327532.060:3583): pid=4715 uid=0 auid=0 ses=134 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=USER_END msg=audit(1414327532.436:3584): pid=4709 uid=0 auid=0 ses=134 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=CRED_DISP msg=audit(1414327532.799:3585): pid=4709 uid=0 auid=0 ses=134 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=USER_END msg=audit(1414327533.160:3586): pid=4709 uid=0 auid=0 ses=134 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1414327533.521:3587): pid=4709 uid=0 auid=0 ses=134 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327533.521:3588): pid=4709 uid=0 auid=0 ses=134 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=4709 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327533.521:3589): pid=4709 uid=0 auid=0 ses=134 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=4709 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327533.521:3590): pid=4709 uid=0 auid=0 ses=134 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=4709 suid=0 rport=50189 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327535.096:3591): pid=4735 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=4735 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327535.096:3592): pid=4735 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=4735 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414327535.097:3593): pid=4734 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=4735 suid=74 rport=50198 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414327535.097:3594): pid=4734 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=4735 suid=74 rport=50198 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=USER_AUTH msg=audit(1414327535.631:3595): pid=4734 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=50198 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=USER_AUTH msg=audit(1414327535.631:3596): pid=4734 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=e7:e2:3d:94:48:cf:f5:8c:5e:54:98:bd:89:a5:29:a9 rport=50198 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=USER_ACCT msg=audit(1414327535.999:3597): pid=4734 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327535.999:3598): pid=4734 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=4735 suid=74 rport=50198 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=USER_AUTH msg=audit(1414327536.001:3599): pid=4734 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1414327536.362:3600): pid=4734 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=LOGIN msg=audit(1414327536.362:3601): pid=4734 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=135 res=1 >type=USER_ROLE_CHANGE msg=audit(1414327536.795:3602): pid=4734 uid=0 auid=0 ses=135 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=USER_START msg=audit(1414327537.177:3603): pid=4734 uid=0 auid=0 ses=135 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1414327537.542:3604): pid=4734 uid=0 auid=0 ses=135 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=USER_START msg=audit(1414327537.911:3605): pid=4734 uid=0 auid=0 ses=135 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327537.913:3606): pid=4737 uid=0 auid=0 ses=135 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=4737 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327537.913:3607): pid=4737 uid=0 auid=0 ses=135 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=4737 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRED_REFR msg=audit(1414327538.276:3608): pid=4737 uid=0 auid=0 ses=135 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=USER_END msg=audit(1414327538.654:3609): pid=4734 uid=0 auid=0 ses=135 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=CRED_DISP msg=audit(1414327539.016:3610): pid=4734 uid=0 auid=0 ses=135 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=USER_END msg=audit(1414327539.377:3611): pid=4734 uid=0 auid=0 ses=135 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1414327539.740:3612): pid=4734 uid=0 auid=0 ses=135 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327539.740:3613): pid=4734 uid=0 auid=0 ses=135 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=4734 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327539.740:3614): pid=4734 uid=0 auid=0 ses=135 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=4734 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327539.740:3615): pid=4734 uid=0 auid=0 ses=135 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=4734 suid=0 rport=50198 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327541.311:3616): pid=4743 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=4743 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327541.311:3617): pid=4743 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=4743 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414327541.312:3618): pid=4742 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=4743 suid=74 rport=50199 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414327541.312:3619): pid=4742 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=4743 suid=74 rport=50199 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=USER_AUTH msg=audit(1414327541.846:3620): pid=4742 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=50199 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=USER_AUTH msg=audit(1414327541.846:3621): pid=4742 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=e7:e2:3d:94:48:cf:f5:8c:5e:54:98:bd:89:a5:29:a9 rport=50199 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=USER_ACCT msg=audit(1414327542.211:3622): pid=4742 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327542.211:3623): pid=4742 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=4743 suid=74 rport=50199 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=USER_AUTH msg=audit(1414327542.213:3624): pid=4742 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1414327542.574:3625): pid=4742 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=LOGIN msg=audit(1414327542.574:3626): pid=4742 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=136 res=1 >type=USER_ROLE_CHANGE msg=audit(1414327543.010:3627): pid=4742 uid=0 auid=0 ses=136 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=USER_START msg=audit(1414327543.386:3628): pid=4742 uid=0 auid=0 ses=136 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1414327543.750:3629): pid=4742 uid=0 auid=0 ses=136 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=USER_START msg=audit(1414327544.110:3630): pid=4742 uid=0 auid=0 ses=136 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327544.112:3631): pid=4747 uid=0 auid=0 ses=136 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=4747 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327544.113:3632): pid=4747 uid=0 auid=0 ses=136 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=4747 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRED_REFR msg=audit(1414327544.476:3633): pid=4747 uid=0 auid=0 ses=136 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=USER_END msg=audit(1414327544.862:3634): pid=4742 uid=0 auid=0 ses=136 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=CRED_DISP msg=audit(1414327545.223:3635): pid=4742 uid=0 auid=0 ses=136 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=USER_END msg=audit(1414327545.585:3636): pid=4742 uid=0 auid=0 ses=136 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1414327545.947:3637): pid=4742 uid=0 auid=0 ses=136 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327545.947:3638): pid=4742 uid=0 auid=0 ses=136 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=4742 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327545.947:3639): pid=4742 uid=0 auid=0 ses=136 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=4742 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327545.947:3640): pid=4742 uid=0 auid=0 ses=136 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=4742 suid=0 rport=50199 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327547.514:3641): pid=4753 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=4753 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327547.514:3642): pid=4753 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=4753 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414327547.515:3643): pid=4752 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=4753 suid=74 rport=50200 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414327547.515:3644): pid=4752 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=4753 suid=74 rport=50200 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=USER_AUTH msg=audit(1414327548.050:3645): pid=4752 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=50200 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=USER_AUTH msg=audit(1414327548.050:3646): pid=4752 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=e7:e2:3d:94:48:cf:f5:8c:5e:54:98:bd:89:a5:29:a9 rport=50200 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=USER_ACCT msg=audit(1414327548.415:3647): pid=4752 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327548.416:3648): pid=4752 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=4753 suid=74 rport=50200 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=USER_AUTH msg=audit(1414327548.417:3649): pid=4752 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1414327548.778:3650): pid=4752 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=LOGIN msg=audit(1414327548.778:3651): pid=4752 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=137 res=1 >type=USER_ROLE_CHANGE msg=audit(1414327549.211:3652): pid=4752 uid=0 auid=0 ses=137 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=USER_START msg=audit(1414327549.592:3653): pid=4752 uid=0 auid=0 ses=137 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1414327549.957:3654): pid=4752 uid=0 auid=0 ses=137 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=USER_START msg=audit(1414327550.318:3655): pid=4752 uid=0 auid=0 ses=137 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327550.321:3656): pid=4755 uid=0 auid=0 ses=137 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=4755 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327550.321:3657): pid=4755 uid=0 auid=0 ses=137 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=4755 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRED_REFR msg=audit(1414327550.684:3658): pid=4755 uid=0 auid=0 ses=137 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=USER_END msg=audit(1414327551.061:3659): pid=4752 uid=0 auid=0 ses=137 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=CRED_DISP msg=audit(1414327551.422:3660): pid=4752 uid=0 auid=0 ses=137 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=USER_END msg=audit(1414327551.785:3661): pid=4752 uid=0 auid=0 ses=137 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1414327552.147:3662): pid=4752 uid=0 auid=0 ses=137 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327552.147:3663): pid=4752 uid=0 auid=0 ses=137 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=4752 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327552.147:3664): pid=4752 uid=0 auid=0 ses=137 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=4752 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327552.147:3665): pid=4752 uid=0 auid=0 ses=137 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=4752 suid=0 rport=50200 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=ADD_GROUP msg=audit(1414327552.802:3666): pid=4774 uid=0 auid=0 ses=72 subj=unconfined_u:system_r:groupadd_t:s0-s0:c0.c1023 msg='op=adding group to /etc/group id=27 exe="/usr/sbin/groupadd" hostname=? addr=? terminal=? res=success' >type=ADD_GROUP msg=audit(1414327552.804:3667): pid=4774 uid=0 auid=0 ses=72 subj=unconfined_u:system_r:groupadd_t:s0-s0:c0.c1023 msg='op=adding group to /etc/gshadow id=27 exe="/usr/sbin/groupadd" hostname=? addr=? terminal=? res=success' >type=ADD_GROUP msg=audit(1414327552.805:3668): pid=4774 uid=0 auid=0 ses=72 subj=unconfined_u:system_r:groupadd_t:s0-s0:c0.c1023 msg='op= id=27 exe="/usr/sbin/groupadd" hostname=? addr=? terminal=? res=success' >type=ADD_USER msg=audit(1414327552.812:3669): pid=4778 uid=0 auid=0 ses=72 subj=unconfined_u:system_r:useradd_t:s0-s0:c0.c1023 msg='op=adding user id=27 exe="/usr/sbin/useradd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327553.727:3670): pid=4789 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=4789 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327553.727:3671): pid=4789 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=4789 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414327553.728:3672): pid=4788 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=4789 suid=74 rport=50201 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414327553.728:3673): pid=4788 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=4789 suid=74 rport=50201 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=USER_AUTH msg=audit(1414327554.262:3674): pid=4788 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=50201 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=USER_AUTH msg=audit(1414327554.262:3675): pid=4788 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=e7:e2:3d:94:48:cf:f5:8c:5e:54:98:bd:89:a5:29:a9 rport=50201 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=USER_ACCT msg=audit(1414327554.628:3676): pid=4788 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327554.629:3677): pid=4788 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=4789 suid=74 rport=50201 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=USER_AUTH msg=audit(1414327554.632:3678): pid=4788 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1414327554.994:3679): pid=4788 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=LOGIN msg=audit(1414327554.994:3680): pid=4788 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=138 res=1 >type=USER_ROLE_CHANGE msg=audit(1414327555.432:3681): pid=4788 uid=0 auid=0 ses=138 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=USER_START msg=audit(1414327555.807:3682): pid=4788 uid=0 auid=0 ses=138 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1414327556.173:3683): pid=4788 uid=0 auid=0 ses=138 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=USER_START msg=audit(1414327556.533:3684): pid=4788 uid=0 auid=0 ses=138 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327556.534:3685): pid=4899 uid=0 auid=0 ses=138 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=4899 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327556.534:3686): pid=4899 uid=0 auid=0 ses=138 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=4899 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRED_REFR msg=audit(1414327556.895:3687): pid=4899 uid=0 auid=0 ses=138 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=USER_END msg=audit(1414327557.271:3688): pid=4788 uid=0 auid=0 ses=138 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=CRED_DISP msg=audit(1414327557.632:3689): pid=4788 uid=0 auid=0 ses=138 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=USER_END msg=audit(1414327557.995:3690): pid=4788 uid=0 auid=0 ses=138 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1414327558.356:3691): pid=4788 uid=0 auid=0 ses=138 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327558.356:3692): pid=4788 uid=0 auid=0 ses=138 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=4788 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327558.356:3693): pid=4788 uid=0 auid=0 ses=138 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=4788 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327558.357:3694): pid=4788 uid=0 auid=0 ses=138 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=4788 suid=0 rport=50201 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327559.932:3695): pid=5773 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=5773 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327559.932:3696): pid=5773 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=5773 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414327559.933:3697): pid=5772 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=5773 suid=74 rport=50202 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414327559.933:3698): pid=5772 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=5773 suid=74 rport=50202 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=USER_AUTH msg=audit(1414327560.465:3699): pid=5772 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=50202 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=USER_AUTH msg=audit(1414327560.465:3700): pid=5772 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=e7:e2:3d:94:48:cf:f5:8c:5e:54:98:bd:89:a5:29:a9 rport=50202 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=USER_ACCT msg=audit(1414327560.831:3701): pid=5772 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327560.831:3702): pid=5772 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=5773 suid=74 rport=50202 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=USER_AUTH msg=audit(1414327560.833:3703): pid=5772 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1414327561.195:3704): pid=5772 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=LOGIN msg=audit(1414327561.195:3705): pid=5772 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=139 res=1 >type=USER_ROLE_CHANGE msg=audit(1414327561.642:3706): pid=5772 uid=0 auid=0 ses=139 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=USER_START msg=audit(1414327562.023:3707): pid=5772 uid=0 auid=0 ses=139 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1414327562.390:3708): pid=5772 uid=0 auid=0 ses=139 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=USER_START msg=audit(1414327562.752:3709): pid=5772 uid=0 auid=0 ses=139 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327562.753:3710): pid=5823 uid=0 auid=0 ses=139 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=5823 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327562.754:3711): pid=5823 uid=0 auid=0 ses=139 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=5823 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRED_REFR msg=audit(1414327563.115:3712): pid=5823 uid=0 auid=0 ses=139 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=USER_END msg=audit(1414327563.492:3713): pid=5772 uid=0 auid=0 ses=139 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=SERVICE_START msg=audit(1414327563.791:3714): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="mariadb" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1414327563.854:3715): pid=5772 uid=0 auid=0 ses=139 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=USER_END msg=audit(1414327564.217:3716): pid=5772 uid=0 auid=0 ses=139 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1414327564.580:3717): pid=5772 uid=0 auid=0 ses=139 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327564.580:3718): pid=5772 uid=0 auid=0 ses=139 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=5772 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327564.580:3719): pid=5772 uid=0 auid=0 ses=139 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=5772 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327564.580:3720): pid=5772 uid=0 auid=0 ses=139 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=5772 suid=0 rport=50202 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=NETFILTER_CFG msg=audit(1414327564.857:3721): table=filter family=2 entries=13 >type=SYSCALL msg=audit(1414327564.857:3721): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=6e80b0 items=0 ppid=3478 pid=6114 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=72 comm="iptables" exe="/usr/sbin/xtables-multi" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null) >type=CRYPTO_KEY_USER msg=audit(1414327566.152:3722): pid=6147 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=6147 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327566.152:3723): pid=6147 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=6147 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414327566.154:3724): pid=6146 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=6147 suid=74 rport=50203 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414327566.154:3725): pid=6146 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=6147 suid=74 rport=50203 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=USER_AUTH msg=audit(1414327566.687:3726): pid=6146 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=50203 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=USER_AUTH msg=audit(1414327566.687:3727): pid=6146 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=e7:e2:3d:94:48:cf:f5:8c:5e:54:98:bd:89:a5:29:a9 rport=50203 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=USER_ACCT msg=audit(1414327567.053:3728): pid=6146 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327567.053:3729): pid=6146 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=6147 suid=74 rport=50203 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=USER_AUTH msg=audit(1414327567.056:3730): pid=6146 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1414327567.417:3731): pid=6146 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=LOGIN msg=audit(1414327567.417:3732): pid=6146 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=140 res=1 >type=USER_ROLE_CHANGE msg=audit(1414327567.854:3733): pid=6146 uid=0 auid=0 ses=140 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=USER_START msg=audit(1414327568.264:3734): pid=6146 uid=0 auid=0 ses=140 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1414327568.629:3735): pid=6146 uid=0 auid=0 ses=140 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=USER_START msg=audit(1414327568.990:3736): pid=6146 uid=0 auid=0 ses=140 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327568.992:3737): pid=6149 uid=0 auid=0 ses=140 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=6149 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327568.992:3738): pid=6149 uid=0 auid=0 ses=140 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=6149 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRED_REFR msg=audit(1414327569.354:3739): pid=6149 uid=0 auid=0 ses=140 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327569.386:3740): pid=6152 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=6152 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327569.387:3741): pid=6152 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=6152 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414327569.388:3742): pid=6151 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=6152 suid=74 rport=59389 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414327569.388:3743): pid=6151 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=6152 suid=74 rport=59389 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_END msg=audit(1414327569.732:3744): pid=6146 uid=0 auid=0 ses=140 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=USER_AUTH msg=audit(1414327569.924:3745): pid=6151 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=59389 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327569.924:3746): pid=6151 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=e7:e2:3d:94:48:cf:f5:8c:5e:54:98:bd:89:a5:29:a9 rport=59389 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_ACCT msg=audit(1414327569.928:3747): pid=6151 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327569.928:3748): pid=6151 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=6152 suid=74 rport=59389 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327569.929:3749): pid=6151 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1414327569.929:3750): pid=6151 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=LOGIN msg=audit(1414327569.929:3751): pid=6151 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=141 res=1 >type=USER_ROLE_CHANGE msg=audit(1414327569.999:3752): pid=6151 uid=0 auid=0 ses=141 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_START msg=audit(1414327570.016:3753): pid=6151 uid=0 auid=0 ses=141 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1414327570.020:3754): pid=6151 uid=0 auid=0 ses=141 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_START msg=audit(1414327570.020:3755): pid=6151 uid=0 auid=0 ses=141 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327570.022:3756): pid=6154 uid=0 auid=0 ses=141 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=6154 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327570.022:3757): pid=6154 uid=0 auid=0 ses=141 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=6154 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRED_REFR msg=audit(1414327570.023:3758): pid=6154 uid=0 auid=0 ses=141 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_END msg=audit(1414327570.042:3759): pid=6151 uid=0 auid=0 ses=141 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRED_DISP msg=audit(1414327570.043:3760): pid=6151 uid=0 auid=0 ses=141 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_END msg=audit(1414327570.043:3761): pid=6151 uid=0 auid=0 ses=141 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1414327570.043:3762): pid=6151 uid=0 auid=0 ses=141 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327570.044:3763): pid=6151 uid=0 auid=0 ses=141 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=6151 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327570.044:3764): pid=6151 uid=0 auid=0 ses=141 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=6151 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327570.044:3765): pid=6151 uid=0 auid=0 ses=141 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=6151 suid=0 rport=59389 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327570.055:3766): pid=6163 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=6163 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327570.055:3767): pid=6163 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=6163 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414327570.056:3768): pid=6162 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=6163 suid=74 rport=59390 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414327570.056:3769): pid=6162 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=6163 suid=74 rport=59390 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRED_DISP msg=audit(1414327570.094:3770): pid=6146 uid=0 auid=0 ses=140 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=USER_END msg=audit(1414327570.456:3771): pid=6146 uid=0 auid=0 ses=140 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=USER_AUTH msg=audit(1414327570.594:3772): pid=6162 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=59390 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327570.594:3773): pid=6162 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=e7:e2:3d:94:48:cf:f5:8c:5e:54:98:bd:89:a5:29:a9 rport=59390 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_ACCT msg=audit(1414327570.598:3774): pid=6162 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327570.599:3775): pid=6162 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=6163 suid=74 rport=59390 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327570.600:3776): pid=6162 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1414327570.600:3777): pid=6162 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=LOGIN msg=audit(1414327570.600:3778): pid=6162 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=142 res=1 >type=USER_ROLE_CHANGE msg=audit(1414327570.668:3779): pid=6162 uid=0 auid=0 ses=142 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_START msg=audit(1414327570.684:3780): pid=6162 uid=0 auid=0 ses=142 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1414327570.688:3781): pid=6162 uid=0 auid=0 ses=142 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_START msg=audit(1414327570.688:3782): pid=6162 uid=0 auid=0 ses=142 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327570.690:3783): pid=6171 uid=0 auid=0 ses=142 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=6171 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327570.690:3784): pid=6171 uid=0 auid=0 ses=142 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=6171 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRED_REFR msg=audit(1414327570.691:3785): pid=6171 uid=0 auid=0 ses=142 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_END msg=audit(1414327570.708:3786): pid=6162 uid=0 auid=0 ses=142 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRED_DISP msg=audit(1414327570.708:3787): pid=6162 uid=0 auid=0 ses=142 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_END msg=audit(1414327570.709:3788): pid=6162 uid=0 auid=0 ses=142 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1414327570.709:3789): pid=6162 uid=0 auid=0 ses=142 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327570.710:3790): pid=6162 uid=0 auid=0 ses=142 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=6162 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327570.710:3791): pid=6162 uid=0 auid=0 ses=142 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=6162 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327570.710:3792): pid=6162 uid=0 auid=0 ses=142 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=6162 suid=0 rport=59390 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327570.722:3793): pid=6178 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=6178 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327570.722:3794): pid=6178 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=6178 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414327570.723:3795): pid=6177 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=6178 suid=74 rport=59391 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414327570.723:3796): pid=6177 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=6178 suid=74 rport=59391 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_LOGOUT msg=audit(1414327570.818:3797): pid=6146 uid=0 auid=0 ses=140 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327570.818:3798): pid=6146 uid=0 auid=0 ses=140 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=6146 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327570.818:3799): pid=6146 uid=0 auid=0 ses=140 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=6146 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327570.818:3800): pid=6146 uid=0 auid=0 ses=140 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=6146 suid=0 rport=50203 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=USER_AUTH msg=audit(1414327571.260:3801): pid=6177 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=59391 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327571.260:3802): pid=6177 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=e7:e2:3d:94:48:cf:f5:8c:5e:54:98:bd:89:a5:29:a9 rport=59391 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_ACCT msg=audit(1414327571.264:3803): pid=6177 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327571.265:3804): pid=6177 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=6178 suid=74 rport=59391 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327571.266:3805): pid=6177 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1414327571.266:3806): pid=6177 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=LOGIN msg=audit(1414327571.266:3807): pid=6177 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=143 res=1 >type=USER_ROLE_CHANGE msg=audit(1414327571.340:3808): pid=6177 uid=0 auid=0 ses=143 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_START msg=audit(1414327571.359:3809): pid=6177 uid=0 auid=0 ses=143 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1414327571.364:3810): pid=6177 uid=0 auid=0 ses=143 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_START msg=audit(1414327571.364:3811): pid=6177 uid=0 auid=0 ses=143 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327571.366:3812): pid=6181 uid=0 auid=0 ses=143 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=6181 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327571.366:3813): pid=6181 uid=0 auid=0 ses=143 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=6181 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRED_REFR msg=audit(1414327571.367:3814): pid=6181 uid=0 auid=0 ses=143 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_END msg=audit(1414327571.386:3815): pid=6177 uid=0 auid=0 ses=143 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRED_DISP msg=audit(1414327571.386:3816): pid=6177 uid=0 auid=0 ses=143 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_END msg=audit(1414327571.387:3817): pid=6177 uid=0 auid=0 ses=143 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1414327571.387:3818): pid=6177 uid=0 auid=0 ses=143 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327571.387:3819): pid=6177 uid=0 auid=0 ses=143 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=6177 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327571.388:3820): pid=6177 uid=0 auid=0 ses=143 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=6177 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327571.388:3821): pid=6177 uid=0 auid=0 ses=143 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=6177 suid=0 rport=59391 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327571.402:3822): pid=6191 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=6191 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327571.403:3823): pid=6191 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=6191 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414327571.404:3824): pid=6190 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=6191 suid=74 rport=59392 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414327571.405:3825): pid=6190 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=6191 suid=74 rport=59392 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327571.945:3826): pid=6190 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=59392 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327571.945:3827): pid=6190 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=e7:e2:3d:94:48:cf:f5:8c:5e:54:98:bd:89:a5:29:a9 rport=59392 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_ACCT msg=audit(1414327571.950:3828): pid=6190 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327571.950:3829): pid=6190 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=6191 suid=74 rport=59392 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327571.951:3830): pid=6190 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1414327571.951:3831): pid=6190 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=LOGIN msg=audit(1414327571.952:3832): pid=6190 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=144 res=1 >type=USER_ROLE_CHANGE msg=audit(1414327572.024:3833): pid=6190 uid=0 auid=0 ses=144 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_START msg=audit(1414327572.041:3834): pid=6190 uid=0 auid=0 ses=144 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1414327572.046:3835): pid=6190 uid=0 auid=0 ses=144 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_START msg=audit(1414327572.046:3836): pid=6190 uid=0 auid=0 ses=144 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327572.048:3837): pid=6196 uid=0 auid=0 ses=144 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=6196 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327572.049:3838): pid=6196 uid=0 auid=0 ses=144 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=6196 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRED_REFR msg=audit(1414327572.050:3839): pid=6196 uid=0 auid=0 ses=144 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_END msg=audit(1414327572.066:3840): pid=6190 uid=0 auid=0 ses=144 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRED_DISP msg=audit(1414327572.066:3841): pid=6190 uid=0 auid=0 ses=144 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_END msg=audit(1414327572.067:3842): pid=6190 uid=0 auid=0 ses=144 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1414327572.067:3843): pid=6190 uid=0 auid=0 ses=144 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327572.067:3844): pid=6190 uid=0 auid=0 ses=144 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=6190 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327572.067:3845): pid=6190 uid=0 auid=0 ses=144 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=6190 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327572.067:3846): pid=6190 uid=0 auid=0 ses=144 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=6190 suid=0 rport=59392 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=NETFILTER_CFG msg=audit(1414327575.073:3847): table=filter family=2 entries=0 >type=SYSCALL msg=audit(1414327575.073:3847): arch=c000003e syscall=272 success=yes exit=0 a0=40000000 a1=c0 a2=0 a3=7ffff033d3f0 items=0 ppid=6328 pid=6337 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=141 comm="ip" exe="/usr/sbin/ip" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null) >type=CRYPTO_KEY_USER msg=audit(1414327575.090:3848): pid=6344 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=6344 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327575.090:3849): pid=6344 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=6344 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414327575.091:3850): pid=6339 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=6344 suid=74 rport=59415 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414327575.092:3851): pid=6339 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=6344 suid=74 rport=59415 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=NETFILTER_CFG msg=audit(1414327575.130:3852): table=filter family=2 entries=0 >type=SYSCALL msg=audit(1414327575.130:3852): arch=c000003e syscall=272 success=yes exit=0 a0=40000000 a1=c0 a2=0 a3=7fff261108b0 items=0 ppid=6328 pid=6347 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=141 comm="ip" exe="/usr/sbin/ip" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null) >type=NETFILTER_CFG msg=audit(1414327575.454:3853): table=filter family=2 entries=0 >type=SYSCALL msg=audit(1414327575.454:3853): arch=c000003e syscall=272 success=yes exit=0 a0=40000000 a1=c0 a2=0 a3=7fffa9d906b0 items=0 ppid=6328 pid=6349 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=141 comm="ip" exe="/usr/sbin/ip" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null) >type=USER_AUTH msg=audit(1414327575.628:3854): pid=6339 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=59415 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327575.628:3855): pid=6339 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=e7:e2:3d:94:48:cf:f5:8c:5e:54:98:bd:89:a5:29:a9 rport=59415 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_ACCT msg=audit(1414327575.636:3856): pid=6339 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327575.637:3857): pid=6339 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=6344 suid=74 rport=59415 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327575.638:3858): pid=6339 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1414327575.638:3859): pid=6339 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=LOGIN msg=audit(1414327575.638:3860): pid=6339 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=145 res=1 >type=USER_ROLE_CHANGE msg=audit(1414327575.714:3861): pid=6339 uid=0 auid=0 ses=145 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_START msg=audit(1414327575.731:3862): pid=6339 uid=0 auid=0 ses=145 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1414327575.734:3863): pid=6339 uid=0 auid=0 ses=145 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_START msg=audit(1414327575.734:3864): pid=6339 uid=0 auid=0 ses=145 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327575.735:3865): pid=6361 uid=0 auid=0 ses=145 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=6361 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327575.735:3866): pid=6361 uid=0 auid=0 ses=145 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=6361 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRED_REFR msg=audit(1414327575.736:3867): pid=6361 uid=0 auid=0 ses=145 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_END msg=audit(1414327575.750:3868): pid=6339 uid=0 auid=0 ses=145 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRED_DISP msg=audit(1414327575.750:3869): pid=6339 uid=0 auid=0 ses=145 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_END msg=audit(1414327575.751:3870): pid=6339 uid=0 auid=0 ses=145 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1414327575.751:3871): pid=6339 uid=0 auid=0 ses=145 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327575.751:3872): pid=6339 uid=0 auid=0 ses=145 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=6339 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327575.751:3873): pid=6339 uid=0 auid=0 ses=145 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=6339 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327575.752:3874): pid=6339 uid=0 auid=0 ses=145 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=6339 suid=0 rport=59415 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327578.775:3875): pid=6391 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=6391 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327578.775:3876): pid=6391 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=6391 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414327578.776:3877): pid=6390 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=6391 suid=74 rport=59416 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414327578.777:3878): pid=6390 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=6391 suid=74 rport=59416 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327579.315:3879): pid=6390 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=59416 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327579.316:3880): pid=6390 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=e7:e2:3d:94:48:cf:f5:8c:5e:54:98:bd:89:a5:29:a9 rport=59416 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_ACCT msg=audit(1414327579.320:3881): pid=6390 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327579.321:3882): pid=6390 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=6391 suid=74 rport=59416 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327579.322:3883): pid=6390 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1414327579.322:3884): pid=6390 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=LOGIN msg=audit(1414327579.322:3885): pid=6390 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=146 res=1 >type=USER_ROLE_CHANGE msg=audit(1414327579.399:3886): pid=6390 uid=0 auid=0 ses=146 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_START msg=audit(1414327579.417:3887): pid=6390 uid=0 auid=0 ses=146 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1414327579.421:3888): pid=6390 uid=0 auid=0 ses=146 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_START msg=audit(1414327579.421:3889): pid=6390 uid=0 auid=0 ses=146 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327579.422:3890): pid=6399 uid=0 auid=0 ses=146 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=6399 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327579.422:3891): pid=6399 uid=0 auid=0 ses=146 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=6399 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRED_REFR msg=audit(1414327579.423:3892): pid=6399 uid=0 auid=0 ses=146 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_END msg=audit(1414327579.438:3893): pid=6390 uid=0 auid=0 ses=146 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRED_DISP msg=audit(1414327579.438:3894): pid=6390 uid=0 auid=0 ses=146 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_END msg=audit(1414327579.438:3895): pid=6390 uid=0 auid=0 ses=146 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1414327579.438:3896): pid=6390 uid=0 auid=0 ses=146 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327579.438:3897): pid=6390 uid=0 auid=0 ses=146 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=6390 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327579.438:3898): pid=6390 uid=0 auid=0 ses=146 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=6390 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327579.438:3899): pid=6390 uid=0 auid=0 ses=146 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=6390 suid=0 rport=59416 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=NETFILTER_CFG msg=audit(1414327579.501:3900): table=filter family=2 entries=14 >type=SYSCALL msg=audit(1414327579.501:3900): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=1bc7510 items=0 ppid=6159 pid=6404 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=141 comm="iptables" exe="/usr/sbin/xtables-multi" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null) >type=CRYPTO_KEY_USER msg=audit(1414327582.459:3901): pid=6451 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=6451 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327582.459:3902): pid=6451 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=6451 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414327582.461:3903): pid=6450 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=6451 suid=74 rport=59417 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414327582.461:3904): pid=6450 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=6451 suid=74 rport=59417 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327583.000:3905): pid=6450 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=59417 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327583.000:3906): pid=6450 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=e7:e2:3d:94:48:cf:f5:8c:5e:54:98:bd:89:a5:29:a9 rport=59417 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_ACCT msg=audit(1414327583.004:3907): pid=6450 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327583.004:3908): pid=6450 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=6451 suid=74 rport=59417 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327583.005:3909): pid=6450 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1414327583.006:3910): pid=6450 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=LOGIN msg=audit(1414327583.006:3911): pid=6450 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=147 res=1 >type=USER_ROLE_CHANGE msg=audit(1414327583.079:3912): pid=6450 uid=0 auid=0 ses=147 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_START msg=audit(1414327583.096:3913): pid=6450 uid=0 auid=0 ses=147 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1414327583.100:3914): pid=6450 uid=0 auid=0 ses=147 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_START msg=audit(1414327583.100:3915): pid=6450 uid=0 auid=0 ses=147 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327583.102:3916): pid=6455 uid=0 auid=0 ses=147 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=6455 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327583.102:3917): pid=6455 uid=0 auid=0 ses=147 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=6455 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRED_REFR msg=audit(1414327583.103:3918): pid=6455 uid=0 auid=0 ses=147 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_END msg=audit(1414327583.117:3919): pid=6450 uid=0 auid=0 ses=147 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRED_DISP msg=audit(1414327583.117:3920): pid=6450 uid=0 auid=0 ses=147 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_END msg=audit(1414327583.118:3921): pid=6450 uid=0 auid=0 ses=147 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1414327583.118:3922): pid=6450 uid=0 auid=0 ses=147 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327583.118:3923): pid=6450 uid=0 auid=0 ses=147 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=6450 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327583.118:3924): pid=6450 uid=0 auid=0 ses=147 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=6450 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327583.118:3925): pid=6450 uid=0 auid=0 ses=147 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=6450 suid=0 rport=59417 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327586.142:3926): pid=6470 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=6470 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327586.143:3927): pid=6470 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=6470 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414327586.144:3928): pid=6469 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=6470 suid=74 rport=59419 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414327586.144:3929): pid=6469 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=6470 suid=74 rport=59419 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327586.686:3930): pid=6469 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=59419 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327586.686:3931): pid=6469 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=e7:e2:3d:94:48:cf:f5:8c:5e:54:98:bd:89:a5:29:a9 rport=59419 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_ACCT msg=audit(1414327586.691:3932): pid=6469 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327586.691:3933): pid=6469 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=6470 suid=74 rport=59419 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327586.692:3934): pid=6469 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1414327586.692:3935): pid=6469 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=LOGIN msg=audit(1414327586.692:3936): pid=6469 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=148 res=1 >type=USER_ROLE_CHANGE msg=audit(1414327586.765:3937): pid=6469 uid=0 auid=0 ses=148 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_START msg=audit(1414327586.782:3938): pid=6469 uid=0 auid=0 ses=148 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1414327586.791:3939): pid=6469 uid=0 auid=0 ses=148 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_START msg=audit(1414327586.791:3940): pid=6469 uid=0 auid=0 ses=148 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327586.793:3941): pid=6472 uid=0 auid=0 ses=148 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=6472 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327586.794:3942): pid=6472 uid=0 auid=0 ses=148 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=6472 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRED_REFR msg=audit(1414327586.795:3943): pid=6472 uid=0 auid=0 ses=148 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_END msg=audit(1414327586.811:3944): pid=6469 uid=0 auid=0 ses=148 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRED_DISP msg=audit(1414327586.811:3945): pid=6469 uid=0 auid=0 ses=148 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_END msg=audit(1414327586.812:3946): pid=6469 uid=0 auid=0 ses=148 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1414327586.812:3947): pid=6469 uid=0 auid=0 ses=148 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327586.812:3948): pid=6469 uid=0 auid=0 ses=148 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=6469 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327586.812:3949): pid=6469 uid=0 auid=0 ses=148 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=6469 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327586.812:3950): pid=6469 uid=0 auid=0 ses=148 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=6469 suid=0 rport=59419 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327589.837:3951): pid=6491 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=6491 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327589.837:3952): pid=6491 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=6491 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414327589.838:3953): pid=6490 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=6491 suid=74 rport=59428 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414327589.839:3954): pid=6490 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=6491 suid=74 rport=59428 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327590.374:3955): pid=6490 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=59428 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327590.374:3956): pid=6490 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=e7:e2:3d:94:48:cf:f5:8c:5e:54:98:bd:89:a5:29:a9 rport=59428 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_ACCT msg=audit(1414327590.378:3957): pid=6490 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327590.378:3958): pid=6490 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=6491 suid=74 rport=59428 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327590.379:3959): pid=6490 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1414327590.379:3960): pid=6490 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=LOGIN msg=audit(1414327590.379:3961): pid=6490 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=149 res=1 >type=USER_ROLE_CHANGE msg=audit(1414327590.458:3962): pid=6490 uid=0 auid=0 ses=149 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_START msg=audit(1414327590.475:3963): pid=6490 uid=0 auid=0 ses=149 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1414327590.479:3964): pid=6490 uid=0 auid=0 ses=149 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_START msg=audit(1414327590.479:3965): pid=6490 uid=0 auid=0 ses=149 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327590.481:3966): pid=6493 uid=0 auid=0 ses=149 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=6493 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327590.481:3967): pid=6493 uid=0 auid=0 ses=149 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=6493 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRED_REFR msg=audit(1414327590.482:3968): pid=6493 uid=0 auid=0 ses=149 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_END msg=audit(1414327590.500:3969): pid=6490 uid=0 auid=0 ses=149 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRED_DISP msg=audit(1414327590.500:3970): pid=6490 uid=0 auid=0 ses=149 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_END msg=audit(1414327590.501:3971): pid=6490 uid=0 auid=0 ses=149 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1414327590.501:3972): pid=6490 uid=0 auid=0 ses=149 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327590.501:3973): pid=6490 uid=0 auid=0 ses=149 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=6490 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327590.501:3974): pid=6490 uid=0 auid=0 ses=149 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=6490 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327590.502:3975): pid=6490 uid=0 auid=0 ses=149 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=6490 suid=0 rport=59428 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327593.524:3976): pid=6501 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=6501 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327593.524:3977): pid=6501 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=6501 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414327593.526:3978): pid=6500 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=6501 suid=74 rport=59433 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414327593.526:3979): pid=6500 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=6501 suid=74 rport=59433 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327594.064:3980): pid=6500 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=59433 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327594.064:3981): pid=6500 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=e7:e2:3d:94:48:cf:f5:8c:5e:54:98:bd:89:a5:29:a9 rport=59433 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_ACCT msg=audit(1414327594.068:3982): pid=6500 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327594.068:3983): pid=6500 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=6501 suid=74 rport=59433 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327594.069:3984): pid=6500 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1414327594.069:3985): pid=6500 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=LOGIN msg=audit(1414327594.070:3986): pid=6500 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=150 res=1 >type=USER_ROLE_CHANGE msg=audit(1414327594.149:3987): pid=6500 uid=0 auid=0 ses=150 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_START msg=audit(1414327594.167:3988): pid=6500 uid=0 auid=0 ses=150 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1414327594.171:3989): pid=6500 uid=0 auid=0 ses=150 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_START msg=audit(1414327594.171:3990): pid=6500 uid=0 auid=0 ses=150 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327594.173:3991): pid=6505 uid=0 auid=0 ses=150 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=6505 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327594.173:3992): pid=6505 uid=0 auid=0 ses=150 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=6505 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRED_REFR msg=audit(1414327594.174:3993): pid=6505 uid=0 auid=0 ses=150 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_END msg=audit(1414327594.189:3994): pid=6500 uid=0 auid=0 ses=150 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRED_DISP msg=audit(1414327594.189:3995): pid=6500 uid=0 auid=0 ses=150 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_END msg=audit(1414327594.190:3996): pid=6500 uid=0 auid=0 ses=150 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1414327594.190:3997): pid=6500 uid=0 auid=0 ses=150 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327594.190:3998): pid=6500 uid=0 auid=0 ses=150 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=6500 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327594.190:3999): pid=6500 uid=0 auid=0 ses=150 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=6500 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327594.190:4000): pid=6500 uid=0 auid=0 ses=150 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=6500 suid=0 rport=59433 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327597.210:4001): pid=6511 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=6511 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327597.210:4002): pid=6511 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=6511 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414327597.211:4003): pid=6510 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=6511 suid=74 rport=59442 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414327597.212:4004): pid=6510 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=6511 suid=74 rport=59442 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327597.747:4005): pid=6510 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=59442 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327597.747:4006): pid=6510 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=e7:e2:3d:94:48:cf:f5:8c:5e:54:98:bd:89:a5:29:a9 rport=59442 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_ACCT msg=audit(1414327597.751:4007): pid=6510 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327597.752:4008): pid=6510 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=6511 suid=74 rport=59442 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327597.753:4009): pid=6510 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1414327597.753:4010): pid=6510 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=LOGIN msg=audit(1414327597.753:4011): pid=6510 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=151 res=1 >type=USER_ROLE_CHANGE msg=audit(1414327597.826:4012): pid=6510 uid=0 auid=0 ses=151 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_START msg=audit(1414327597.844:4013): pid=6510 uid=0 auid=0 ses=151 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1414327597.847:4014): pid=6510 uid=0 auid=0 ses=151 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_START msg=audit(1414327597.847:4015): pid=6510 uid=0 auid=0 ses=151 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327597.849:4016): pid=6513 uid=0 auid=0 ses=151 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=6513 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327597.849:4017): pid=6513 uid=0 auid=0 ses=151 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=6513 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRED_REFR msg=audit(1414327597.850:4018): pid=6513 uid=0 auid=0 ses=151 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_END msg=audit(1414327597.865:4019): pid=6510 uid=0 auid=0 ses=151 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRED_DISP msg=audit(1414327597.865:4020): pid=6510 uid=0 auid=0 ses=151 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_END msg=audit(1414327597.866:4021): pid=6510 uid=0 auid=0 ses=151 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1414327597.866:4022): pid=6510 uid=0 auid=0 ses=151 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327597.866:4023): pid=6510 uid=0 auid=0 ses=151 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=6510 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327597.866:4024): pid=6510 uid=0 auid=0 ses=151 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=6510 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327597.866:4025): pid=6510 uid=0 auid=0 ses=151 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=6510 suid=0 rport=59442 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327600.890:4026): pid=6521 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=6521 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327600.891:4027): pid=6521 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=6521 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414327600.892:4028): pid=6520 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=6521 suid=74 rport=59452 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414327600.892:4029): pid=6520 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=6521 suid=74 rport=59452 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327601.428:4030): pid=6520 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=59452 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327601.428:4031): pid=6520 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=e7:e2:3d:94:48:cf:f5:8c:5e:54:98:bd:89:a5:29:a9 rport=59452 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_ACCT msg=audit(1414327601.432:4032): pid=6520 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327601.433:4033): pid=6520 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=6521 suid=74 rport=59452 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327601.434:4034): pid=6520 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1414327601.435:4035): pid=6520 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=LOGIN msg=audit(1414327601.435:4036): pid=6520 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=152 res=1 >type=USER_ROLE_CHANGE msg=audit(1414327601.506:4037): pid=6520 uid=0 auid=0 ses=152 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_START msg=audit(1414327601.524:4038): pid=6520 uid=0 auid=0 ses=152 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1414327601.529:4039): pid=6520 uid=0 auid=0 ses=152 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_START msg=audit(1414327601.529:4040): pid=6520 uid=0 auid=0 ses=152 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327601.531:4041): pid=6523 uid=0 auid=0 ses=152 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=6523 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327601.531:4042): pid=6523 uid=0 auid=0 ses=152 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=6523 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRED_REFR msg=audit(1414327601.532:4043): pid=6523 uid=0 auid=0 ses=152 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_END msg=audit(1414327601.547:4044): pid=6520 uid=0 auid=0 ses=152 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRED_DISP msg=audit(1414327601.547:4045): pid=6520 uid=0 auid=0 ses=152 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_END msg=audit(1414327601.548:4046): pid=6520 uid=0 auid=0 ses=152 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1414327601.548:4047): pid=6520 uid=0 auid=0 ses=152 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327601.548:4048): pid=6520 uid=0 auid=0 ses=152 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=6520 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327601.548:4049): pid=6520 uid=0 auid=0 ses=152 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=6520 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327601.548:4050): pid=6520 uid=0 auid=0 ses=152 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=6520 suid=0 rport=59452 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327604.571:4051): pid=6533 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=6533 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327604.571:4052): pid=6533 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=6533 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414327604.572:4053): pid=6532 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=6533 suid=74 rport=59463 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414327604.572:4054): pid=6532 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=6533 suid=74 rport=59463 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327605.109:4055): pid=6532 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=59463 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327605.109:4056): pid=6532 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=e7:e2:3d:94:48:cf:f5:8c:5e:54:98:bd:89:a5:29:a9 rport=59463 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_ACCT msg=audit(1414327605.113:4057): pid=6532 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327605.113:4058): pid=6532 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=6533 suid=74 rport=59463 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327605.114:4059): pid=6532 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1414327605.115:4060): pid=6532 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=LOGIN msg=audit(1414327605.115:4061): pid=6532 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=153 res=1 >type=USER_ROLE_CHANGE msg=audit(1414327605.186:4062): pid=6532 uid=0 auid=0 ses=153 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_START msg=audit(1414327605.202:4063): pid=6532 uid=0 auid=0 ses=153 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1414327605.205:4064): pid=6532 uid=0 auid=0 ses=153 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_START msg=audit(1414327605.205:4065): pid=6532 uid=0 auid=0 ses=153 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327605.207:4066): pid=6535 uid=0 auid=0 ses=153 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=6535 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327605.207:4067): pid=6535 uid=0 auid=0 ses=153 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=6535 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRED_REFR msg=audit(1414327605.208:4068): pid=6535 uid=0 auid=0 ses=153 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_END msg=audit(1414327605.222:4069): pid=6532 uid=0 auid=0 ses=153 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRED_DISP msg=audit(1414327605.222:4070): pid=6532 uid=0 auid=0 ses=153 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_END msg=audit(1414327605.223:4071): pid=6532 uid=0 auid=0 ses=153 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1414327605.223:4072): pid=6532 uid=0 auid=0 ses=153 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327605.223:4073): pid=6532 uid=0 auid=0 ses=153 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=6532 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327605.223:4074): pid=6532 uid=0 auid=0 ses=153 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=6532 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327605.223:4075): pid=6532 uid=0 auid=0 ses=153 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=6532 suid=0 rport=59463 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327608.245:4076): pid=6545 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=6545 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327608.245:4077): pid=6545 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=6545 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414327608.246:4078): pid=6544 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=6545 suid=74 rport=59473 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414327608.247:4079): pid=6544 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=6545 suid=74 rport=59473 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327608.790:4080): pid=6544 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=59473 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327608.790:4081): pid=6544 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=e7:e2:3d:94:48:cf:f5:8c:5e:54:98:bd:89:a5:29:a9 rport=59473 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_ACCT msg=audit(1414327608.794:4082): pid=6544 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327608.794:4083): pid=6544 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=6545 suid=74 rport=59473 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327608.795:4084): pid=6544 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1414327608.795:4085): pid=6544 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=LOGIN msg=audit(1414327608.796:4086): pid=6544 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=154 res=1 >type=USER_ROLE_CHANGE msg=audit(1414327608.864:4087): pid=6544 uid=0 auid=0 ses=154 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_START msg=audit(1414327608.880:4088): pid=6544 uid=0 auid=0 ses=154 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1414327608.885:4089): pid=6544 uid=0 auid=0 ses=154 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_START msg=audit(1414327608.885:4090): pid=6544 uid=0 auid=0 ses=154 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327608.886:4091): pid=6547 uid=0 auid=0 ses=154 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=6547 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327608.887:4092): pid=6547 uid=0 auid=0 ses=154 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=6547 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRED_REFR msg=audit(1414327608.887:4093): pid=6547 uid=0 auid=0 ses=154 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_END msg=audit(1414327608.908:4094): pid=6544 uid=0 auid=0 ses=154 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRED_DISP msg=audit(1414327608.909:4095): pid=6544 uid=0 auid=0 ses=154 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_END msg=audit(1414327608.909:4096): pid=6544 uid=0 auid=0 ses=154 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1414327608.909:4097): pid=6544 uid=0 auid=0 ses=154 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327608.909:4098): pid=6544 uid=0 auid=0 ses=154 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=6544 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327608.909:4099): pid=6544 uid=0 auid=0 ses=154 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=6544 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327608.909:4100): pid=6544 uid=0 auid=0 ses=154 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=6544 suid=0 rport=59473 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327611.932:4101): pid=6553 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=6553 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327611.932:4102): pid=6553 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=6553 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414327611.933:4103): pid=6552 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=6553 suid=74 rport=59474 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414327611.933:4104): pid=6552 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=6553 suid=74 rport=59474 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327612.469:4105): pid=6552 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=59474 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327612.469:4106): pid=6552 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=e7:e2:3d:94:48:cf:f5:8c:5e:54:98:bd:89:a5:29:a9 rport=59474 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_ACCT msg=audit(1414327612.474:4107): pid=6552 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327612.474:4108): pid=6552 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=6553 suid=74 rport=59474 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327612.475:4109): pid=6552 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1414327612.475:4110): pid=6552 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=LOGIN msg=audit(1414327612.475:4111): pid=6552 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=155 res=1 >type=USER_ROLE_CHANGE msg=audit(1414327612.549:4112): pid=6552 uid=0 auid=0 ses=155 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_START msg=audit(1414327612.566:4113): pid=6552 uid=0 auid=0 ses=155 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1414327612.569:4114): pid=6552 uid=0 auid=0 ses=155 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_START msg=audit(1414327612.569:4115): pid=6552 uid=0 auid=0 ses=155 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327612.571:4116): pid=6557 uid=0 auid=0 ses=155 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=6557 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327612.571:4117): pid=6557 uid=0 auid=0 ses=155 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=6557 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRED_REFR msg=audit(1414327612.572:4118): pid=6557 uid=0 auid=0 ses=155 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_END msg=audit(1414327612.586:4119): pid=6552 uid=0 auid=0 ses=155 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRED_DISP msg=audit(1414327612.587:4120): pid=6552 uid=0 auid=0 ses=155 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_END msg=audit(1414327612.587:4121): pid=6552 uid=0 auid=0 ses=155 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1414327612.587:4122): pid=6552 uid=0 auid=0 ses=155 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327612.587:4123): pid=6552 uid=0 auid=0 ses=155 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=6552 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327612.587:4124): pid=6552 uid=0 auid=0 ses=155 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=6552 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327612.587:4125): pid=6552 uid=0 auid=0 ses=155 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=6552 suid=0 rport=59474 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327615.613:4126): pid=6563 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=6563 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327615.613:4127): pid=6563 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=6563 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414327615.614:4128): pid=6562 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=6563 suid=74 rport=59475 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414327615.615:4129): pid=6562 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=6563 suid=74 rport=59475 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327616.154:4130): pid=6562 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=59475 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327616.154:4131): pid=6562 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=e7:e2:3d:94:48:cf:f5:8c:5e:54:98:bd:89:a5:29:a9 rport=59475 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_ACCT msg=audit(1414327616.158:4132): pid=6562 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327616.158:4133): pid=6562 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=6563 suid=74 rport=59475 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327616.159:4134): pid=6562 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1414327616.160:4135): pid=6562 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=LOGIN msg=audit(1414327616.160:4136): pid=6562 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=156 res=1 >type=USER_ROLE_CHANGE msg=audit(1414327616.231:4137): pid=6562 uid=0 auid=0 ses=156 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_START msg=audit(1414327616.250:4138): pid=6562 uid=0 auid=0 ses=156 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1414327616.254:4139): pid=6562 uid=0 auid=0 ses=156 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_START msg=audit(1414327616.254:4140): pid=6562 uid=0 auid=0 ses=156 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327616.256:4141): pid=6565 uid=0 auid=0 ses=156 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=6565 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327616.256:4142): pid=6565 uid=0 auid=0 ses=156 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=6565 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRED_REFR msg=audit(1414327616.257:4143): pid=6565 uid=0 auid=0 ses=156 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_END msg=audit(1414327616.273:4144): pid=6562 uid=0 auid=0 ses=156 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRED_DISP msg=audit(1414327616.273:4145): pid=6562 uid=0 auid=0 ses=156 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_END msg=audit(1414327616.274:4146): pid=6562 uid=0 auid=0 ses=156 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1414327616.274:4147): pid=6562 uid=0 auid=0 ses=156 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327616.274:4148): pid=6562 uid=0 auid=0 ses=156 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=6562 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327616.274:4149): pid=6562 uid=0 auid=0 ses=156 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=6562 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327616.274:4150): pid=6562 uid=0 auid=0 ses=156 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=6562 suid=0 rport=59475 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327619.297:4151): pid=6571 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=6571 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327619.297:4152): pid=6571 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=6571 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414327619.298:4153): pid=6570 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=6571 suid=74 rport=59476 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414327619.300:4154): pid=6570 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=6571 suid=74 rport=59476 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327619.839:4155): pid=6570 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=59476 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327619.839:4156): pid=6570 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=e7:e2:3d:94:48:cf:f5:8c:5e:54:98:bd:89:a5:29:a9 rport=59476 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_ACCT msg=audit(1414327619.844:4157): pid=6570 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327619.844:4158): pid=6570 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=6571 suid=74 rport=59476 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327619.845:4159): pid=6570 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1414327619.845:4160): pid=6570 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=LOGIN msg=audit(1414327619.845:4161): pid=6570 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=157 res=1 >type=USER_ROLE_CHANGE msg=audit(1414327619.916:4162): pid=6570 uid=0 auid=0 ses=157 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_START msg=audit(1414327619.933:4163): pid=6570 uid=0 auid=0 ses=157 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1414327619.937:4164): pid=6570 uid=0 auid=0 ses=157 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_START msg=audit(1414327619.937:4165): pid=6570 uid=0 auid=0 ses=157 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327619.939:4166): pid=6573 uid=0 auid=0 ses=157 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=6573 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327619.939:4167): pid=6573 uid=0 auid=0 ses=157 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=6573 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRED_REFR msg=audit(1414327619.940:4168): pid=6573 uid=0 auid=0 ses=157 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_END msg=audit(1414327619.955:4169): pid=6570 uid=0 auid=0 ses=157 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRED_DISP msg=audit(1414327619.956:4170): pid=6570 uid=0 auid=0 ses=157 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_END msg=audit(1414327619.956:4171): pid=6570 uid=0 auid=0 ses=157 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1414327619.956:4172): pid=6570 uid=0 auid=0 ses=157 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327619.957:4173): pid=6570 uid=0 auid=0 ses=157 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=6570 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327619.957:4174): pid=6570 uid=0 auid=0 ses=157 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=6570 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327619.957:4175): pid=6570 uid=0 auid=0 ses=157 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=6570 suid=0 rport=59476 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=ADD_GROUP msg=audit(1414327620.295:4176): pid=6577 uid=0 auid=0 ses=141 subj=unconfined_u:system_r:groupadd_t:s0-s0:c0.c1023 msg='op=adding group to /etc/group id=163 exe="/usr/sbin/groupadd" hostname=? addr=? terminal=? res=success' >type=ADD_GROUP msg=audit(1414327620.297:4177): pid=6577 uid=0 auid=0 ses=141 subj=unconfined_u:system_r:groupadd_t:s0-s0:c0.c1023 msg='op=adding group to /etc/gshadow id=163 exe="/usr/sbin/groupadd" hostname=? addr=? terminal=? res=success' >type=ADD_GROUP msg=audit(1414327620.298:4178): pid=6577 uid=0 auid=0 ses=141 subj=unconfined_u:system_r:groupadd_t:s0-s0:c0.c1023 msg='op= id=163 exe="/usr/sbin/groupadd" hostname=? addr=? terminal=? res=success' >type=ADD_USER msg=audit(1414327620.306:4179): pid=6582 uid=0 auid=0 ses=141 subj=unconfined_u:system_r:useradd_t:s0-s0:c0.c1023 msg='op=adding user id=163 exe="/usr/sbin/useradd" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1414327620.758:4180): pid=6599 uid=0 auid=0 ses=141 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/bin/crontab" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1414327620.758:4181): pid=6599 uid=0 auid=0 ses=141 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/bin/crontab" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1414327620.768:4182): pid=6602 uid=0 auid=0 ses=141 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="keystone" exe="/usr/bin/crontab" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1414327620.768:4183): pid=6602 uid=0 auid=0 ses=141 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="keystone" exe="/usr/bin/crontab" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1414327620.777:4184): pid=6604 uid=0 auid=0 ses=141 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="keystone" exe="/usr/bin/crontab" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1414327620.777:4185): pid=6604 uid=0 auid=0 ses=141 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="keystone" exe="/usr/bin/crontab" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1414327621.726:4186): pid=6622 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="keystone" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1414327621.726:4187): pid=6622 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="keystone" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1414327621.727:4188): pid=6622 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=163 old-ses=4294967295 ses=158 res=1 >type=USER_START msg=audit(1414327621.797:4189): pid=6622 uid=0 auid=163 ses=158 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="keystone" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1414327621.798:4190): pid=6622 uid=0 auid=163 ses=158 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="keystone" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1414327622.373:4191): pid=6622 uid=0 auid=163 ses=158 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="keystone" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1414327622.375:4192): pid=6622 uid=0 auid=163 ses=158 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="keystone" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRYPTO_KEY_USER msg=audit(1414327622.984:4193): pid=6643 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=6643 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327622.984:4194): pid=6643 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=6643 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414327622.985:4195): pid=6642 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=6643 suid=74 rport=59479 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414327622.987:4196): pid=6642 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=6643 suid=74 rport=59479 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327623.528:4197): pid=6642 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=59479 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327623.528:4198): pid=6642 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=e7:e2:3d:94:48:cf:f5:8c:5e:54:98:bd:89:a5:29:a9 rport=59479 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_ACCT msg=audit(1414327623.531:4199): pid=6642 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327623.532:4200): pid=6642 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=6643 suid=74 rport=59479 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327623.533:4201): pid=6642 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1414327623.534:4202): pid=6642 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=LOGIN msg=audit(1414327623.534:4203): pid=6642 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=159 res=1 >type=USER_ROLE_CHANGE msg=audit(1414327623.610:4204): pid=6642 uid=0 auid=0 ses=159 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_START msg=audit(1414327623.629:4205): pid=6642 uid=0 auid=0 ses=159 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1414327623.634:4206): pid=6642 uid=0 auid=0 ses=159 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_START msg=audit(1414327623.634:4207): pid=6642 uid=0 auid=0 ses=159 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327623.635:4208): pid=6657 uid=0 auid=0 ses=159 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=6657 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327623.635:4209): pid=6657 uid=0 auid=0 ses=159 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=6657 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRED_REFR msg=audit(1414327623.636:4210): pid=6657 uid=0 auid=0 ses=159 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_END msg=audit(1414327623.650:4211): pid=6642 uid=0 auid=0 ses=159 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRED_DISP msg=audit(1414327623.650:4212): pid=6642 uid=0 auid=0 ses=159 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_END msg=audit(1414327623.651:4213): pid=6642 uid=0 auid=0 ses=159 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1414327623.651:4214): pid=6642 uid=0 auid=0 ses=159 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327623.651:4215): pid=6642 uid=0 auid=0 ses=159 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=6642 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327623.651:4216): pid=6642 uid=0 auid=0 ses=159 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=6642 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327623.651:4217): pid=6642 uid=0 auid=0 ses=159 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=6642 suid=0 rport=59479 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=SERVICE_START msg=audit(1414327624.549:4218): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="openstack-keystone" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327626.673:4219): pid=6769 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=6769 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327626.673:4220): pid=6769 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=6769 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414327626.674:4221): pid=6768 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=6769 suid=74 rport=59490 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414327626.676:4222): pid=6768 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=6769 suid=74 rport=59490 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327627.216:4223): pid=6768 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=59490 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327627.216:4224): pid=6768 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=e7:e2:3d:94:48:cf:f5:8c:5e:54:98:bd:89:a5:29:a9 rport=59490 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_ACCT msg=audit(1414327627.220:4225): pid=6768 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327627.220:4226): pid=6768 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=6769 suid=74 rport=59490 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327627.221:4227): pid=6768 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1414327627.221:4228): pid=6768 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=LOGIN msg=audit(1414327627.221:4229): pid=6768 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=160 res=1 >type=USER_ROLE_CHANGE msg=audit(1414327627.298:4230): pid=6768 uid=0 auid=0 ses=160 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_START msg=audit(1414327627.353:4231): pid=6768 uid=0 auid=0 ses=160 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1414327627.358:4232): pid=6768 uid=0 auid=0 ses=160 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_START msg=audit(1414327627.358:4233): pid=6768 uid=0 auid=0 ses=160 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327627.360:4234): pid=6789 uid=0 auid=0 ses=160 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=6789 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327627.360:4235): pid=6789 uid=0 auid=0 ses=160 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=6789 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRED_REFR msg=audit(1414327627.361:4236): pid=6789 uid=0 auid=0 ses=160 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_END msg=audit(1414327627.375:4237): pid=6768 uid=0 auid=0 ses=160 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRED_DISP msg=audit(1414327627.375:4238): pid=6768 uid=0 auid=0 ses=160 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_END msg=audit(1414327627.376:4239): pid=6768 uid=0 auid=0 ses=160 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1414327627.376:4240): pid=6768 uid=0 auid=0 ses=160 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327627.376:4241): pid=6768 uid=0 auid=0 ses=160 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=6768 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327627.376:4242): pid=6768 uid=0 auid=0 ses=160 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=6768 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327627.376:4243): pid=6768 uid=0 auid=0 ses=160 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=6768 suid=0 rport=59490 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327630.397:4244): pid=6885 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=6885 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327630.398:4245): pid=6885 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=6885 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414327630.399:4246): pid=6884 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=6885 suid=74 rport=59503 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414327630.399:4247): pid=6884 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=6885 suid=74 rport=59503 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327630.937:4248): pid=6884 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=59503 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327630.937:4249): pid=6884 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=e7:e2:3d:94:48:cf:f5:8c:5e:54:98:bd:89:a5:29:a9 rport=59503 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_ACCT msg=audit(1414327630.941:4250): pid=6884 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327630.941:4251): pid=6884 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=6885 suid=74 rport=59503 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327630.942:4252): pid=6884 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1414327630.942:4253): pid=6884 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=LOGIN msg=audit(1414327630.942:4254): pid=6884 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=161 res=1 >type=USER_ROLE_CHANGE msg=audit(1414327631.015:4255): pid=6884 uid=0 auid=0 ses=161 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_START msg=audit(1414327631.032:4256): pid=6884 uid=0 auid=0 ses=161 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1414327631.036:4257): pid=6884 uid=0 auid=0 ses=161 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_START msg=audit(1414327631.036:4258): pid=6884 uid=0 auid=0 ses=161 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327631.038:4259): pid=6909 uid=0 auid=0 ses=161 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=6909 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327631.038:4260): pid=6909 uid=0 auid=0 ses=161 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=6909 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRED_REFR msg=audit(1414327631.039:4261): pid=6909 uid=0 auid=0 ses=161 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_END msg=audit(1414327631.054:4262): pid=6884 uid=0 auid=0 ses=161 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRED_DISP msg=audit(1414327631.054:4263): pid=6884 uid=0 auid=0 ses=161 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_END msg=audit(1414327631.055:4264): pid=6884 uid=0 auid=0 ses=161 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1414327631.055:4265): pid=6884 uid=0 auid=0 ses=161 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327631.055:4266): pid=6884 uid=0 auid=0 ses=161 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=6884 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327631.055:4267): pid=6884 uid=0 auid=0 ses=161 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=6884 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327631.055:4268): pid=6884 uid=0 auid=0 ses=161 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=6884 suid=0 rport=59503 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327634.079:4269): pid=7009 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=7009 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327634.079:4270): pid=7009 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=7009 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414327634.080:4271): pid=7008 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=7009 suid=74 rport=59528 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414327634.080:4272): pid=7008 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=7009 suid=74 rport=59528 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327634.622:4273): pid=7008 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=59528 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327634.622:4274): pid=7008 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=e7:e2:3d:94:48:cf:f5:8c:5e:54:98:bd:89:a5:29:a9 rport=59528 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_ACCT msg=audit(1414327634.626:4275): pid=7008 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327634.627:4276): pid=7008 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=7009 suid=74 rport=59528 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327634.628:4277): pid=7008 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1414327634.628:4278): pid=7008 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=LOGIN msg=audit(1414327634.628:4279): pid=7008 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=162 res=1 >type=USER_ROLE_CHANGE msg=audit(1414327634.706:4280): pid=7008 uid=0 auid=0 ses=162 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_START msg=audit(1414327634.726:4281): pid=7008 uid=0 auid=0 ses=162 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1414327634.729:4282): pid=7008 uid=0 auid=0 ses=162 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_START msg=audit(1414327634.729:4283): pid=7008 uid=0 auid=0 ses=162 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327634.730:4284): pid=7032 uid=0 auid=0 ses=162 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=7032 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327634.731:4285): pid=7032 uid=0 auid=0 ses=162 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=7032 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRED_REFR msg=audit(1414327634.731:4286): pid=7032 uid=0 auid=0 ses=162 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_END msg=audit(1414327634.743:4287): pid=7008 uid=0 auid=0 ses=162 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRED_DISP msg=audit(1414327634.743:4288): pid=7008 uid=0 auid=0 ses=162 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_END msg=audit(1414327634.744:4289): pid=7008 uid=0 auid=0 ses=162 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1414327634.744:4290): pid=7008 uid=0 auid=0 ses=162 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327634.744:4291): pid=7008 uid=0 auid=0 ses=162 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=7008 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327634.744:4292): pid=7008 uid=0 auid=0 ses=162 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=7008 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327634.744:4293): pid=7008 uid=0 auid=0 ses=162 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=7008 suid=0 rport=59528 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327637.765:4294): pid=7132 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=7132 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327637.765:4295): pid=7132 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=7132 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414327637.766:4296): pid=7131 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=7132 suid=74 rport=59552 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414327637.766:4297): pid=7131 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=7132 suid=74 rport=59552 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327638.305:4298): pid=7131 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=59552 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327638.305:4299): pid=7131 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=e7:e2:3d:94:48:cf:f5:8c:5e:54:98:bd:89:a5:29:a9 rport=59552 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_ACCT msg=audit(1414327638.309:4300): pid=7131 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327638.309:4301): pid=7131 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=7132 suid=74 rport=59552 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327638.310:4302): pid=7131 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1414327638.310:4303): pid=7131 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=LOGIN msg=audit(1414327638.310:4304): pid=7131 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=163 res=1 >type=USER_ROLE_CHANGE msg=audit(1414327638.381:4305): pid=7131 uid=0 auid=0 ses=163 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_START msg=audit(1414327638.397:4306): pid=7131 uid=0 auid=0 ses=163 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1414327638.404:4307): pid=7131 uid=0 auid=0 ses=163 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_START msg=audit(1414327638.404:4308): pid=7131 uid=0 auid=0 ses=163 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327638.405:4309): pid=7152 uid=0 auid=0 ses=163 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=7152 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327638.405:4310): pid=7152 uid=0 auid=0 ses=163 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=7152 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRED_REFR msg=audit(1414327638.406:4311): pid=7152 uid=0 auid=0 ses=163 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_END msg=audit(1414327638.421:4312): pid=7131 uid=0 auid=0 ses=163 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRED_DISP msg=audit(1414327638.421:4313): pid=7131 uid=0 auid=0 ses=163 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_END msg=audit(1414327638.422:4314): pid=7131 uid=0 auid=0 ses=163 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1414327638.422:4315): pid=7131 uid=0 auid=0 ses=163 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327638.422:4316): pid=7131 uid=0 auid=0 ses=163 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=7131 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327638.422:4317): pid=7131 uid=0 auid=0 ses=163 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=7131 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327638.422:4318): pid=7131 uid=0 auid=0 ses=163 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=7131 suid=0 rport=59552 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327641.441:4319): pid=7248 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=7248 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327641.442:4320): pid=7248 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=7248 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414327641.443:4321): pid=7247 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=7248 suid=74 rport=59576 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414327641.443:4322): pid=7247 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=7248 suid=74 rport=59576 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327641.986:4323): pid=7247 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=59576 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327641.986:4324): pid=7247 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=e7:e2:3d:94:48:cf:f5:8c:5e:54:98:bd:89:a5:29:a9 rport=59576 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_ACCT msg=audit(1414327641.991:4325): pid=7247 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327641.991:4326): pid=7247 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=7248 suid=74 rport=59576 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327641.993:4327): pid=7247 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1414327641.994:4328): pid=7247 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=LOGIN msg=audit(1414327641.994:4329): pid=7247 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=164 res=1 >type=USER_ROLE_CHANGE msg=audit(1414327642.071:4330): pid=7247 uid=0 auid=0 ses=164 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_START msg=audit(1414327642.087:4331): pid=7247 uid=0 auid=0 ses=164 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1414327642.092:4332): pid=7247 uid=0 auid=0 ses=164 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_START msg=audit(1414327642.092:4333): pid=7247 uid=0 auid=0 ses=164 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327642.093:4334): pid=7270 uid=0 auid=0 ses=164 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=7270 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327642.094:4335): pid=7270 uid=0 auid=0 ses=164 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=7270 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRED_REFR msg=audit(1414327642.094:4336): pid=7270 uid=0 auid=0 ses=164 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_END msg=audit(1414327642.108:4337): pid=7247 uid=0 auid=0 ses=164 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRED_DISP msg=audit(1414327642.108:4338): pid=7247 uid=0 auid=0 ses=164 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_END msg=audit(1414327642.109:4339): pid=7247 uid=0 auid=0 ses=164 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1414327642.109:4340): pid=7247 uid=0 auid=0 ses=164 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327642.109:4341): pid=7247 uid=0 auid=0 ses=164 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=7247 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327642.109:4342): pid=7247 uid=0 auid=0 ses=164 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=7247 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327642.109:4343): pid=7247 uid=0 auid=0 ses=164 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=7247 suid=0 rport=59576 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327645.135:4344): pid=7359 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=7359 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327645.135:4345): pid=7359 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=7359 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414327645.136:4346): pid=7358 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=7359 suid=74 rport=59598 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414327645.136:4347): pid=7358 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=7359 suid=74 rport=59598 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327645.676:4348): pid=7358 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=59598 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327645.676:4349): pid=7358 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=e7:e2:3d:94:48:cf:f5:8c:5e:54:98:bd:89:a5:29:a9 rport=59598 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_ACCT msg=audit(1414327645.680:4350): pid=7358 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327645.681:4351): pid=7358 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=7359 suid=74 rport=59598 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327645.682:4352): pid=7358 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1414327645.682:4353): pid=7358 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=LOGIN msg=audit(1414327645.682:4354): pid=7358 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=165 res=1 >type=USER_ROLE_CHANGE msg=audit(1414327645.754:4355): pid=7358 uid=0 auid=0 ses=165 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_START msg=audit(1414327645.771:4356): pid=7358 uid=0 auid=0 ses=165 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1414327645.775:4357): pid=7358 uid=0 auid=0 ses=165 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_START msg=audit(1414327645.775:4358): pid=7358 uid=0 auid=0 ses=165 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327645.776:4359): pid=7379 uid=0 auid=0 ses=165 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=7379 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327645.776:4360): pid=7379 uid=0 auid=0 ses=165 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=7379 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRED_REFR msg=audit(1414327645.776:4361): pid=7379 uid=0 auid=0 ses=165 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_END msg=audit(1414327645.790:4362): pid=7358 uid=0 auid=0 ses=165 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRED_DISP msg=audit(1414327645.790:4363): pid=7358 uid=0 auid=0 ses=165 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_END msg=audit(1414327645.791:4364): pid=7358 uid=0 auid=0 ses=165 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1414327645.791:4365): pid=7358 uid=0 auid=0 ses=165 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327645.791:4366): pid=7358 uid=0 auid=0 ses=165 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=7358 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327645.791:4367): pid=7358 uid=0 auid=0 ses=165 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=7358 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327645.791:4368): pid=7358 uid=0 auid=0 ses=165 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=7358 suid=0 rport=59598 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327648.813:4369): pid=7464 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=7464 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327648.813:4370): pid=7464 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=7464 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414327648.814:4371): pid=7463 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=7464 suid=74 rport=59626 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414327648.814:4372): pid=7463 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=7464 suid=74 rport=59626 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327649.355:4373): pid=7463 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=59626 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327649.355:4374): pid=7463 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=e7:e2:3d:94:48:cf:f5:8c:5e:54:98:bd:89:a5:29:a9 rport=59626 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_ACCT msg=audit(1414327649.359:4375): pid=7463 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327649.360:4376): pid=7463 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=7464 suid=74 rport=59626 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327649.361:4377): pid=7463 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1414327649.361:4378): pid=7463 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=LOGIN msg=audit(1414327649.361:4379): pid=7463 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=166 res=1 >type=USER_ROLE_CHANGE msg=audit(1414327649.432:4380): pid=7463 uid=0 auid=0 ses=166 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_START msg=audit(1414327649.448:4381): pid=7463 uid=0 auid=0 ses=166 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1414327649.451:4382): pid=7463 uid=0 auid=0 ses=166 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_START msg=audit(1414327649.451:4383): pid=7463 uid=0 auid=0 ses=166 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327649.452:4384): pid=7476 uid=0 auid=0 ses=166 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=7476 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327649.452:4385): pid=7476 uid=0 auid=0 ses=166 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=7476 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRED_REFR msg=audit(1414327649.453:4386): pid=7476 uid=0 auid=0 ses=166 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_END msg=audit(1414327649.466:4387): pid=7463 uid=0 auid=0 ses=166 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRED_DISP msg=audit(1414327649.467:4388): pid=7463 uid=0 auid=0 ses=166 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_END msg=audit(1414327649.467:4389): pid=7463 uid=0 auid=0 ses=166 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1414327649.467:4390): pid=7463 uid=0 auid=0 ses=166 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327649.467:4391): pid=7463 uid=0 auid=0 ses=166 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=7463 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327649.467:4392): pid=7463 uid=0 auid=0 ses=166 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=7463 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327649.468:4393): pid=7463 uid=0 auid=0 ses=166 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=7463 suid=0 rport=59626 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327649.487:4394): pid=7482 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=7482 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327649.487:4395): pid=7482 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=7482 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414327649.488:4396): pid=7481 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=7482 suid=74 rport=59631 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414327649.488:4397): pid=7481 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=7482 suid=74 rport=59631 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327650.024:4398): pid=7481 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=59631 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327650.024:4399): pid=7481 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=e7:e2:3d:94:48:cf:f5:8c:5e:54:98:bd:89:a5:29:a9 rport=59631 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_ACCT msg=audit(1414327650.027:4400): pid=7481 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327650.028:4401): pid=7481 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=7482 suid=74 rport=59631 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327650.029:4402): pid=7481 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1414327650.029:4403): pid=7481 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=LOGIN msg=audit(1414327650.029:4404): pid=7481 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=167 res=1 >type=USER_ROLE_CHANGE msg=audit(1414327650.097:4405): pid=7481 uid=0 auid=0 ses=167 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_START msg=audit(1414327650.112:4406): pid=7481 uid=0 auid=0 ses=167 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1414327650.115:4407): pid=7481 uid=0 auid=0 ses=167 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_START msg=audit(1414327650.116:4408): pid=7481 uid=0 auid=0 ses=167 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327650.117:4409): pid=7486 uid=0 auid=0 ses=167 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=7486 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327650.117:4410): pid=7486 uid=0 auid=0 ses=167 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=7486 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRED_REFR msg=audit(1414327650.118:4411): pid=7486 uid=0 auid=0 ses=167 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_END msg=audit(1414327650.132:4412): pid=7481 uid=0 auid=0 ses=167 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRED_DISP msg=audit(1414327650.132:4413): pid=7481 uid=0 auid=0 ses=167 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_END msg=audit(1414327650.133:4414): pid=7481 uid=0 auid=0 ses=167 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1414327650.133:4415): pid=7481 uid=0 auid=0 ses=167 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327650.133:4416): pid=7481 uid=0 auid=0 ses=167 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=7481 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327650.133:4417): pid=7481 uid=0 auid=0 ses=167 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=7481 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327650.133:4418): pid=7481 uid=0 auid=0 ses=167 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=7481 suid=0 rport=59631 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327653.156:4419): pid=7498 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=7498 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327653.157:4420): pid=7498 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=7498 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414327653.158:4421): pid=7497 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=7498 suid=74 rport=59656 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414327653.158:4422): pid=7497 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=7498 suid=74 rport=59656 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327653.697:4423): pid=7497 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=59656 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327653.697:4424): pid=7497 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=e7:e2:3d:94:48:cf:f5:8c:5e:54:98:bd:89:a5:29:a9 rport=59656 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_ACCT msg=audit(1414327653.701:4425): pid=7497 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327653.702:4426): pid=7497 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=7498 suid=74 rport=59656 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327653.703:4427): pid=7497 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1414327653.703:4428): pid=7497 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=LOGIN msg=audit(1414327653.703:4429): pid=7497 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=168 res=1 >type=USER_ROLE_CHANGE msg=audit(1414327653.775:4430): pid=7497 uid=0 auid=0 ses=168 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_START msg=audit(1414327653.790:4431): pid=7497 uid=0 auid=0 ses=168 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1414327653.794:4432): pid=7497 uid=0 auid=0 ses=168 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_START msg=audit(1414327653.794:4433): pid=7497 uid=0 auid=0 ses=168 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327653.795:4434): pid=7527 uid=0 auid=0 ses=168 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=7527 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327653.796:4435): pid=7527 uid=0 auid=0 ses=168 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=7527 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRED_REFR msg=audit(1414327653.796:4436): pid=7527 uid=0 auid=0 ses=168 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_END msg=audit(1414327653.811:4437): pid=7497 uid=0 auid=0 ses=168 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRED_DISP msg=audit(1414327653.811:4438): pid=7497 uid=0 auid=0 ses=168 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_END msg=audit(1414327653.811:4439): pid=7497 uid=0 auid=0 ses=168 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1414327653.811:4440): pid=7497 uid=0 auid=0 ses=168 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327653.811:4441): pid=7497 uid=0 auid=0 ses=168 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=7497 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327653.811:4442): pid=7497 uid=0 auid=0 ses=168 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=7497 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327653.812:4443): pid=7497 uid=0 auid=0 ses=168 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=7497 suid=0 rport=59656 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=NETFILTER_CFG msg=audit(1414327654.729:4444): table=filter family=2 entries=0 >type=SYSCALL msg=audit(1414327654.729:4444): arch=c000003e syscall=272 success=yes exit=0 a0=40000000 a1=c0 a2=0 a3=7fff56eef2d0 items=0 ppid=7630 pid=7637 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=143 comm="ip" exe="/usr/sbin/ip" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null) >type=NETFILTER_CFG msg=audit(1414327654.792:4445): table=filter family=2 entries=0 >type=SYSCALL msg=audit(1414327654.792:4445): arch=c000003e syscall=272 success=yes exit=0 a0=40000000 a1=c0 a2=0 a3=7fff5f0504c0 items=0 ppid=7630 pid=7644 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=143 comm="ip" exe="/usr/sbin/ip" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null) >type=NETFILTER_CFG msg=audit(1414327655.130:4446): table=filter family=2 entries=0 >type=SYSCALL msg=audit(1414327655.130:4446): arch=c000003e syscall=272 success=yes exit=0 a0=40000000 a1=c0 a2=0 a3=7fff9cdaa420 items=0 ppid=7630 pid=7646 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=143 comm="ip" exe="/usr/sbin/ip" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null) >type=CRYPTO_KEY_USER msg=audit(1414327656.836:4447): pid=7681 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=7681 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327656.836:4448): pid=7681 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=7681 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414327656.838:4449): pid=7680 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=7681 suid=74 rport=59658 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414327656.838:4450): pid=7680 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=7681 suid=74 rport=59658 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327657.378:4451): pid=7680 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=59658 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327657.378:4452): pid=7680 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=e7:e2:3d:94:48:cf:f5:8c:5e:54:98:bd:89:a5:29:a9 rport=59658 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_ACCT msg=audit(1414327657.383:4453): pid=7680 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327657.383:4454): pid=7680 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=7681 suid=74 rport=59658 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327657.384:4455): pid=7680 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1414327657.385:4456): pid=7680 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=LOGIN msg=audit(1414327657.385:4457): pid=7680 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=169 res=1 >type=USER_ROLE_CHANGE msg=audit(1414327657.459:4458): pid=7680 uid=0 auid=0 ses=169 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_START msg=audit(1414327657.477:4459): pid=7680 uid=0 auid=0 ses=169 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1414327657.481:4460): pid=7680 uid=0 auid=0 ses=169 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_START msg=audit(1414327657.481:4461): pid=7680 uid=0 auid=0 ses=169 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327657.483:4462): pid=7686 uid=0 auid=0 ses=169 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=7686 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327657.483:4463): pid=7686 uid=0 auid=0 ses=169 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=7686 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRED_REFR msg=audit(1414327657.484:4464): pid=7686 uid=0 auid=0 ses=169 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_END msg=audit(1414327657.502:4465): pid=7680 uid=0 auid=0 ses=169 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRED_DISP msg=audit(1414327657.502:4466): pid=7680 uid=0 auid=0 ses=169 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_END msg=audit(1414327657.503:4467): pid=7680 uid=0 auid=0 ses=169 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1414327657.503:4468): pid=7680 uid=0 auid=0 ses=169 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327657.503:4469): pid=7680 uid=0 auid=0 ses=169 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=7680 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327657.503:4470): pid=7680 uid=0 auid=0 ses=169 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=7680 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327657.503:4471): pid=7680 uid=0 auid=0 ses=169 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=7680 suid=0 rport=59658 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=NETFILTER_CFG msg=audit(1414327658.756:4472): table=filter family=2 entries=15 >type=SYSCALL msg=audit(1414327658.756:4472): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=96b960 items=0 ppid=7467 pid=7702 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=143 comm="iptables" exe="/usr/sbin/xtables-multi" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null) >type=NETFILTER_CFG msg=audit(1414327658.921:4473): table=filter family=2 entries=16 >type=SYSCALL msg=audit(1414327658.921:4473): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=18dfdc0 items=0 ppid=7467 pid=7735 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=143 comm="iptables" exe="/usr/sbin/xtables-multi" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null) >type=SERVICE_START msg=audit(1414327659.670:4474): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="systemd-tmpfiles-clean" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1414327659.670:4475): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="systemd-tmpfiles-clean" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327660.527:4476): pid=7777 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=7777 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327660.527:4477): pid=7777 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=7777 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414327660.528:4478): pid=7776 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=7777 suid=74 rport=59659 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414327660.529:4479): pid=7776 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=7777 suid=74 rport=59659 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327661.067:4480): pid=7776 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=59659 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327661.067:4481): pid=7776 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=e7:e2:3d:94:48:cf:f5:8c:5e:54:98:bd:89:a5:29:a9 rport=59659 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_ACCT msg=audit(1414327661.072:4482): pid=7776 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327661.072:4483): pid=7776 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=7777 suid=74 rport=59659 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327661.074:4484): pid=7776 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1414327661.074:4485): pid=7776 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=LOGIN msg=audit(1414327661.074:4486): pid=7776 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=170 res=1 >type=USER_ROLE_CHANGE msg=audit(1414327661.148:4487): pid=7776 uid=0 auid=0 ses=170 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_START msg=audit(1414327661.165:4488): pid=7776 uid=0 auid=0 ses=170 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1414327661.169:4489): pid=7776 uid=0 auid=0 ses=170 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_START msg=audit(1414327661.169:4490): pid=7776 uid=0 auid=0 ses=170 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327661.171:4491): pid=7779 uid=0 auid=0 ses=170 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=7779 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327661.171:4492): pid=7779 uid=0 auid=0 ses=170 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=7779 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRED_REFR msg=audit(1414327661.172:4493): pid=7779 uid=0 auid=0 ses=170 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_END msg=audit(1414327661.187:4494): pid=7776 uid=0 auid=0 ses=170 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRED_DISP msg=audit(1414327661.187:4495): pid=7776 uid=0 auid=0 ses=170 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_END msg=audit(1414327661.187:4496): pid=7776 uid=0 auid=0 ses=170 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1414327661.187:4497): pid=7776 uid=0 auid=0 ses=170 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327661.188:4498): pid=7776 uid=0 auid=0 ses=170 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=7776 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327661.188:4499): pid=7776 uid=0 auid=0 ses=170 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=7776 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327661.188:4500): pid=7776 uid=0 auid=0 ses=170 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=7776 suid=0 rport=59659 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327664.222:4501): pid=7794 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=7794 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327664.222:4502): pid=7794 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=7794 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414327664.223:4503): pid=7793 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=7794 suid=74 rport=59664 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414327664.223:4504): pid=7793 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=7794 suid=74 rport=59664 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327664.761:4505): pid=7793 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=59664 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327664.761:4506): pid=7793 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=e7:e2:3d:94:48:cf:f5:8c:5e:54:98:bd:89:a5:29:a9 rport=59664 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_ACCT msg=audit(1414327664.766:4507): pid=7793 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327664.768:4508): pid=7793 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=7794 suid=74 rport=59664 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327664.769:4509): pid=7793 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1414327664.769:4510): pid=7793 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=LOGIN msg=audit(1414327664.769:4511): pid=7793 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=171 res=1 >type=USER_ROLE_CHANGE msg=audit(1414327664.843:4512): pid=7793 uid=0 auid=0 ses=171 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_START msg=audit(1414327664.860:4513): pid=7793 uid=0 auid=0 ses=171 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1414327664.864:4514): pid=7793 uid=0 auid=0 ses=171 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_START msg=audit(1414327664.864:4515): pid=7793 uid=0 auid=0 ses=171 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327664.866:4516): pid=7796 uid=0 auid=0 ses=171 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=7796 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327664.866:4517): pid=7796 uid=0 auid=0 ses=171 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=7796 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRED_REFR msg=audit(1414327664.867:4518): pid=7796 uid=0 auid=0 ses=171 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_END msg=audit(1414327664.883:4519): pid=7793 uid=0 auid=0 ses=171 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRED_DISP msg=audit(1414327664.883:4520): pid=7793 uid=0 auid=0 ses=171 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_END msg=audit(1414327664.884:4521): pid=7793 uid=0 auid=0 ses=171 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1414327664.884:4522): pid=7793 uid=0 auid=0 ses=171 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327664.884:4523): pid=7793 uid=0 auid=0 ses=171 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=7793 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327664.884:4524): pid=7793 uid=0 auid=0 ses=171 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=7793 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327664.884:4525): pid=7793 uid=0 auid=0 ses=171 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=7793 suid=0 rport=59664 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=SERVICE_START msg=audit(1414327665.576:4526): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="target" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327667.906:4527): pid=7857 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=7857 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327667.906:4528): pid=7857 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=7857 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414327667.907:4529): pid=7856 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=7857 suid=74 rport=59665 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414327667.907:4530): pid=7856 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=7857 suid=74 rport=59665 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327668.453:4531): pid=7856 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=59665 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327668.453:4532): pid=7856 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=e7:e2:3d:94:48:cf:f5:8c:5e:54:98:bd:89:a5:29:a9 rport=59665 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_ACCT msg=audit(1414327668.458:4533): pid=7856 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327668.458:4534): pid=7856 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=7857 suid=74 rport=59665 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327668.459:4535): pid=7856 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1414327668.459:4536): pid=7856 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=LOGIN msg=audit(1414327668.459:4537): pid=7856 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=172 res=1 >type=USER_ROLE_CHANGE msg=audit(1414327668.546:4538): pid=7856 uid=0 auid=0 ses=172 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_START msg=audit(1414327668.593:4539): pid=7856 uid=0 auid=0 ses=172 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1414327668.600:4540): pid=7856 uid=0 auid=0 ses=172 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_START msg=audit(1414327668.601:4541): pid=7856 uid=0 auid=0 ses=172 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327668.602:4542): pid=7859 uid=0 auid=0 ses=172 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=7859 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327668.603:4543): pid=7859 uid=0 auid=0 ses=172 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=7859 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRED_REFR msg=audit(1414327668.603:4544): pid=7859 uid=0 auid=0 ses=172 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_END msg=audit(1414327668.627:4545): pid=7856 uid=0 auid=0 ses=172 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRED_DISP msg=audit(1414327668.627:4546): pid=7856 uid=0 auid=0 ses=172 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_END msg=audit(1414327668.629:4547): pid=7856 uid=0 auid=0 ses=172 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1414327668.629:4548): pid=7856 uid=0 auid=0 ses=172 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327668.629:4549): pid=7856 uid=0 auid=0 ses=172 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=7856 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327668.629:4550): pid=7856 uid=0 auid=0 ses=172 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=7856 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327668.629:4551): pid=7856 uid=0 auid=0 ses=172 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=7856 suid=0 rport=59665 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327671.645:4552): pid=7872 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=7872 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327671.645:4553): pid=7872 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=7872 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414327671.646:4554): pid=7871 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=7872 suid=74 rport=59670 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414327671.646:4555): pid=7871 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=7872 suid=74 rport=59670 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327672.182:4556): pid=7871 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=59670 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327672.182:4557): pid=7871 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=e7:e2:3d:94:48:cf:f5:8c:5e:54:98:bd:89:a5:29:a9 rport=59670 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_ACCT msg=audit(1414327672.186:4558): pid=7871 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327672.187:4559): pid=7871 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=7872 suid=74 rport=59670 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327672.188:4560): pid=7871 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1414327672.188:4561): pid=7871 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=LOGIN msg=audit(1414327672.188:4562): pid=7871 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=173 res=1 >type=USER_ROLE_CHANGE msg=audit(1414327672.265:4563): pid=7871 uid=0 auid=0 ses=173 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_START msg=audit(1414327672.281:4564): pid=7871 uid=0 auid=0 ses=173 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1414327672.285:4565): pid=7871 uid=0 auid=0 ses=173 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_START msg=audit(1414327672.286:4566): pid=7871 uid=0 auid=0 ses=173 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327672.287:4567): pid=7876 uid=0 auid=0 ses=173 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=7876 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327672.287:4568): pid=7876 uid=0 auid=0 ses=173 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=7876 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRED_REFR msg=audit(1414327672.288:4569): pid=7876 uid=0 auid=0 ses=173 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_END msg=audit(1414327672.304:4570): pid=7871 uid=0 auid=0 ses=173 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRED_DISP msg=audit(1414327672.304:4571): pid=7871 uid=0 auid=0 ses=173 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_END msg=audit(1414327672.304:4572): pid=7871 uid=0 auid=0 ses=173 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1414327672.304:4573): pid=7871 uid=0 auid=0 ses=173 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327672.304:4574): pid=7871 uid=0 auid=0 ses=173 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=7871 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327672.305:4575): pid=7871 uid=0 auid=0 ses=173 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=7871 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327672.305:4576): pid=7871 uid=0 auid=0 ses=173 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=7871 suid=0 rport=59670 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327675.328:4577): pid=7888 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=7888 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327675.329:4578): pid=7888 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=7888 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414327675.330:4579): pid=7887 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=7888 suid=74 rport=59678 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414327675.330:4580): pid=7887 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=7888 suid=74 rport=59678 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327675.869:4581): pid=7887 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=59678 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327675.869:4582): pid=7887 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=e7:e2:3d:94:48:cf:f5:8c:5e:54:98:bd:89:a5:29:a9 rport=59678 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_ACCT msg=audit(1414327675.874:4583): pid=7887 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327675.874:4584): pid=7887 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=7888 suid=74 rport=59678 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327675.875:4585): pid=7887 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1414327675.875:4586): pid=7887 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=LOGIN msg=audit(1414327675.876:4587): pid=7887 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=174 res=1 >type=USER_ROLE_CHANGE msg=audit(1414327675.948:4588): pid=7887 uid=0 auid=0 ses=174 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_START msg=audit(1414327675.964:4589): pid=7887 uid=0 auid=0 ses=174 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1414327675.968:4590): pid=7887 uid=0 auid=0 ses=174 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_START msg=audit(1414327675.968:4591): pid=7887 uid=0 auid=0 ses=174 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327675.970:4592): pid=7890 uid=0 auid=0 ses=174 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=7890 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327675.970:4593): pid=7890 uid=0 auid=0 ses=174 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=7890 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRED_REFR msg=audit(1414327675.971:4594): pid=7890 uid=0 auid=0 ses=174 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_END msg=audit(1414327675.984:4595): pid=7887 uid=0 auid=0 ses=174 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRED_DISP msg=audit(1414327675.984:4596): pid=7887 uid=0 auid=0 ses=174 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_END msg=audit(1414327675.985:4597): pid=7887 uid=0 auid=0 ses=174 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1414327675.985:4598): pid=7887 uid=0 auid=0 ses=174 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327675.985:4599): pid=7887 uid=0 auid=0 ses=174 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=7887 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327675.985:4600): pid=7887 uid=0 auid=0 ses=174 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=7887 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327675.985:4601): pid=7887 uid=0 auid=0 ses=174 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=7887 suid=0 rport=59678 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327679.014:4602): pid=7898 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=7898 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327679.014:4603): pid=7898 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=7898 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414327679.016:4604): pid=7897 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=7898 suid=74 rport=59688 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414327679.016:4605): pid=7897 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=7898 suid=74 rport=59688 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327679.553:4606): pid=7897 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=59688 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327679.553:4607): pid=7897 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=e7:e2:3d:94:48:cf:f5:8c:5e:54:98:bd:89:a5:29:a9 rport=59688 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_ACCT msg=audit(1414327679.558:4608): pid=7897 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327679.558:4609): pid=7897 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=7898 suid=74 rport=59688 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327679.559:4610): pid=7897 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1414327679.559:4611): pid=7897 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=LOGIN msg=audit(1414327679.559:4612): pid=7897 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=175 res=1 >type=USER_ROLE_CHANGE msg=audit(1414327679.634:4613): pid=7897 uid=0 auid=0 ses=175 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_START msg=audit(1414327679.648:4614): pid=7897 uid=0 auid=0 ses=175 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1414327679.651:4615): pid=7897 uid=0 auid=0 ses=175 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_START msg=audit(1414327679.652:4616): pid=7897 uid=0 auid=0 ses=175 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327679.653:4617): pid=7900 uid=0 auid=0 ses=175 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=7900 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327679.653:4618): pid=7900 uid=0 auid=0 ses=175 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=7900 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRED_REFR msg=audit(1414327679.654:4619): pid=7900 uid=0 auid=0 ses=175 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_END msg=audit(1414327679.668:4620): pid=7897 uid=0 auid=0 ses=175 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRED_DISP msg=audit(1414327679.668:4621): pid=7897 uid=0 auid=0 ses=175 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_END msg=audit(1414327679.668:4622): pid=7897 uid=0 auid=0 ses=175 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1414327679.668:4623): pid=7897 uid=0 auid=0 ses=175 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327679.669:4624): pid=7897 uid=0 auid=0 ses=175 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=7897 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327679.669:4625): pid=7897 uid=0 auid=0 ses=175 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=7897 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327679.669:4626): pid=7897 uid=0 auid=0 ses=175 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=7897 suid=0 rport=59688 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_ACCT msg=audit(1414327681.387:4627): pid=7902 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="keystone" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1414327681.387:4628): pid=7902 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="keystone" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1414327681.388:4629): pid=7902 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=163 old-ses=4294967295 ses=176 res=1 >type=USER_START msg=audit(1414327681.401:4630): pid=7902 uid=0 auid=163 ses=176 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="keystone" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1414327681.401:4631): pid=7902 uid=0 auid=163 ses=176 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="keystone" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1414327681.970:4632): pid=7902 uid=0 auid=163 ses=176 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="keystone" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1414327681.972:4633): pid=7902 uid=0 auid=163 ses=176 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="keystone" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRYPTO_KEY_USER msg=audit(1414327682.694:4634): pid=7924 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=7924 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327682.694:4635): pid=7924 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=7924 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414327682.695:4636): pid=7923 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=7924 suid=74 rport=59699 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414327682.695:4637): pid=7923 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=7924 suid=74 rport=59699 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327683.235:4638): pid=7923 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=59699 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327683.235:4639): pid=7923 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=e7:e2:3d:94:48:cf:f5:8c:5e:54:98:bd:89:a5:29:a9 rport=59699 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_ACCT msg=audit(1414327683.239:4640): pid=7923 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327683.239:4641): pid=7923 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=7924 suid=74 rport=59699 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327683.240:4642): pid=7923 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1414327683.240:4643): pid=7923 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=LOGIN msg=audit(1414327683.241:4644): pid=7923 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=177 res=1 >type=USER_ROLE_CHANGE msg=audit(1414327683.317:4645): pid=7923 uid=0 auid=0 ses=177 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_START msg=audit(1414327683.333:4646): pid=7923 uid=0 auid=0 ses=177 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1414327683.337:4647): pid=7923 uid=0 auid=0 ses=177 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_START msg=audit(1414327683.337:4648): pid=7923 uid=0 auid=0 ses=177 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327683.339:4649): pid=7926 uid=0 auid=0 ses=177 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=7926 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327683.339:4650): pid=7926 uid=0 auid=0 ses=177 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=7926 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRED_REFR msg=audit(1414327683.340:4651): pid=7926 uid=0 auid=0 ses=177 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_END msg=audit(1414327683.353:4652): pid=7923 uid=0 auid=0 ses=177 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRED_DISP msg=audit(1414327683.354:4653): pid=7923 uid=0 auid=0 ses=177 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_END msg=audit(1414327683.354:4654): pid=7923 uid=0 auid=0 ses=177 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1414327683.355:4655): pid=7923 uid=0 auid=0 ses=177 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327683.355:4656): pid=7923 uid=0 auid=0 ses=177 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=7923 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327683.355:4657): pid=7923 uid=0 auid=0 ses=177 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=7923 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327683.355:4658): pid=7923 uid=0 auid=0 ses=177 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=7923 suid=0 rport=59699 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327686.377:4659): pid=7934 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=7934 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327686.377:4660): pid=7934 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=7934 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414327686.379:4661): pid=7933 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=7934 suid=74 rport=59704 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414327686.379:4662): pid=7933 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=7934 suid=74 rport=59704 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327686.916:4663): pid=7933 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=59704 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327686.916:4664): pid=7933 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=e7:e2:3d:94:48:cf:f5:8c:5e:54:98:bd:89:a5:29:a9 rport=59704 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_ACCT msg=audit(1414327686.921:4665): pid=7933 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327686.921:4666): pid=7933 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=7934 suid=74 rport=59704 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327686.922:4667): pid=7933 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1414327686.923:4668): pid=7933 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=LOGIN msg=audit(1414327686.923:4669): pid=7933 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=178 res=1 >type=USER_ROLE_CHANGE msg=audit(1414327686.996:4670): pid=7933 uid=0 auid=0 ses=178 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_START msg=audit(1414327687.013:4671): pid=7933 uid=0 auid=0 ses=178 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1414327687.017:4672): pid=7933 uid=0 auid=0 ses=178 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_START msg=audit(1414327687.017:4673): pid=7933 uid=0 auid=0 ses=178 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327687.020:4674): pid=7936 uid=0 auid=0 ses=178 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=7936 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327687.020:4675): pid=7936 uid=0 auid=0 ses=178 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=7936 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRED_REFR msg=audit(1414327687.021:4676): pid=7936 uid=0 auid=0 ses=178 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_END msg=audit(1414327687.036:4677): pid=7933 uid=0 auid=0 ses=178 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRED_DISP msg=audit(1414327687.036:4678): pid=7933 uid=0 auid=0 ses=178 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_END msg=audit(1414327687.036:4679): pid=7933 uid=0 auid=0 ses=178 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1414327687.037:4680): pid=7933 uid=0 auid=0 ses=178 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327687.037:4681): pid=7933 uid=0 auid=0 ses=178 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=7933 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327687.037:4682): pid=7933 uid=0 auid=0 ses=178 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=7933 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327687.037:4683): pid=7933 uid=0 auid=0 ses=178 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=7933 suid=0 rport=59704 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327690.061:4684): pid=7946 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=7946 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327690.062:4685): pid=7946 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=7946 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414327690.063:4686): pid=7945 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=7946 suid=74 rport=59705 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414327690.063:4687): pid=7945 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=7946 suid=74 rport=59705 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327690.601:4688): pid=7945 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=59705 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327690.601:4689): pid=7945 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=e7:e2:3d:94:48:cf:f5:8c:5e:54:98:bd:89:a5:29:a9 rport=59705 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_ACCT msg=audit(1414327690.605:4690): pid=7945 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327690.606:4691): pid=7945 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=7946 suid=74 rport=59705 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327690.607:4692): pid=7945 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1414327690.607:4693): pid=7945 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=LOGIN msg=audit(1414327690.607:4694): pid=7945 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=179 res=1 >type=USER_ROLE_CHANGE msg=audit(1414327690.681:4695): pid=7945 uid=0 auid=0 ses=179 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_START msg=audit(1414327691.081:4696): pid=7945 uid=0 auid=0 ses=179 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1414327691.086:4697): pid=7945 uid=0 auid=0 ses=179 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_START msg=audit(1414327691.086:4698): pid=7945 uid=0 auid=0 ses=179 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327691.088:4699): pid=7972 uid=0 auid=0 ses=179 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=7972 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327691.088:4700): pid=7972 uid=0 auid=0 ses=179 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=7972 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRED_REFR msg=audit(1414327691.089:4701): pid=7972 uid=0 auid=0 ses=179 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_END msg=audit(1414327691.154:4702): pid=7945 uid=0 auid=0 ses=179 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRED_DISP msg=audit(1414327691.154:4703): pid=7945 uid=0 auid=0 ses=179 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_END msg=audit(1414327691.155:4704): pid=7945 uid=0 auid=0 ses=179 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1414327691.155:4705): pid=7945 uid=0 auid=0 ses=179 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327691.155:4706): pid=7945 uid=0 auid=0 ses=179 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=7945 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327691.155:4707): pid=7945 uid=0 auid=0 ses=179 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=7945 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327691.155:4708): pid=7945 uid=0 auid=0 ses=179 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=7945 suid=0 rport=59705 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327694.132:4709): pid=8004 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=8004 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327694.133:4710): pid=8004 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=8004 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414327694.134:4711): pid=8003 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=8004 suid=74 rport=59706 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414327694.136:4712): pid=8003 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=8004 suid=74 rport=59706 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327694.671:4713): pid=8003 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=59706 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327694.671:4714): pid=8003 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=e7:e2:3d:94:48:cf:f5:8c:5e:54:98:bd:89:a5:29:a9 rport=59706 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_ACCT msg=audit(1414327694.676:4715): pid=8003 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327694.677:4716): pid=8003 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=8004 suid=74 rport=59706 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327694.678:4717): pid=8003 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1414327694.678:4718): pid=8003 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=LOGIN msg=audit(1414327694.678:4719): pid=8003 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=180 res=1 >type=USER_ROLE_CHANGE msg=audit(1414327694.754:4720): pid=8003 uid=0 auid=0 ses=180 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_START msg=audit(1414327694.804:4721): pid=8003 uid=0 auid=0 ses=180 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1414327694.812:4722): pid=8003 uid=0 auid=0 ses=180 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_START msg=audit(1414327694.813:4723): pid=8003 uid=0 auid=0 ses=180 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327694.815:4724): pid=8007 uid=0 auid=0 ses=180 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=8007 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327694.815:4725): pid=8007 uid=0 auid=0 ses=180 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=8007 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRED_REFR msg=audit(1414327694.816:4726): pid=8007 uid=0 auid=0 ses=180 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_END msg=audit(1414327694.832:4727): pid=8003 uid=0 auid=0 ses=180 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRED_DISP msg=audit(1414327694.833:4728): pid=8003 uid=0 auid=0 ses=180 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_END msg=audit(1414327694.833:4729): pid=8003 uid=0 auid=0 ses=180 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1414327694.833:4730): pid=8003 uid=0 auid=0 ses=180 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327694.834:4731): pid=8003 uid=0 auid=0 ses=180 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=8003 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327694.834:4732): pid=8003 uid=0 auid=0 ses=180 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=8003 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327694.834:4733): pid=8003 uid=0 auid=0 ses=180 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=8003 suid=0 rport=59706 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=SERVICE_START msg=audit(1414327695.099:4734): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="rsyslog" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1414327695.099:4735): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="rsyslog" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1414327695.828:4736): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="rsyslog" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327697.861:4737): pid=8024 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=8024 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327697.862:4738): pid=8024 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=8024 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414327697.863:4739): pid=8023 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=8024 suid=74 rport=59707 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414327697.865:4740): pid=8023 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=8024 suid=74 rport=59707 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327698.403:4741): pid=8023 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=59707 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327698.403:4742): pid=8023 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=e7:e2:3d:94:48:cf:f5:8c:5e:54:98:bd:89:a5:29:a9 rport=59707 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_ACCT msg=audit(1414327698.406:4743): pid=8023 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327698.407:4744): pid=8023 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=8024 suid=74 rport=59707 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327698.408:4745): pid=8023 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1414327698.408:4746): pid=8023 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=LOGIN msg=audit(1414327698.408:4747): pid=8023 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=181 res=1 >type=USER_ROLE_CHANGE msg=audit(1414327698.485:4748): pid=8023 uid=0 auid=0 ses=181 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_START msg=audit(1414327698.500:4749): pid=8023 uid=0 auid=0 ses=181 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1414327698.505:4750): pid=8023 uid=0 auid=0 ses=181 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_START msg=audit(1414327698.505:4751): pid=8023 uid=0 auid=0 ses=181 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327698.506:4752): pid=8026 uid=0 auid=0 ses=181 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=8026 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327698.507:4753): pid=8026 uid=0 auid=0 ses=181 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=8026 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRED_REFR msg=audit(1414327698.507:4754): pid=8026 uid=0 auid=0 ses=181 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_END msg=audit(1414327698.522:4755): pid=8023 uid=0 auid=0 ses=181 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRED_DISP msg=audit(1414327698.522:4756): pid=8023 uid=0 auid=0 ses=181 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_END msg=audit(1414327698.523:4757): pid=8023 uid=0 auid=0 ses=181 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1414327698.523:4758): pid=8023 uid=0 auid=0 ses=181 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327698.523:4759): pid=8023 uid=0 auid=0 ses=181 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=8023 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327698.523:4760): pid=8023 uid=0 auid=0 ses=181 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=8023 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327698.523:4761): pid=8023 uid=0 auid=0 ses=181 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=8023 suid=0 rport=59707 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=ADD_GROUP msg=audit(1414327701.461:4762): pid=8031 uid=0 auid=0 ses=143 subj=unconfined_u:system_r:groupadd_t:s0-s0:c0.c1023 msg='op=adding group to /etc/group id=165 exe="/usr/sbin/groupadd" hostname=? addr=? terminal=? res=success' >type=ADD_GROUP msg=audit(1414327701.463:4763): pid=8031 uid=0 auid=0 ses=143 subj=unconfined_u:system_r:groupadd_t:s0-s0:c0.c1023 msg='op=adding group to /etc/gshadow id=165 exe="/usr/sbin/groupadd" hostname=? addr=? terminal=? res=success' >type=ADD_GROUP msg=audit(1414327701.464:4764): pid=8031 uid=0 auid=0 ses=143 subj=unconfined_u:system_r:groupadd_t:s0-s0:c0.c1023 msg='op= id=165 exe="/usr/sbin/groupadd" hostname=? addr=? terminal=? res=success' >type=ADD_USER msg=audit(1414327701.473:4765): pid=8036 uid=0 auid=0 ses=143 subj=unconfined_u:system_r:useradd_t:s0-s0:c0.c1023 msg='op=adding user id=165 exe="/usr/sbin/useradd" hostname=? addr=? terminal=? res=success' >type=ADD_USER msg=audit(1414327701.473:4766): pid=8036 uid=0 auid=0 ses=143 subj=unconfined_u:system_r:useradd_t:s0-s0:c0.c1023 msg='op=adding user to group acct="cinder" exe="/usr/sbin/useradd" hostname=? addr=? terminal=? res=success' >type=ADD_USER msg=audit(1414327701.473:4767): pid=8036 uid=0 auid=0 ses=143 subj=unconfined_u:system_r:useradd_t:s0-s0:c0.c1023 msg='op=adding user to group acct="cinder" exe="/usr/sbin/useradd" hostname=? addr=? terminal=? res=success' >type=ADD_USER msg=audit(1414327701.473:4768): pid=8036 uid=0 auid=0 ses=143 subj=unconfined_u:system_r:useradd_t:s0-s0:c0.c1023 msg='op=adding user to shadow group acct="cinder" exe="/usr/sbin/useradd" hostname=? addr=? terminal=? res=success' >type=ADD_USER msg=audit(1414327701.473:4769): pid=8036 uid=0 auid=0 ses=143 subj=unconfined_u:system_r:useradd_t:s0-s0:c0.c1023 msg='op=adding user to shadow group acct="cinder" exe="/usr/sbin/useradd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327701.550:4770): pid=8056 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=8056 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327701.550:4771): pid=8056 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=8056 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414327701.551:4772): pid=8055 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=8056 suid=74 rport=59708 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414327701.551:4773): pid=8055 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=8056 suid=74 rport=59708 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327702.090:4774): pid=8055 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=59708 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327702.090:4775): pid=8055 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=e7:e2:3d:94:48:cf:f5:8c:5e:54:98:bd:89:a5:29:a9 rport=59708 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_ACCT msg=audit(1414327702.095:4776): pid=8055 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327702.095:4777): pid=8055 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=8056 suid=74 rport=59708 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327702.096:4778): pid=8055 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1414327702.097:4779): pid=8055 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=LOGIN msg=audit(1414327702.097:4780): pid=8055 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=182 res=1 >type=USER_ROLE_CHANGE msg=audit(1414327702.178:4781): pid=8055 uid=0 auid=0 ses=182 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_START msg=audit(1414327702.227:4782): pid=8055 uid=0 auid=0 ses=182 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1414327702.237:4783): pid=8055 uid=0 auid=0 ses=182 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_START msg=audit(1414327702.237:4784): pid=8055 uid=0 auid=0 ses=182 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327702.239:4785): pid=8090 uid=0 auid=0 ses=182 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=8090 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327702.240:4786): pid=8090 uid=0 auid=0 ses=182 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=8090 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRED_REFR msg=audit(1414327702.240:4787): pid=8090 uid=0 auid=0 ses=182 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_END msg=audit(1414327702.259:4788): pid=8055 uid=0 auid=0 ses=182 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRED_DISP msg=audit(1414327702.260:4789): pid=8055 uid=0 auid=0 ses=182 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_END msg=audit(1414327702.260:4790): pid=8055 uid=0 auid=0 ses=182 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1414327702.260:4791): pid=8055 uid=0 auid=0 ses=182 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327702.260:4792): pid=8055 uid=0 auid=0 ses=182 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=8055 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327702.261:4793): pid=8055 uid=0 auid=0 ses=182 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=8055 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327702.261:4794): pid=8055 uid=0 auid=0 ses=182 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=8055 suid=0 rport=59708 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=SERVICE_START msg=audit(1414327702.979:4795): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="openstack-cinder-api" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1414327704.501:4796): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="openstack-cinder-backup" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1414327704.680:4797): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="openstack-cinder-volume" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1414327704.865:4798): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="openstack-cinder-scheduler" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1414327705.061:4799): pid=8234 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D4320766773202D2D6E6F68656164696E6773202D6F206E616D652063696E6465722D766F6C756D6573 terminal=? res=success' >type=CRED_ACQ msg=audit(1414327705.061:4800): pid=8234 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1414327705.063:4801): pid=8234 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1414327705.139:4802): pid=8234 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1414327705.139:4803): pid=8234 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1414327705.151:4804): pid=8238 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D4320707673202D2D6E6F68656164696E6773202D2D756E69743D67202D6F2076675F6E616D652C6E616D652C73697A652C66726565202D2D736570617261746F72203A202D2D6E6F737566666978 terminal=? res=success' >type=CRED_ACQ msg=audit(1414327705.151:4805): pid=8238 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1414327705.151:4806): pid=8238 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1414327705.211:4807): pid=8248 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D4320766773202D2D6E6F68656164696E6773202D6F206E616D652063696E6465722D766F6C756D6573 terminal=? res=success' >type=CRED_ACQ msg=audit(1414327705.211:4808): pid=8248 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1414327705.212:4809): pid=8248 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1414327705.214:4810): pid=8238 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1414327705.215:4811): pid=8238 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1414327705.223:4812): pid=8250 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D4320766773202D2D6E6F68656164696E6773202D2D756E69743D67202D6F206E616D652C73697A652C667265652C6C765F636F756E742C75756964202D2D736570617261746F72203A202D2D6E6F7375666669782063696E6465722D766F6C756D6573 terminal=? res=success' >type=CRED_ACQ msg=audit(1414327705.223:4813): pid=8250 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1414327705.223:4814): pid=8250 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1414327705.287:4815): pid=8248 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1414327705.287:4816): pid=8248 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1414327705.299:4817): pid=8250 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1414327705.299:4818): pid=8250 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327705.305:4819): pid=8264 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=8264 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327705.305:4820): pid=8264 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=8264 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_CMD msg=audit(1414327705.306:4821): pid=8261 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D4320707673202D2D6E6F68656164696E6773202D2D756E69743D67202D6F2076675F6E616D652C6E616D652C73697A652C66726565202D2D736570617261746F72203A202D2D6E6F737566666978 terminal=? res=success' >type=CRED_ACQ msg=audit(1414327705.306:4822): pid=8261 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1414327705.306:4823): pid=8261 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414327705.319:4824): pid=8263 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=8264 suid=74 rport=59711 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414327705.320:4825): pid=8263 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=8264 suid=74 rport=59711 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_END msg=audit(1414327705.416:4826): pid=8261 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1414327705.416:4827): pid=8261 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1414327705.429:4828): pid=8267 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D4320766773202D2D6E6F68656164696E6773202D2D756E69743D67202D6F206E616D652C73697A652C667265652C6C765F636F756E742C75756964202D2D736570617261746F72203A202D2D6E6F7375666669782063696E6465722D766F6C756D6573 terminal=? res=success' >type=CRED_ACQ msg=audit(1414327705.429:4829): pid=8267 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1414327705.429:4830): pid=8267 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1414327705.494:4831): pid=8267 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1414327705.495:4832): pid=8267 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1414327705.851:4833): pid=8281 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D4320766773202D2D6E6F68656164696E6773202D2D756E69743D67202D6F206E616D652C73697A652C667265652C6C765F636F756E742C75756964202D2D736570617261746F72203A202D2D6E6F7375666669782063696E6465722D766F6C756D6573 terminal=? res=success' >type=CRED_ACQ msg=audit(1414327705.851:4834): pid=8281 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1414327705.851:4835): pid=8281 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_AUTH msg=audit(1414327705.889:4836): pid=8263 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=59711 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327705.889:4837): pid=8263 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=e7:e2:3d:94:48:cf:f5:8c:5e:54:98:bd:89:a5:29:a9 rport=59711 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_ACCT msg=audit(1414327705.894:4838): pid=8263 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327705.894:4839): pid=8263 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=8264 suid=74 rport=59711 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327705.895:4840): pid=8263 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1414327705.895:4841): pid=8263 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=LOGIN msg=audit(1414327705.895:4842): pid=8263 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=183 res=1 >type=USER_END msg=audit(1414327705.915:4843): pid=8281 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1414327705.915:4844): pid=8281 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_ROLE_CHANGE msg=audit(1414327705.973:4845): pid=8263 uid=0 auid=0 ses=183 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_START msg=audit(1414327706.018:4846): pid=8263 uid=0 auid=0 ses=183 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1414327706.022:4847): pid=8263 uid=0 auid=0 ses=183 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_START msg=audit(1414327706.023:4848): pid=8263 uid=0 auid=0 ses=183 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327706.024:4849): pid=8285 uid=0 auid=0 ses=183 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=8285 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327706.024:4850): pid=8285 uid=0 auid=0 ses=183 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=8285 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRED_REFR msg=audit(1414327706.025:4851): pid=8285 uid=0 auid=0 ses=183 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_END msg=audit(1414327706.039:4852): pid=8263 uid=0 auid=0 ses=183 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRED_DISP msg=audit(1414327706.039:4853): pid=8263 uid=0 auid=0 ses=183 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_END msg=audit(1414327706.040:4854): pid=8263 uid=0 auid=0 ses=183 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1414327706.040:4855): pid=8263 uid=0 auid=0 ses=183 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327706.040:4856): pid=8263 uid=0 auid=0 ses=183 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=8263 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327706.040:4857): pid=8263 uid=0 auid=0 ses=183 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=8263 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327706.040:4858): pid=8263 uid=0 auid=0 ses=183 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=8263 suid=0 rport=59711 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327709.064:4859): pid=8295 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=8295 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327709.065:4860): pid=8295 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=8295 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414327709.066:4861): pid=8294 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=8295 suid=74 rport=59735 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414327709.066:4862): pid=8294 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=8295 suid=74 rport=59735 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327709.603:4863): pid=8294 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=59735 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327709.603:4864): pid=8294 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=e7:e2:3d:94:48:cf:f5:8c:5e:54:98:bd:89:a5:29:a9 rport=59735 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_ACCT msg=audit(1414327709.608:4865): pid=8294 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327709.608:4866): pid=8294 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=8295 suid=74 rport=59735 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327709.609:4867): pid=8294 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1414327709.609:4868): pid=8294 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=LOGIN msg=audit(1414327709.609:4869): pid=8294 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=184 res=1 >type=USER_ROLE_CHANGE msg=audit(1414327709.685:4870): pid=8294 uid=0 auid=0 ses=184 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_START msg=audit(1414327709.702:4871): pid=8294 uid=0 auid=0 ses=184 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1414327709.707:4872): pid=8294 uid=0 auid=0 ses=184 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_START msg=audit(1414327709.707:4873): pid=8294 uid=0 auid=0 ses=184 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327709.709:4874): pid=8297 uid=0 auid=0 ses=184 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=8297 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327709.709:4875): pid=8297 uid=0 auid=0 ses=184 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=8297 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRED_REFR msg=audit(1414327709.710:4876): pid=8297 uid=0 auid=0 ses=184 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_END msg=audit(1414327709.730:4877): pid=8294 uid=0 auid=0 ses=184 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRED_DISP msg=audit(1414327709.730:4878): pid=8294 uid=0 auid=0 ses=184 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_END msg=audit(1414327709.731:4879): pid=8294 uid=0 auid=0 ses=184 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1414327709.731:4880): pid=8294 uid=0 auid=0 ses=184 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327709.731:4881): pid=8294 uid=0 auid=0 ses=184 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=8294 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327709.731:4882): pid=8294 uid=0 auid=0 ses=184 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=8294 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327709.732:4883): pid=8294 uid=0 auid=0 ses=184 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=8294 suid=0 rport=59735 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327709.753:4884): pid=8303 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=8303 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327709.753:4885): pid=8303 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=8303 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414327709.755:4886): pid=8302 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=8303 suid=74 rport=59736 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414327709.755:4887): pid=8302 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=8303 suid=74 rport=59736 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327710.293:4888): pid=8302 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=59736 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327710.293:4889): pid=8302 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=e7:e2:3d:94:48:cf:f5:8c:5e:54:98:bd:89:a5:29:a9 rport=59736 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_ACCT msg=audit(1414327710.298:4890): pid=8302 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327710.298:4891): pid=8302 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=8303 suid=74 rport=59736 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327710.300:4892): pid=8302 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1414327710.300:4893): pid=8302 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=LOGIN msg=audit(1414327710.300:4894): pid=8302 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=185 res=1 >type=USER_ROLE_CHANGE msg=audit(1414327710.371:4895): pid=8302 uid=0 auid=0 ses=185 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_START msg=audit(1414327710.386:4896): pid=8302 uid=0 auid=0 ses=185 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1414327710.390:4897): pid=8302 uid=0 auid=0 ses=185 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_START msg=audit(1414327710.390:4898): pid=8302 uid=0 auid=0 ses=185 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327710.392:4899): pid=8305 uid=0 auid=0 ses=185 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=8305 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327710.392:4900): pid=8305 uid=0 auid=0 ses=185 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=8305 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRED_REFR msg=audit(1414327710.393:4901): pid=8305 uid=0 auid=0 ses=185 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_END msg=audit(1414327710.410:4902): pid=8302 uid=0 auid=0 ses=185 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRED_DISP msg=audit(1414327710.410:4903): pid=8302 uid=0 auid=0 ses=185 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_END msg=audit(1414327710.410:4904): pid=8302 uid=0 auid=0 ses=185 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1414327710.411:4905): pid=8302 uid=0 auid=0 ses=185 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327710.411:4906): pid=8302 uid=0 auid=0 ses=185 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=8302 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327710.411:4907): pid=8302 uid=0 auid=0 ses=185 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=8302 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327710.411:4908): pid=8302 uid=0 auid=0 ses=185 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=8302 suid=0 rport=59736 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=NETFILTER_CFG msg=audit(1414327712.164:4909): table=filter family=2 entries=0 >type=SYSCALL msg=audit(1414327712.164:4909): arch=c000003e syscall=272 success=yes exit=0 a0=40000000 a1=c0 a2=0 a3=7fffb91d8890 items=0 ppid=8435 pid=8444 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=142 comm="ip" exe="/usr/sbin/ip" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null) >type=NETFILTER_CFG msg=audit(1414327712.222:4910): table=filter family=2 entries=0 >type=SYSCALL msg=audit(1414327712.222:4910): arch=c000003e syscall=272 success=yes exit=0 a0=40000000 a1=c0 a2=0 a3=7fff8a7b3120 items=0 ppid=8435 pid=8451 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=142 comm="ip" exe="/usr/sbin/ip" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null) >type=NETFILTER_CFG msg=audit(1414327712.546:4911): table=filter family=2 entries=0 >type=SYSCALL msg=audit(1414327712.546:4911): arch=c000003e syscall=272 success=yes exit=0 a0=40000000 a1=c0 a2=0 a3=7ffff6850dd0 items=0 ppid=8435 pid=8453 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=142 comm="ip" exe="/usr/sbin/ip" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null) >type=CRYPTO_KEY_USER msg=audit(1414327713.435:4912): pid=8473 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=8473 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327713.436:4913): pid=8473 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=8473 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414327713.439:4914): pid=8472 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=8473 suid=74 rport=59744 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414327713.440:4915): pid=8472 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=8473 suid=74 rport=59744 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327713.979:4916): pid=8472 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=59744 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327713.979:4917): pid=8472 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=e7:e2:3d:94:48:cf:f5:8c:5e:54:98:bd:89:a5:29:a9 rport=59744 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_ACCT msg=audit(1414327713.983:4918): pid=8472 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327713.984:4919): pid=8472 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=8473 suid=74 rport=59744 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327713.985:4920): pid=8472 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1414327713.985:4921): pid=8472 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=LOGIN msg=audit(1414327713.985:4922): pid=8472 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=186 res=1 >type=USER_ROLE_CHANGE msg=audit(1414327714.062:4923): pid=8472 uid=0 auid=0 ses=186 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_START msg=audit(1414327714.078:4924): pid=8472 uid=0 auid=0 ses=186 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1414327714.082:4925): pid=8472 uid=0 auid=0 ses=186 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_START msg=audit(1414327714.082:4926): pid=8472 uid=0 auid=0 ses=186 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327714.084:4927): pid=8475 uid=0 auid=0 ses=186 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=8475 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327714.084:4928): pid=8475 uid=0 auid=0 ses=186 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=8475 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRED_REFR msg=audit(1414327714.085:4929): pid=8475 uid=0 auid=0 ses=186 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_END msg=audit(1414327714.101:4930): pid=8472 uid=0 auid=0 ses=186 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRED_DISP msg=audit(1414327714.101:4931): pid=8472 uid=0 auid=0 ses=186 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_END msg=audit(1414327714.102:4932): pid=8472 uid=0 auid=0 ses=186 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1414327714.102:4933): pid=8472 uid=0 auid=0 ses=186 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327714.103:4934): pid=8472 uid=0 auid=0 ses=186 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=8472 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327714.103:4935): pid=8472 uid=0 auid=0 ses=186 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=8472 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327714.103:4936): pid=8472 uid=0 auid=0 ses=186 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=8472 suid=0 rport=59744 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327717.135:4937): pid=8505 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=8505 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327717.135:4938): pid=8505 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=8505 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414327717.138:4939): pid=8504 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=8505 suid=74 rport=59745 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414327717.138:4940): pid=8504 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=8505 suid=74 rport=59745 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327717.680:4941): pid=8504 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=59745 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327717.680:4942): pid=8504 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=e7:e2:3d:94:48:cf:f5:8c:5e:54:98:bd:89:a5:29:a9 rport=59745 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_ACCT msg=audit(1414327717.685:4943): pid=8504 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327717.685:4944): pid=8504 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=8505 suid=74 rport=59745 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327717.686:4945): pid=8504 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1414327717.686:4946): pid=8504 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=LOGIN msg=audit(1414327717.687:4947): pid=8504 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=187 res=1 >type=USER_ROLE_CHANGE msg=audit(1414327717.769:4948): pid=8504 uid=0 auid=0 ses=187 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_START msg=audit(1414327717.790:4949): pid=8504 uid=0 auid=0 ses=187 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1414327717.794:4950): pid=8504 uid=0 auid=0 ses=187 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_START msg=audit(1414327717.794:4951): pid=8504 uid=0 auid=0 ses=187 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327717.796:4952): pid=8513 uid=0 auid=0 ses=187 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=8513 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327717.796:4953): pid=8513 uid=0 auid=0 ses=187 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=8513 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRED_REFR msg=audit(1414327717.797:4954): pid=8513 uid=0 auid=0 ses=187 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_END msg=audit(1414327717.812:4955): pid=8504 uid=0 auid=0 ses=187 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRED_DISP msg=audit(1414327717.812:4956): pid=8504 uid=0 auid=0 ses=187 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_END msg=audit(1414327717.813:4957): pid=8504 uid=0 auid=0 ses=187 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1414327717.813:4958): pid=8504 uid=0 auid=0 ses=187 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327717.813:4959): pid=8504 uid=0 auid=0 ses=187 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=8504 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327717.813:4960): pid=8504 uid=0 auid=0 ses=187 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=8504 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327717.813:4961): pid=8504 uid=0 auid=0 ses=187 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=8504 suid=0 rport=59745 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327720.833:4962): pid=8528 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=8528 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327720.833:4963): pid=8528 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=8528 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414327720.834:4964): pid=8527 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=8528 suid=74 rport=59749 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414327720.835:4965): pid=8527 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=8528 suid=74 rport=59749 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327721.370:4966): pid=8527 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=59749 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327721.370:4967): pid=8527 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=e7:e2:3d:94:48:cf:f5:8c:5e:54:98:bd:89:a5:29:a9 rport=59749 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_ACCT msg=audit(1414327721.374:4968): pid=8527 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327721.375:4969): pid=8527 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=8528 suid=74 rport=59749 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327721.376:4970): pid=8527 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1414327721.376:4971): pid=8527 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=LOGIN msg=audit(1414327721.376:4972): pid=8527 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=188 res=1 >type=USER_ROLE_CHANGE msg=audit(1414327721.452:4973): pid=8527 uid=0 auid=0 ses=188 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_START msg=audit(1414327721.470:4974): pid=8527 uid=0 auid=0 ses=188 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1414327721.478:4975): pid=8527 uid=0 auid=0 ses=188 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_START msg=audit(1414327721.478:4976): pid=8527 uid=0 auid=0 ses=188 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327721.480:4977): pid=8532 uid=0 auid=0 ses=188 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=8532 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327721.480:4978): pid=8532 uid=0 auid=0 ses=188 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=8532 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRED_REFR msg=audit(1414327721.482:4979): pid=8532 uid=0 auid=0 ses=188 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_END msg=audit(1414327721.497:4980): pid=8527 uid=0 auid=0 ses=188 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRED_DISP msg=audit(1414327721.497:4981): pid=8527 uid=0 auid=0 ses=188 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_END msg=audit(1414327721.498:4982): pid=8527 uid=0 auid=0 ses=188 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1414327721.498:4983): pid=8527 uid=0 auid=0 ses=188 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327721.498:4984): pid=8527 uid=0 auid=0 ses=188 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=8527 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327721.498:4985): pid=8527 uid=0 auid=0 ses=188 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=8527 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327721.498:4986): pid=8527 uid=0 auid=0 ses=188 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=8527 suid=0 rport=59749 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327724.519:4987): pid=8542 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=8542 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327724.519:4988): pid=8542 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=8542 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414327724.520:4989): pid=8541 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=8542 suid=74 rport=59757 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414327724.521:4990): pid=8541 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=8542 suid=74 rport=59757 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327725.059:4991): pid=8541 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=59757 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327725.059:4992): pid=8541 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=e7:e2:3d:94:48:cf:f5:8c:5e:54:98:bd:89:a5:29:a9 rport=59757 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_ACCT msg=audit(1414327725.063:4993): pid=8541 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327725.064:4994): pid=8541 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=8542 suid=74 rport=59757 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327725.065:4995): pid=8541 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1414327725.065:4996): pid=8541 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=LOGIN msg=audit(1414327725.065:4997): pid=8541 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=189 res=1 >type=USER_ROLE_CHANGE msg=audit(1414327725.140:4998): pid=8541 uid=0 auid=0 ses=189 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_START msg=audit(1414327725.155:4999): pid=8541 uid=0 auid=0 ses=189 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1414327725.159:5000): pid=8541 uid=0 auid=0 ses=189 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_START msg=audit(1414327725.159:5001): pid=8541 uid=0 auid=0 ses=189 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327725.161:5002): pid=8546 uid=0 auid=0 ses=189 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=8546 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327725.161:5003): pid=8546 uid=0 auid=0 ses=189 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=8546 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRED_REFR msg=audit(1414327725.162:5004): pid=8546 uid=0 auid=0 ses=189 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_END msg=audit(1414327725.171:5005): pid=8541 uid=0 auid=0 ses=189 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1414327725.172:5006): pid=8541 uid=0 auid=0 ses=189 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_END msg=audit(1414327725.175:5007): pid=8541 uid=0 auid=0 ses=189 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRED_DISP msg=audit(1414327725.176:5008): pid=8541 uid=0 auid=0 ses=189 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327725.176:5009): pid=8541 uid=0 auid=0 ses=189 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=8541 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327725.176:5010): pid=8541 uid=0 auid=0 ses=189 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=8541 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327725.176:5011): pid=8541 uid=0 auid=0 ses=189 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=8541 suid=0 rport=59757 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327728.204:5012): pid=8552 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=8552 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327728.204:5013): pid=8552 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=8552 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414327728.205:5014): pid=8551 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=8552 suid=74 rport=59762 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414327728.205:5015): pid=8551 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=8552 suid=74 rport=59762 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=ADD_GROUP msg=audit(1414327728.443:5016): pid=8555 uid=0 auid=0 ses=142 subj=unconfined_u:system_r:groupadd_t:s0-s0:c0.c1023 msg='op=adding group to /etc/group id=161 exe="/usr/sbin/groupadd" hostname=? addr=? terminal=? res=success' >type=ADD_GROUP msg=audit(1414327728.446:5017): pid=8555 uid=0 auid=0 ses=142 subj=unconfined_u:system_r:groupadd_t:s0-s0:c0.c1023 msg='op=adding group to /etc/gshadow id=161 exe="/usr/sbin/groupadd" hostname=? addr=? terminal=? res=success' >type=ADD_GROUP msg=audit(1414327728.447:5018): pid=8555 uid=0 auid=0 ses=142 subj=unconfined_u:system_r:groupadd_t:s0-s0:c0.c1023 msg='op= id=161 exe="/usr/sbin/groupadd" hostname=? addr=? terminal=? res=success' >type=ADD_USER msg=audit(1414327728.457:5019): pid=8560 uid=0 auid=0 ses=142 subj=unconfined_u:system_r:useradd_t:s0-s0:c0.c1023 msg='op=adding user id=161 exe="/usr/sbin/useradd" hostname=? addr=? terminal=? res=success' >type=USER_AUTH msg=audit(1414327728.745:5020): pid=8551 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=59762 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327728.745:5021): pid=8551 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=e7:e2:3d:94:48:cf:f5:8c:5e:54:98:bd:89:a5:29:a9 rport=59762 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_ACCT msg=audit(1414327728.750:5022): pid=8551 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327728.751:5023): pid=8551 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=8552 suid=74 rport=59762 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327728.752:5024): pid=8551 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1414327728.753:5025): pid=8551 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=LOGIN msg=audit(1414327728.753:5026): pid=8551 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=190 res=1 >type=USER_ROLE_CHANGE msg=audit(1414327728.861:5027): pid=8551 uid=0 auid=0 ses=190 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_START msg=audit(1414327728.913:5028): pid=8551 uid=0 auid=0 ses=190 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1414327728.919:5029): pid=8551 uid=0 auid=0 ses=190 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_START msg=audit(1414327728.919:5030): pid=8551 uid=0 auid=0 ses=190 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327728.922:5031): pid=8597 uid=0 auid=0 ses=190 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=8597 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327728.922:5032): pid=8597 uid=0 auid=0 ses=190 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=8597 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRED_REFR msg=audit(1414327728.922:5033): pid=8597 uid=0 auid=0 ses=190 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_END msg=audit(1414327728.938:5034): pid=8551 uid=0 auid=0 ses=190 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRED_DISP msg=audit(1414327728.939:5035): pid=8551 uid=0 auid=0 ses=190 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_END msg=audit(1414327728.939:5036): pid=8551 uid=0 auid=0 ses=190 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1414327728.939:5037): pid=8551 uid=0 auid=0 ses=190 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327728.940:5038): pid=8551 uid=0 auid=0 ses=190 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=8551 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327728.940:5039): pid=8551 uid=0 auid=0 ses=190 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=8551 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327728.940:5040): pid=8551 uid=0 auid=0 ses=190 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=8551 suid=0 rport=59762 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=NETFILTER_CFG msg=audit(1414327729.367:5041): table=filter family=2 entries=17 >type=SYSCALL msg=audit(1414327729.367:5041): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=19fc210 items=0 ppid=8252 pid=8608 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=142 comm="iptables" exe="/usr/sbin/xtables-multi" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null) >type=SERVICE_START msg=audit(1414327731.662:5042): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="openstack-glance-registry" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327731.959:5043): pid=8699 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=8699 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327731.960:5044): pid=8699 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=8699 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414327731.961:5045): pid=8698 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=8699 suid=74 rport=59765 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414327731.961:5046): pid=8698 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=8699 suid=74 rport=59765 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327732.503:5047): pid=8698 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=59765 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327732.503:5048): pid=8698 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=e7:e2:3d:94:48:cf:f5:8c:5e:54:98:bd:89:a5:29:a9 rport=59765 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_ACCT msg=audit(1414327732.507:5049): pid=8698 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327732.508:5050): pid=8698 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=8699 suid=74 rport=59765 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327732.509:5051): pid=8698 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1414327732.509:5052): pid=8698 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=LOGIN msg=audit(1414327732.509:5053): pid=8698 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=191 res=1 >type=SERVICE_START msg=audit(1414327732.525:5054): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="openstack-glance-api" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=USER_ROLE_CHANGE msg=audit(1414327732.590:5055): pid=8698 uid=0 auid=0 ses=191 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_START msg=audit(1414327733.000:5056): pid=8698 uid=0 auid=0 ses=191 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1414327733.004:5057): pid=8698 uid=0 auid=0 ses=191 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_START msg=audit(1414327733.005:5058): pid=8698 uid=0 auid=0 ses=191 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327733.005:5059): pid=8726 uid=0 auid=0 ses=191 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=8726 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327733.005:5060): pid=8726 uid=0 auid=0 ses=191 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=8726 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRED_REFR msg=audit(1414327733.006:5061): pid=8726 uid=0 auid=0 ses=191 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_END msg=audit(1414327733.021:5062): pid=8698 uid=0 auid=0 ses=191 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRED_DISP msg=audit(1414327733.021:5063): pid=8698 uid=0 auid=0 ses=191 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_END msg=audit(1414327733.022:5064): pid=8698 uid=0 auid=0 ses=191 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1414327733.022:5065): pid=8698 uid=0 auid=0 ses=191 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327733.022:5066): pid=8698 uid=0 auid=0 ses=191 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=8698 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327733.022:5067): pid=8698 uid=0 auid=0 ses=191 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=8698 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327733.022:5068): pid=8698 uid=0 auid=0 ses=191 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=8698 suid=0 rport=59765 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327733.037:5069): pid=8730 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=8730 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327733.037:5070): pid=8730 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=8730 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414327733.038:5071): pid=8729 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=8730 suid=74 rport=59766 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414327733.038:5072): pid=8729 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=8730 suid=74 rport=59766 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327733.573:5073): pid=8729 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=59766 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327733.573:5074): pid=8729 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=e7:e2:3d:94:48:cf:f5:8c:5e:54:98:bd:89:a5:29:a9 rport=59766 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_ACCT msg=audit(1414327733.577:5075): pid=8729 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327733.578:5076): pid=8729 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=8730 suid=74 rport=59766 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327733.578:5077): pid=8729 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1414327733.579:5078): pid=8729 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=LOGIN msg=audit(1414327733.579:5079): pid=8729 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=192 res=1 >type=USER_ROLE_CHANGE msg=audit(1414327733.655:5080): pid=8729 uid=0 auid=0 ses=192 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_START msg=audit(1414327733.673:5081): pid=8729 uid=0 auid=0 ses=192 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1414327733.676:5082): pid=8729 uid=0 auid=0 ses=192 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_START msg=audit(1414327733.677:5083): pid=8729 uid=0 auid=0 ses=192 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327733.678:5084): pid=8732 uid=0 auid=0 ses=192 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=8732 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327733.679:5085): pid=8732 uid=0 auid=0 ses=192 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=8732 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRED_REFR msg=audit(1414327733.679:5086): pid=8732 uid=0 auid=0 ses=192 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_END msg=audit(1414327733.695:5087): pid=8729 uid=0 auid=0 ses=192 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRED_DISP msg=audit(1414327733.695:5088): pid=8729 uid=0 auid=0 ses=192 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_END msg=audit(1414327733.696:5089): pid=8729 uid=0 auid=0 ses=192 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1414327733.696:5090): pid=8729 uid=0 auid=0 ses=192 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327733.696:5091): pid=8729 uid=0 auid=0 ses=192 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=8729 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327733.696:5092): pid=8729 uid=0 auid=0 ses=192 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=8729 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327733.696:5093): pid=8729 uid=0 auid=0 ses=192 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=8729 suid=0 rport=59766 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327733.712:5094): pid=8743 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=8743 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327733.712:5095): pid=8743 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=8743 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414327733.713:5096): pid=8742 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=8743 suid=74 rport=59767 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414327733.713:5097): pid=8742 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=8743 suid=74 rport=59767 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327734.251:5098): pid=8742 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=59767 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327734.251:5099): pid=8742 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=e7:e2:3d:94:48:cf:f5:8c:5e:54:98:bd:89:a5:29:a9 rport=59767 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_ACCT msg=audit(1414327734.256:5100): pid=8742 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327734.256:5101): pid=8742 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=8743 suid=74 rport=59767 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327734.257:5102): pid=8742 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1414327734.257:5103): pid=8742 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=LOGIN msg=audit(1414327734.257:5104): pid=8742 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=193 res=1 >type=USER_ROLE_CHANGE msg=audit(1414327734.328:5105): pid=8742 uid=0 auid=0 ses=193 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_START msg=audit(1414327734.345:5106): pid=8742 uid=0 auid=0 ses=193 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1414327734.349:5107): pid=8742 uid=0 auid=0 ses=193 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_START msg=audit(1414327734.349:5108): pid=8742 uid=0 auid=0 ses=193 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327734.351:5109): pid=8751 uid=0 auid=0 ses=193 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=8751 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327734.351:5110): pid=8751 uid=0 auid=0 ses=193 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=8751 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRED_REFR msg=audit(1414327734.352:5111): pid=8751 uid=0 auid=0 ses=193 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_END msg=audit(1414327734.366:5112): pid=8742 uid=0 auid=0 ses=193 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRED_DISP msg=audit(1414327734.366:5113): pid=8742 uid=0 auid=0 ses=193 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_END msg=audit(1414327734.367:5114): pid=8742 uid=0 auid=0 ses=193 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1414327734.367:5115): pid=8742 uid=0 auid=0 ses=193 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327734.367:5116): pid=8742 uid=0 auid=0 ses=193 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=8742 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327734.368:5117): pid=8742 uid=0 auid=0 ses=193 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=8742 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327734.368:5118): pid=8742 uid=0 auid=0 ses=193 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=8742 suid=0 rport=59767 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=NETFILTER_CFG msg=audit(1414327737.222:5119): table=filter family=2 entries=0 >type=SYSCALL msg=audit(1414327737.222:5119): arch=c000003e syscall=272 success=yes exit=0 a0=40000000 a1=c0 a2=0 a3=7fffba1cf4f0 items=0 ppid=8885 pid=8892 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=192 comm="ip" exe="/usr/sbin/ip" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null) >type=CRYPTO_KEY_USER msg=audit(1414327737.386:5120): pid=8904 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=8904 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327737.386:5121): pid=8904 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=8904 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414327737.387:5122): pid=8903 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=8904 suid=74 rport=59772 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414327737.387:5123): pid=8903 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=8904 suid=74 rport=59772 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=NETFILTER_CFG msg=audit(1414327737.283:5124): table=filter family=2 entries=0 >type=SYSCALL msg=audit(1414327737.283:5124): arch=c000003e syscall=272 success=yes exit=0 a0=40000000 a1=c0 a2=0 a3=7fff1da52590 items=0 ppid=8885 pid=8899 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=192 comm="ip" exe="/usr/sbin/ip" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null) >type=NETFILTER_CFG msg=audit(1414327737.614:5125): table=filter family=2 entries=0 >type=SYSCALL msg=audit(1414327737.614:5125): arch=c000003e syscall=272 success=yes exit=0 a0=40000000 a1=c0 a2=0 a3=7fff96220a00 items=0 ppid=8885 pid=8906 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=192 comm="ip" exe="/usr/sbin/ip" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null) >type=USER_AUTH msg=audit(1414327737.928:5126): pid=8903 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=59772 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327737.928:5127): pid=8903 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=e7:e2:3d:94:48:cf:f5:8c:5e:54:98:bd:89:a5:29:a9 rport=59772 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_ACCT msg=audit(1414327737.933:5128): pid=8903 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327737.934:5129): pid=8903 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=8904 suid=74 rport=59772 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327737.935:5130): pid=8903 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1414327737.935:5131): pid=8903 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=LOGIN msg=audit(1414327737.935:5132): pid=8903 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=194 res=1 >type=USER_ROLE_CHANGE msg=audit(1414327738.016:5133): pid=8903 uid=0 auid=0 ses=194 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_START msg=audit(1414327738.032:5134): pid=8903 uid=0 auid=0 ses=194 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1414327738.036:5135): pid=8903 uid=0 auid=0 ses=194 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_START msg=audit(1414327738.036:5136): pid=8903 uid=0 auid=0 ses=194 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327738.038:5137): pid=8923 uid=0 auid=0 ses=194 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=8923 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327738.038:5138): pid=8923 uid=0 auid=0 ses=194 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=8923 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRED_REFR msg=audit(1414327738.039:5139): pid=8923 uid=0 auid=0 ses=194 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_END msg=audit(1414327738.053:5140): pid=8903 uid=0 auid=0 ses=194 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRED_DISP msg=audit(1414327738.053:5141): pid=8903 uid=0 auid=0 ses=194 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_END msg=audit(1414327738.053:5142): pid=8903 uid=0 auid=0 ses=194 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1414327738.054:5143): pid=8903 uid=0 auid=0 ses=194 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327738.054:5144): pid=8903 uid=0 auid=0 ses=194 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=8903 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327738.054:5145): pid=8903 uid=0 auid=0 ses=194 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=8903 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327738.054:5146): pid=8903 uid=0 auid=0 ses=194 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=8903 suid=0 rport=59772 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327741.078:5147): pid=8947 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=8947 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327741.078:5148): pid=8947 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=8947 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414327741.080:5149): pid=8946 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=8947 suid=74 rport=59773 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414327741.081:5150): pid=8946 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=8947 suid=74 rport=59773 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327741.619:5151): pid=8946 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=59773 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327741.619:5152): pid=8946 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=e7:e2:3d:94:48:cf:f5:8c:5e:54:98:bd:89:a5:29:a9 rport=59773 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_ACCT msg=audit(1414327741.625:5153): pid=8946 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327741.625:5154): pid=8946 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=8947 suid=74 rport=59773 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327741.627:5155): pid=8946 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1414327741.627:5156): pid=8946 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=LOGIN msg=audit(1414327741.627:5157): pid=8946 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=195 res=1 >type=USER_ROLE_CHANGE msg=audit(1414327741.710:5158): pid=8946 uid=0 auid=0 ses=195 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_START msg=audit(1414327741.733:5159): pid=8946 uid=0 auid=0 ses=195 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1414327741.737:5160): pid=8946 uid=0 auid=0 ses=195 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_START msg=audit(1414327741.737:5161): pid=8946 uid=0 auid=0 ses=195 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327741.740:5162): pid=8949 uid=0 auid=0 ses=195 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=8949 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327741.740:5163): pid=8949 uid=0 auid=0 ses=195 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=8949 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRED_REFR msg=audit(1414327741.742:5164): pid=8949 uid=0 auid=0 ses=195 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_END msg=audit(1414327741.760:5165): pid=8946 uid=0 auid=0 ses=195 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRED_DISP msg=audit(1414327741.760:5166): pid=8946 uid=0 auid=0 ses=195 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_END msg=audit(1414327741.761:5167): pid=8946 uid=0 auid=0 ses=195 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1414327741.761:5168): pid=8946 uid=0 auid=0 ses=195 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327741.762:5169): pid=8946 uid=0 auid=0 ses=195 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=8946 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327741.762:5170): pid=8946 uid=0 auid=0 ses=195 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=8946 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327741.762:5171): pid=8946 uid=0 auid=0 ses=195 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=8946 suid=0 rport=59773 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_ACCT msg=audit(1414327741.985:5172): pid=8951 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="keystone" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1414327741.985:5173): pid=8951 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="keystone" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1414327741.986:5174): pid=8951 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=163 old-ses=4294967295 ses=196 res=1 >type=USER_START msg=audit(1414327742.001:5175): pid=8951 uid=0 auid=163 ses=196 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="keystone" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1414327742.002:5176): pid=8951 uid=0 auid=163 ses=196 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="keystone" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=NETFILTER_CFG msg=audit(1414327742.618:5177): table=filter family=2 entries=18 >type=SYSCALL msg=audit(1414327742.618:5177): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=150d670 items=0 ppid=8737 pid=8978 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=192 comm="iptables" exe="/usr/sbin/xtables-multi" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null) >type=CRED_DISP msg=audit(1414327742.662:5178): pid=8951 uid=0 auid=163 ses=196 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="keystone" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1414327742.664:5179): pid=8951 uid=0 auid=163 ses=196 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="keystone" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRYPTO_KEY_USER msg=audit(1414327744.784:5180): pid=9020 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=9020 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327744.784:5181): pid=9020 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=9020 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414327744.785:5182): pid=9019 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=9020 suid=74 rport=59775 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414327744.785:5183): pid=9019 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=9020 suid=74 rport=59775 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327745.323:5184): pid=9019 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=59775 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327745.324:5185): pid=9019 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=e7:e2:3d:94:48:cf:f5:8c:5e:54:98:bd:89:a5:29:a9 rport=59775 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_ACCT msg=audit(1414327745.327:5186): pid=9019 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327745.328:5187): pid=9019 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=9020 suid=74 rport=59775 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327745.329:5188): pid=9019 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1414327745.329:5189): pid=9019 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=LOGIN msg=audit(1414327745.329:5190): pid=9019 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=197 res=1 >type=USER_ROLE_CHANGE msg=audit(1414327745.404:5191): pid=9019 uid=0 auid=0 ses=197 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_START msg=audit(1414327745.418:5192): pid=9019 uid=0 auid=0 ses=197 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1414327745.422:5193): pid=9019 uid=0 auid=0 ses=197 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_START msg=audit(1414327745.423:5194): pid=9019 uid=0 auid=0 ses=197 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327745.424:5195): pid=9022 uid=0 auid=0 ses=197 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=9022 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327745.425:5196): pid=9022 uid=0 auid=0 ses=197 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=9022 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRED_REFR msg=audit(1414327745.425:5197): pid=9022 uid=0 auid=0 ses=197 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_END msg=audit(1414327745.447:5198): pid=9019 uid=0 auid=0 ses=197 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRED_DISP msg=audit(1414327745.447:5199): pid=9019 uid=0 auid=0 ses=197 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_END msg=audit(1414327745.447:5200): pid=9019 uid=0 auid=0 ses=197 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1414327745.448:5201): pid=9019 uid=0 auid=0 ses=197 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327745.448:5202): pid=9019 uid=0 auid=0 ses=197 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=9019 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327745.448:5203): pid=9019 uid=0 auid=0 ses=197 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=9019 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327745.448:5204): pid=9019 uid=0 auid=0 ses=197 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=9019 suid=0 rport=59775 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327748.475:5205): pid=9035 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=9035 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327748.475:5206): pid=9035 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=9035 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414327748.476:5207): pid=9034 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=9035 suid=74 rport=59781 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414327748.477:5208): pid=9034 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=9035 suid=74 rport=59781 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327749.015:5209): pid=9034 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=59781 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327749.015:5210): pid=9034 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=e7:e2:3d:94:48:cf:f5:8c:5e:54:98:bd:89:a5:29:a9 rport=59781 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_ACCT msg=audit(1414327749.019:5211): pid=9034 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327749.020:5212): pid=9034 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=9035 suid=74 rport=59781 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327749.022:5213): pid=9034 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1414327749.022:5214): pid=9034 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=LOGIN msg=audit(1414327749.022:5215): pid=9034 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=198 res=1 >type=USER_ROLE_CHANGE msg=audit(1414327749.119:5216): pid=9034 uid=0 auid=0 ses=198 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_START msg=audit(1414327749.136:5217): pid=9034 uid=0 auid=0 ses=198 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1414327749.140:5218): pid=9034 uid=0 auid=0 ses=198 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_START msg=audit(1414327749.140:5219): pid=9034 uid=0 auid=0 ses=198 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327749.142:5220): pid=9039 uid=0 auid=0 ses=198 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=9039 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327749.142:5221): pid=9039 uid=0 auid=0 ses=198 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=9039 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRED_REFR msg=audit(1414327749.143:5222): pid=9039 uid=0 auid=0 ses=198 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_END msg=audit(1414327749.158:5223): pid=9034 uid=0 auid=0 ses=198 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRED_DISP msg=audit(1414327749.158:5224): pid=9034 uid=0 auid=0 ses=198 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_END msg=audit(1414327749.159:5225): pid=9034 uid=0 auid=0 ses=198 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1414327749.159:5226): pid=9034 uid=0 auid=0 ses=198 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327749.159:5227): pid=9034 uid=0 auid=0 ses=198 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=9034 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327749.159:5228): pid=9034 uid=0 auid=0 ses=198 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=9034 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327749.159:5229): pid=9034 uid=0 auid=0 ses=198 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=9034 suid=0 rport=59781 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327752.185:5230): pid=9047 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=9047 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327752.186:5231): pid=9047 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=9047 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414327752.187:5232): pid=9046 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=9047 suid=74 rport=59787 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414327752.187:5233): pid=9046 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=9047 suid=74 rport=59787 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327752.732:5234): pid=9046 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=59787 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327752.732:5235): pid=9046 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=e7:e2:3d:94:48:cf:f5:8c:5e:54:98:bd:89:a5:29:a9 rport=59787 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_ACCT msg=audit(1414327752.736:5236): pid=9046 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327752.737:5237): pid=9046 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=9047 suid=74 rport=59787 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327752.738:5238): pid=9046 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1414327752.738:5239): pid=9046 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=LOGIN msg=audit(1414327752.738:5240): pid=9046 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=199 res=1 >type=USER_ROLE_CHANGE msg=audit(1414327752.813:5241): pid=9046 uid=0 auid=0 ses=199 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_START msg=audit(1414327752.829:5242): pid=9046 uid=0 auid=0 ses=199 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1414327752.833:5243): pid=9046 uid=0 auid=0 ses=199 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_START msg=audit(1414327752.833:5244): pid=9046 uid=0 auid=0 ses=199 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327752.835:5245): pid=9049 uid=0 auid=0 ses=199 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=9049 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327752.835:5246): pid=9049 uid=0 auid=0 ses=199 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=9049 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRED_REFR msg=audit(1414327752.836:5247): pid=9049 uid=0 auid=0 ses=199 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_END msg=audit(1414327752.858:5248): pid=9046 uid=0 auid=0 ses=199 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRED_DISP msg=audit(1414327752.858:5249): pid=9046 uid=0 auid=0 ses=199 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_END msg=audit(1414327752.859:5250): pid=9046 uid=0 auid=0 ses=199 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1414327752.859:5251): pid=9046 uid=0 auid=0 ses=199 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327752.859:5252): pid=9046 uid=0 auid=0 ses=199 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=9046 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327752.859:5253): pid=9046 uid=0 auid=0 ses=199 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=9046 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327752.859:5254): pid=9046 uid=0 auid=0 ses=199 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=9046 suid=0 rport=59787 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327755.885:5255): pid=9055 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=9055 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327755.885:5256): pid=9055 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=9055 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414327755.886:5257): pid=9054 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=9055 suid=74 rport=59788 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414327755.886:5258): pid=9054 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=9055 suid=74 rport=59788 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327756.424:5259): pid=9054 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=59788 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327756.424:5260): pid=9054 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=e7:e2:3d:94:48:cf:f5:8c:5e:54:98:bd:89:a5:29:a9 rport=59788 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_ACCT msg=audit(1414327756.428:5261): pid=9054 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327756.429:5262): pid=9054 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=9055 suid=74 rport=59788 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327756.429:5263): pid=9054 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1414327756.430:5264): pid=9054 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=LOGIN msg=audit(1414327756.430:5265): pid=9054 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=200 res=1 >type=USER_ROLE_CHANGE msg=audit(1414327756.502:5266): pid=9054 uid=0 auid=0 ses=200 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_START msg=audit(1414327756.517:5267): pid=9054 uid=0 auid=0 ses=200 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1414327756.521:5268): pid=9054 uid=0 auid=0 ses=200 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_START msg=audit(1414327756.521:5269): pid=9054 uid=0 auid=0 ses=200 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327756.523:5270): pid=9057 uid=0 auid=0 ses=200 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=9057 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327756.523:5271): pid=9057 uid=0 auid=0 ses=200 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=9057 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRED_REFR msg=audit(1414327756.524:5272): pid=9057 uid=0 auid=0 ses=200 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_END msg=audit(1414327756.539:5273): pid=9054 uid=0 auid=0 ses=200 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRED_DISP msg=audit(1414327756.539:5274): pid=9054 uid=0 auid=0 ses=200 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_END msg=audit(1414327756.540:5275): pid=9054 uid=0 auid=0 ses=200 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1414327756.540:5276): pid=9054 uid=0 auid=0 ses=200 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327756.540:5277): pid=9054 uid=0 auid=0 ses=200 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=9054 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327756.540:5278): pid=9054 uid=0 auid=0 ses=200 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=9054 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327756.540:5279): pid=9054 uid=0 auid=0 ses=200 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=9054 suid=0 rport=59788 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327759.563:5280): pid=9072 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=9072 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327759.564:5281): pid=9072 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=9072 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414327759.565:5282): pid=9071 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=9072 suid=74 rport=59789 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414327759.565:5283): pid=9071 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=9072 suid=74 rport=59789 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327760.100:5284): pid=9071 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=59789 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327760.100:5285): pid=9071 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=e7:e2:3d:94:48:cf:f5:8c:5e:54:98:bd:89:a5:29:a9 rport=59789 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_ACCT msg=audit(1414327760.105:5286): pid=9071 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327760.105:5287): pid=9071 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=9072 suid=74 rport=59789 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327760.106:5288): pid=9071 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1414327760.106:5289): pid=9071 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=LOGIN msg=audit(1414327760.106:5290): pid=9071 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=201 res=1 >type=USER_ROLE_CHANGE msg=audit(1414327760.183:5291): pid=9071 uid=0 auid=0 ses=201 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_START msg=audit(1414327760.198:5292): pid=9071 uid=0 auid=0 ses=201 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1414327760.203:5293): pid=9071 uid=0 auid=0 ses=201 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_START msg=audit(1414327760.203:5294): pid=9071 uid=0 auid=0 ses=201 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327760.205:5295): pid=9074 uid=0 auid=0 ses=201 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=9074 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327760.205:5296): pid=9074 uid=0 auid=0 ses=201 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=9074 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRED_REFR msg=audit(1414327760.206:5297): pid=9074 uid=0 auid=0 ses=201 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_END msg=audit(1414327760.220:5298): pid=9071 uid=0 auid=0 ses=201 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRED_DISP msg=audit(1414327760.220:5299): pid=9071 uid=0 auid=0 ses=201 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_END msg=audit(1414327760.221:5300): pid=9071 uid=0 auid=0 ses=201 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1414327760.221:5301): pid=9071 uid=0 auid=0 ses=201 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327760.221:5302): pid=9071 uid=0 auid=0 ses=201 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=9071 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327760.221:5303): pid=9071 uid=0 auid=0 ses=201 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=9071 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327760.221:5304): pid=9071 uid=0 auid=0 ses=201 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=9071 suid=0 rport=59789 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327763.247:5305): pid=9088 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=9088 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327763.247:5306): pid=9088 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=9088 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414327763.248:5307): pid=9087 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=9088 suid=74 rport=59794 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414327763.249:5308): pid=9087 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=9088 suid=74 rport=59794 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=ADD_GROUP msg=audit(1414327763.288:5309): pid=9091 uid=0 auid=0 ses=192 subj=unconfined_u:system_r:groupadd_t:s0-s0:c0.c1023 msg='op=adding group to /etc/group id=162 exe="/usr/sbin/groupadd" hostname=? addr=? terminal=? res=success' >type=ADD_GROUP msg=audit(1414327763.291:5310): pid=9091 uid=0 auid=0 ses=192 subj=unconfined_u:system_r:groupadd_t:s0-s0:c0.c1023 msg='op=adding group to /etc/gshadow id=162 exe="/usr/sbin/groupadd" hostname=? addr=? terminal=? res=success' >type=ADD_GROUP msg=audit(1414327763.291:5311): pid=9091 uid=0 auid=0 ses=192 subj=unconfined_u:system_r:groupadd_t:s0-s0:c0.c1023 msg='op= id=162 exe="/usr/sbin/groupadd" hostname=? addr=? terminal=? res=success' >type=ADD_USER msg=audit(1414327763.301:5312): pid=9096 uid=0 auid=0 ses=192 subj=unconfined_u:system_r:useradd_t:s0-s0:c0.c1023 msg='op=adding user id=162 exe="/usr/sbin/useradd" hostname=? addr=? terminal=? res=success' >type=ADD_USER msg=audit(1414327763.301:5313): pid=9096 uid=0 auid=0 ses=192 subj=unconfined_u:system_r:useradd_t:s0-s0:c0.c1023 msg='op=adding user to group acct="nova" exe="/usr/sbin/useradd" hostname=? addr=? terminal=? res=success' >type=ADD_USER msg=audit(1414327763.301:5314): pid=9096 uid=0 auid=0 ses=192 subj=unconfined_u:system_r:useradd_t:s0-s0:c0.c1023 msg='op=adding user to group acct="nova" exe="/usr/sbin/useradd" hostname=? addr=? terminal=? res=success' >type=ADD_USER msg=audit(1414327763.301:5315): pid=9096 uid=0 auid=0 ses=192 subj=unconfined_u:system_r:useradd_t:s0-s0:c0.c1023 msg='op=adding user to shadow group acct="nova" exe="/usr/sbin/useradd" hostname=? addr=? terminal=? res=success' >type=ADD_USER msg=audit(1414327763.301:5316): pid=9096 uid=0 auid=0 ses=192 subj=unconfined_u:system_r:useradd_t:s0-s0:c0.c1023 msg='op=adding user to shadow group acct="nova" exe="/usr/sbin/useradd" hostname=? addr=? terminal=? res=success' >type=USER_AUTH msg=audit(1414327763.792:5317): pid=9087 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=59794 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327763.792:5318): pid=9087 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=e7:e2:3d:94:48:cf:f5:8c:5e:54:98:bd:89:a5:29:a9 rport=59794 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_ACCT msg=audit(1414327763.796:5319): pid=9087 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327763.797:5320): pid=9087 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=9088 suid=74 rport=59794 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327763.798:5321): pid=9087 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1414327763.798:5322): pid=9087 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=LOGIN msg=audit(1414327763.798:5323): pid=9087 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=202 res=1 >type=USER_ROLE_CHANGE msg=audit(1414327763.874:5324): pid=9087 uid=0 auid=0 ses=202 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_START msg=audit(1414327763.891:5325): pid=9087 uid=0 auid=0 ses=202 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1414327763.896:5326): pid=9087 uid=0 auid=0 ses=202 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_START msg=audit(1414327763.896:5327): pid=9087 uid=0 auid=0 ses=202 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327763.898:5328): pid=9102 uid=0 auid=0 ses=202 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=9102 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327763.898:5329): pid=9102 uid=0 auid=0 ses=202 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=9102 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRED_REFR msg=audit(1414327763.899:5330): pid=9102 uid=0 auid=0 ses=202 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_END msg=audit(1414327763.914:5331): pid=9087 uid=0 auid=0 ses=202 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRED_DISP msg=audit(1414327763.914:5332): pid=9087 uid=0 auid=0 ses=202 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_END msg=audit(1414327763.914:5333): pid=9087 uid=0 auid=0 ses=202 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1414327763.914:5334): pid=9087 uid=0 auid=0 ses=202 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327763.915:5335): pid=9087 uid=0 auid=0 ses=202 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=9087 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327763.915:5336): pid=9087 uid=0 auid=0 ses=202 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=9087 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327763.915:5337): pid=9087 uid=0 auid=0 ses=202 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=9087 suid=0 rport=59794 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327766.939:5338): pid=9117 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=9117 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327766.939:5339): pid=9117 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=9117 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414327766.940:5340): pid=9116 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=9117 suid=74 rport=59795 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414327766.940:5341): pid=9116 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=9117 suid=74 rport=59795 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327767.478:5342): pid=9116 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=59795 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327767.478:5343): pid=9116 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=e7:e2:3d:94:48:cf:f5:8c:5e:54:98:bd:89:a5:29:a9 rport=59795 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_ACCT msg=audit(1414327767.483:5344): pid=9116 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327767.483:5345): pid=9116 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=9117 suid=74 rport=59795 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327767.484:5346): pid=9116 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1414327767.484:5347): pid=9116 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=LOGIN msg=audit(1414327767.484:5348): pid=9116 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=203 res=1 >type=USER_ROLE_CHANGE msg=audit(1414327767.559:5349): pid=9116 uid=0 auid=0 ses=203 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_START msg=audit(1414327767.576:5350): pid=9116 uid=0 auid=0 ses=203 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1414327767.581:5351): pid=9116 uid=0 auid=0 ses=203 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_START msg=audit(1414327767.581:5352): pid=9116 uid=0 auid=0 ses=203 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327767.583:5353): pid=9119 uid=0 auid=0 ses=203 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=9119 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327767.583:5354): pid=9119 uid=0 auid=0 ses=203 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=9119 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRED_REFR msg=audit(1414327767.584:5355): pid=9119 uid=0 auid=0 ses=203 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_END msg=audit(1414327767.600:5356): pid=9116 uid=0 auid=0 ses=203 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRED_DISP msg=audit(1414327767.601:5357): pid=9116 uid=0 auid=0 ses=203 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_END msg=audit(1414327767.601:5358): pid=9116 uid=0 auid=0 ses=203 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1414327767.601:5359): pid=9116 uid=0 auid=0 ses=203 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327767.601:5360): pid=9116 uid=0 auid=0 ses=203 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=9116 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327767.601:5361): pid=9116 uid=0 auid=0 ses=203 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=9116 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327767.601:5362): pid=9116 uid=0 auid=0 ses=203 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=9116 suid=0 rport=59795 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327770.625:5363): pid=9130 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=9130 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327770.625:5364): pid=9130 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=9130 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414327770.627:5365): pid=9129 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=9130 suid=74 rport=59798 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414327770.627:5366): pid=9129 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=9130 suid=74 rport=59798 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327771.172:5367): pid=9129 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=59798 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327771.172:5368): pid=9129 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=e7:e2:3d:94:48:cf:f5:8c:5e:54:98:bd:89:a5:29:a9 rport=59798 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_ACCT msg=audit(1414327771.176:5369): pid=9129 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327771.176:5370): pid=9129 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=9130 suid=74 rport=59798 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327771.177:5371): pid=9129 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1414327771.177:5372): pid=9129 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=LOGIN msg=audit(1414327771.178:5373): pid=9129 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=204 res=1 >type=USER_ROLE_CHANGE msg=audit(1414327771.256:5374): pid=9129 uid=0 auid=0 ses=204 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_START msg=audit(1414327771.303:5375): pid=9129 uid=0 auid=0 ses=204 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1414327771.307:5376): pid=9129 uid=0 auid=0 ses=204 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_START msg=audit(1414327771.307:5377): pid=9129 uid=0 auid=0 ses=204 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327771.308:5378): pid=9155 uid=0 auid=0 ses=204 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=9155 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327771.308:5379): pid=9155 uid=0 auid=0 ses=204 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=9155 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRED_REFR msg=audit(1414327771.308:5380): pid=9155 uid=0 auid=0 ses=204 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_END msg=audit(1414327771.322:5381): pid=9129 uid=0 auid=0 ses=204 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRED_DISP msg=audit(1414327771.322:5382): pid=9129 uid=0 auid=0 ses=204 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_END msg=audit(1414327771.323:5383): pid=9129 uid=0 auid=0 ses=204 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1414327771.323:5384): pid=9129 uid=0 auid=0 ses=204 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327771.323:5385): pid=9129 uid=0 auid=0 ses=204 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=9129 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327771.323:5386): pid=9129 uid=0 auid=0 ses=204 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=9129 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327771.323:5387): pid=9129 uid=0 auid=0 ses=204 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=9129 suid=0 rport=59798 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327774.345:5388): pid=9164 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=9164 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327774.345:5389): pid=9164 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=9164 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414327774.346:5390): pid=9163 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=9164 suid=74 rport=59800 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414327774.347:5391): pid=9163 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=9164 suid=74 rport=59800 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327774.887:5392): pid=9163 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=59800 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327774.887:5393): pid=9163 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=e7:e2:3d:94:48:cf:f5:8c:5e:54:98:bd:89:a5:29:a9 rport=59800 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_ACCT msg=audit(1414327774.892:5394): pid=9163 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327774.893:5395): pid=9163 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=9164 suid=74 rport=59800 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327774.894:5396): pid=9163 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1414327774.894:5397): pid=9163 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=LOGIN msg=audit(1414327774.894:5398): pid=9163 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=205 res=1 >type=USER_ROLE_CHANGE msg=audit(1414327774.966:5399): pid=9163 uid=0 auid=0 ses=205 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_START msg=audit(1414327774.983:5400): pid=9163 uid=0 auid=0 ses=205 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1414327774.987:5401): pid=9163 uid=0 auid=0 ses=205 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_START msg=audit(1414327774.987:5402): pid=9163 uid=0 auid=0 ses=205 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327774.988:5403): pid=9172 uid=0 auid=0 ses=205 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=9172 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327774.988:5404): pid=9172 uid=0 auid=0 ses=205 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=9172 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRED_REFR msg=audit(1414327774.989:5405): pid=9172 uid=0 auid=0 ses=205 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_END msg=audit(1414327775.010:5406): pid=9163 uid=0 auid=0 ses=205 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRED_DISP msg=audit(1414327775.010:5407): pid=9163 uid=0 auid=0 ses=205 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_END msg=audit(1414327775.011:5408): pid=9163 uid=0 auid=0 ses=205 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1414327775.011:5409): pid=9163 uid=0 auid=0 ses=205 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327775.011:5410): pid=9163 uid=0 auid=0 ses=205 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=9163 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327775.011:5411): pid=9163 uid=0 auid=0 ses=205 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=9163 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327775.011:5412): pid=9163 uid=0 auid=0 ses=205 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=9163 suid=0 rport=59800 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_CMD msg=audit(1414327776.286:5413): pid=9192 uid=162 auid=4294967295 ses=4294967295 subj=system_u:system_r:nova_api_t:s0 msg='cwd="/" cmd=6E6F76612D726F6F7477726170202F6574632F6E6F76612F726F6F74777261702E636F6E662069707461626C65732D73617665202D63 terminal=? res=success' >type=CRED_ACQ msg=audit(1414327776.287:5414): pid=9192 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:nova_api_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1414327776.287:5415): pid=9192 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:nova_api_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1414327776.341:5416): pid=9192 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:nova_api_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1414327776.341:5417): pid=9192 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:nova_api_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1414327776.352:5418): pid=9195 uid=162 auid=4294967295 ses=4294967295 subj=system_u:system_r:nova_api_t:s0 msg='cwd="/" cmd=6E6F76612D726F6F7477726170202F6574632F6E6F76612F726F6F74777261702E636F6E662069707461626C65732D726573746F7265202D63 terminal=? res=success' >type=CRED_ACQ msg=audit(1414327776.352:5419): pid=9195 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:nova_api_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1414327776.352:5420): pid=9195 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:nova_api_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=NETFILTER_CFG msg=audit(1414327776.408:5421): table=nat family=2 entries=0 >type=SYSCALL msg=audit(1414327776.408:5421): arch=c000003e syscall=313 success=yes exit=0 a0=0 a1=7f684621ad89 a2=0 a3=0 items=0 ppid=9198 pid=9199 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="modprobe" exe="/usr/bin/kmod" subj=system_u:system_r:insmod_t:s0 key=(null) >type=NETFILTER_CFG msg=audit(1414327776.409:5422): table=nat family=2 entries=5 >type=SYSCALL msg=audit(1414327776.409:5422): arch=c000003e syscall=54 success=yes exit=0 a0=3 a1=0 a2=40 a3=92f830 items=0 ppid=9196 pid=9197 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=NETFILTER_CFG msg=audit(1414327776.411:5423): table=mangle family=2 entries=0 >type=SYSCALL msg=audit(1414327776.411:5423): arch=c000003e syscall=313 success=yes exit=0 a0=0 a1=7f534d4d5d89 a2=0 a3=0 items=0 ppid=9203 pid=9204 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="modprobe" exe="/usr/bin/kmod" subj=system_u:system_r:insmod_t:s0 key=(null) >type=NETFILTER_CFG msg=audit(1414327776.412:5424): table=mangle family=2 entries=6 >type=SYSCALL msg=audit(1414327776.412:5424): arch=c000003e syscall=54 success=yes exit=0 a0=3 a1=0 a2=40 a3=92f260 items=0 ppid=9196 pid=9197 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=NETFILTER_CFG msg=audit(1414327776.413:5425): table=filter family=2 entries=19 >type=SYSCALL msg=audit(1414327776.413:5425): arch=c000003e syscall=54 success=yes exit=0 a0=3 a1=0 a2=40 a3=935e90 items=0 ppid=9196 pid=9197 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=USER_END msg=audit(1414327776.419:5426): pid=9195 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:nova_api_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1414327776.419:5427): pid=9195 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:nova_api_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1414327776.439:5428): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="openstack-nova-api" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327778.037:5429): pid=9230 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=9230 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327778.037:5430): pid=9230 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=9230 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414327778.038:5431): pid=9229 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=9230 suid=74 rport=59801 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414327778.039:5432): pid=9229 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=9230 suid=74 rport=59801 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327778.577:5433): pid=9229 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=59801 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327778.577:5434): pid=9229 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=e7:e2:3d:94:48:cf:f5:8c:5e:54:98:bd:89:a5:29:a9 rport=59801 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_ACCT msg=audit(1414327778.581:5435): pid=9229 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327778.581:5436): pid=9229 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=9230 suid=74 rport=59801 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327778.582:5437): pid=9229 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1414327778.582:5438): pid=9229 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=LOGIN msg=audit(1414327778.583:5439): pid=9229 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=206 res=1 >type=USER_ROLE_CHANGE msg=audit(1414327778.661:5440): pid=9229 uid=0 auid=0 ses=206 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_START msg=audit(1414327778.707:5441): pid=9229 uid=0 auid=0 ses=206 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1414327778.711:5442): pid=9229 uid=0 auid=0 ses=206 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_START msg=audit(1414327778.711:5443): pid=9229 uid=0 auid=0 ses=206 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327778.713:5444): pid=9232 uid=0 auid=0 ses=206 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=9232 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327778.713:5445): pid=9232 uid=0 auid=0 ses=206 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=9232 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRED_REFR msg=audit(1414327778.714:5446): pid=9232 uid=0 auid=0 ses=206 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_END msg=audit(1414327778.733:5447): pid=9229 uid=0 auid=0 ses=206 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRED_DISP msg=audit(1414327778.734:5448): pid=9229 uid=0 auid=0 ses=206 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_END msg=audit(1414327778.734:5449): pid=9229 uid=0 auid=0 ses=206 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1414327778.735:5450): pid=9229 uid=0 auid=0 ses=206 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327778.735:5451): pid=9229 uid=0 auid=0 ses=206 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=9229 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327778.735:5452): pid=9229 uid=0 auid=0 ses=206 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=9229 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327778.735:5453): pid=9229 uid=0 auid=0 ses=206 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=9229 suid=0 rport=59801 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327778.753:5454): pid=9237 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=9237 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327778.753:5455): pid=9237 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=9237 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414327778.754:5456): pid=9236 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=9237 suid=74 rport=59802 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414327778.754:5457): pid=9236 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=9237 suid=74 rport=59802 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327779.297:5458): pid=9236 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=59802 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327779.298:5459): pid=9236 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=e7:e2:3d:94:48:cf:f5:8c:5e:54:98:bd:89:a5:29:a9 rport=59802 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_ACCT msg=audit(1414327779.302:5460): pid=9236 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327779.302:5461): pid=9236 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=9237 suid=74 rport=59802 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327779.303:5462): pid=9236 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1414327779.303:5463): pid=9236 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=LOGIN msg=audit(1414327779.303:5464): pid=9236 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=207 res=1 >type=USER_ROLE_CHANGE msg=audit(1414327779.374:5465): pid=9236 uid=0 auid=0 ses=207 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_START msg=audit(1414327779.390:5466): pid=9236 uid=0 auid=0 ses=207 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1414327779.393:5467): pid=9236 uid=0 auid=0 ses=207 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_START msg=audit(1414327779.393:5468): pid=9236 uid=0 auid=0 ses=207 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327779.395:5469): pid=9239 uid=0 auid=0 ses=207 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=9239 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327779.395:5470): pid=9239 uid=0 auid=0 ses=207 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=9239 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRED_REFR msg=audit(1414327779.396:5471): pid=9239 uid=0 auid=0 ses=207 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_END msg=audit(1414327779.412:5472): pid=9236 uid=0 auid=0 ses=207 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRED_DISP msg=audit(1414327779.412:5473): pid=9236 uid=0 auid=0 ses=207 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_END msg=audit(1414327779.412:5474): pid=9236 uid=0 auid=0 ses=207 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1414327779.412:5475): pid=9236 uid=0 auid=0 ses=207 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327779.413:5476): pid=9236 uid=0 auid=0 ses=207 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=9236 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327779.413:5477): pid=9236 uid=0 auid=0 ses=207 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=9236 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327779.413:5478): pid=9236 uid=0 auid=0 ses=207 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=9236 suid=0 rport=59802 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327779.431:5479): pid=9250 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=9250 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327779.431:5480): pid=9250 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=9250 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414327779.432:5481): pid=9249 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=9250 suid=74 rport=59803 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414327779.432:5482): pid=9249 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=9250 suid=74 rport=59803 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327779.972:5483): pid=9249 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=59803 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327779.972:5484): pid=9249 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=e7:e2:3d:94:48:cf:f5:8c:5e:54:98:bd:89:a5:29:a9 rport=59803 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_ACCT msg=audit(1414327779.976:5485): pid=9249 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327779.977:5486): pid=9249 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=9250 suid=74 rport=59803 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327779.977:5487): pid=9249 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1414327779.978:5488): pid=9249 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=LOGIN msg=audit(1414327779.978:5489): pid=9249 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=208 res=1 >type=USER_ROLE_CHANGE msg=audit(1414327780.049:5490): pid=9249 uid=0 auid=0 ses=208 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_START msg=audit(1414327780.064:5491): pid=9249 uid=0 auid=0 ses=208 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1414327780.068:5492): pid=9249 uid=0 auid=0 ses=208 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_START msg=audit(1414327780.068:5493): pid=9249 uid=0 auid=0 ses=208 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327780.070:5494): pid=9258 uid=0 auid=0 ses=208 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=9258 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327780.070:5495): pid=9258 uid=0 auid=0 ses=208 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=9258 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRED_REFR msg=audit(1414327780.071:5496): pid=9258 uid=0 auid=0 ses=208 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_END msg=audit(1414327780.086:5497): pid=9249 uid=0 auid=0 ses=208 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRED_DISP msg=audit(1414327780.086:5498): pid=9249 uid=0 auid=0 ses=208 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_END msg=audit(1414327780.087:5499): pid=9249 uid=0 auid=0 ses=208 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1414327780.087:5500): pid=9249 uid=0 auid=0 ses=208 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327780.087:5501): pid=9249 uid=0 auid=0 ses=208 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=9249 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327780.088:5502): pid=9249 uid=0 auid=0 ses=208 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=9249 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327780.088:5503): pid=9249 uid=0 auid=0 ses=208 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=9249 suid=0 rport=59803 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327783.106:5504): pid=9295 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=9295 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327783.106:5505): pid=9295 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=9295 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414327783.107:5506): pid=9294 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=9295 suid=74 rport=59818 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414327783.107:5507): pid=9294 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=9295 suid=74 rport=59818 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327783.646:5508): pid=9294 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=59818 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327783.646:5509): pid=9294 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=e7:e2:3d:94:48:cf:f5:8c:5e:54:98:bd:89:a5:29:a9 rport=59818 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_ACCT msg=audit(1414327783.660:5510): pid=9294 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327783.661:5511): pid=9294 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=9295 suid=74 rport=59818 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327783.662:5512): pid=9294 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1414327783.662:5513): pid=9294 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=LOGIN msg=audit(1414327783.662:5514): pid=9294 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=209 res=1 >type=USER_ROLE_CHANGE msg=audit(1414327783.734:5515): pid=9294 uid=0 auid=0 ses=209 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_START msg=audit(1414327783.755:5516): pid=9294 uid=0 auid=0 ses=209 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1414327783.759:5517): pid=9294 uid=0 auid=0 ses=209 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_START msg=audit(1414327783.759:5518): pid=9294 uid=0 auid=0 ses=209 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327783.760:5519): pid=9349 uid=0 auid=0 ses=209 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=9349 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327783.760:5520): pid=9349 uid=0 auid=0 ses=209 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=9349 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRED_REFR msg=audit(1414327783.760:5521): pid=9349 uid=0 auid=0 ses=209 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_END msg=audit(1414327783.781:5522): pid=9294 uid=0 auid=0 ses=209 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRED_DISP msg=audit(1414327783.781:5523): pid=9294 uid=0 auid=0 ses=209 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_END msg=audit(1414327783.781:5524): pid=9294 uid=0 auid=0 ses=209 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1414327783.782:5525): pid=9294 uid=0 auid=0 ses=209 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327783.782:5526): pid=9294 uid=0 auid=0 ses=209 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=9294 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327783.782:5527): pid=9294 uid=0 auid=0 ses=209 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=9294 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327783.782:5528): pid=9294 uid=0 auid=0 ses=209 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=9294 suid=0 rport=59818 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_CMD msg=audit(1414327784.012:5529): pid=9395 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D4320766773202D2D6E6F68656164696E6773202D2D756E69743D67202D6F206E616D652C73697A652C667265652C6C765F636F756E742C75756964202D2D736570617261746F72203A202D2D6E6F7375666669782063696E6465722D766F6C756D6573 terminal=? res=success' >type=CRED_ACQ msg=audit(1414327784.012:5530): pid=9395 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1414327784.014:5531): pid=9395 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1414327784.083:5532): pid=9395 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1414327784.083:5533): pid=9395 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=NETFILTER_CFG msg=audit(1414327784.289:5534): table=filter family=2 entries=0 >type=NETFILTER_CFG msg=audit(1414327784.289:5534): table=nat family=2 entries=0 >type=NETFILTER_CFG msg=audit(1414327784.289:5534): table=mangle family=2 entries=0 >type=SYSCALL msg=audit(1414327784.289:5534): arch=c000003e syscall=272 success=yes exit=0 a0=40000000 a1=c0 a2=0 a3=7fffa5687e00 items=0 ppid=9405 pid=9412 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=207 comm="ip" exe="/usr/sbin/ip" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null) >type=NETFILTER_CFG msg=audit(1414327784.355:5535): table=filter family=2 entries=0 >type=NETFILTER_CFG msg=audit(1414327784.355:5535): table=nat family=2 entries=0 >type=NETFILTER_CFG msg=audit(1414327784.355:5535): table=mangle family=2 entries=0 >type=SYSCALL msg=audit(1414327784.355:5535): arch=c000003e syscall=272 success=yes exit=0 a0=40000000 a1=c0 a2=0 a3=7fffc14c3f50 items=0 ppid=9405 pid=9419 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=207 comm="ip" exe="/usr/sbin/ip" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null) >type=NETFILTER_CFG msg=audit(1414327784.691:5536): table=filter family=2 entries=0 >type=NETFILTER_CFG msg=audit(1414327784.691:5536): table=nat family=2 entries=0 >type=NETFILTER_CFG msg=audit(1414327784.691:5536): table=mangle family=2 entries=0 >type=SYSCALL msg=audit(1414327784.691:5536): arch=c000003e syscall=272 success=yes exit=0 a0=40000000 a1=c0 a2=0 a3=7fffd36d8630 items=0 ppid=9405 pid=9421 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=207 comm="ip" exe="/usr/sbin/ip" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null) >type=CRYPTO_KEY_USER msg=audit(1414327786.804:5537): pid=9460 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=9460 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327786.804:5538): pid=9460 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=9460 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414327786.805:5539): pid=9459 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=9460 suid=74 rport=59820 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414327786.806:5540): pid=9459 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=9460 suid=74 rport=59820 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327787.344:5541): pid=9459 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=59820 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327787.344:5542): pid=9459 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=e7:e2:3d:94:48:cf:f5:8c:5e:54:98:bd:89:a5:29:a9 rport=59820 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_ACCT msg=audit(1414327787.349:5543): pid=9459 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327787.349:5544): pid=9459 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=9460 suid=74 rport=59820 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327787.351:5545): pid=9459 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1414327787.351:5546): pid=9459 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=LOGIN msg=audit(1414327787.352:5547): pid=9459 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=210 res=1 >type=USER_ROLE_CHANGE msg=audit(1414327787.432:5548): pid=9459 uid=0 auid=0 ses=210 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_START msg=audit(1414327787.449:5549): pid=9459 uid=0 auid=0 ses=210 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1414327787.453:5550): pid=9459 uid=0 auid=0 ses=210 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_START msg=audit(1414327787.453:5551): pid=9459 uid=0 auid=0 ses=210 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327787.455:5552): pid=9462 uid=0 auid=0 ses=210 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=9462 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327787.456:5553): pid=9462 uid=0 auid=0 ses=210 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=9462 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRED_REFR msg=audit(1414327787.456:5554): pid=9462 uid=0 auid=0 ses=210 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_END msg=audit(1414327787.468:5555): pid=9459 uid=0 auid=0 ses=210 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRED_DISP msg=audit(1414327787.469:5556): pid=9459 uid=0 auid=0 ses=210 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_END msg=audit(1414327787.470:5557): pid=9459 uid=0 auid=0 ses=210 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1414327787.470:5558): pid=9459 uid=0 auid=0 ses=210 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327787.470:5559): pid=9459 uid=0 auid=0 ses=210 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=9459 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327787.471:5560): pid=9459 uid=0 auid=0 ses=210 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=9459 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327787.471:5561): pid=9459 uid=0 auid=0 ses=210 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=9459 suid=0 rport=59820 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=NETFILTER_CFG msg=audit(1414327788.432:5562): table=filter family=2 entries=36 >type=SYSCALL msg=audit(1414327788.432:5562): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=927dc0 items=0 ppid=9244 pid=9473 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=207 comm="iptables" exe="/usr/sbin/xtables-multi" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null) >type=CRYPTO_KEY_USER msg=audit(1414327790.496:5563): pid=9513 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=9513 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327790.497:5564): pid=9513 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=9513 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414327790.498:5565): pid=9512 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=9513 suid=74 rport=59821 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414327790.499:5566): pid=9512 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=9513 suid=74 rport=59821 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327791.041:5567): pid=9512 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=59821 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327791.041:5568): pid=9512 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=e7:e2:3d:94:48:cf:f5:8c:5e:54:98:bd:89:a5:29:a9 rport=59821 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_ACCT msg=audit(1414327791.046:5569): pid=9512 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327791.047:5570): pid=9512 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=9513 suid=74 rport=59821 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327791.048:5571): pid=9512 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1414327791.048:5572): pid=9512 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=LOGIN msg=audit(1414327791.048:5573): pid=9512 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=211 res=1 >type=USER_ROLE_CHANGE msg=audit(1414327791.132:5574): pid=9512 uid=0 auid=0 ses=211 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_START msg=audit(1414327791.149:5575): pid=9512 uid=0 auid=0 ses=211 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1414327791.154:5576): pid=9512 uid=0 auid=0 ses=211 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_START msg=audit(1414327791.154:5577): pid=9512 uid=0 auid=0 ses=211 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327791.155:5578): pid=9515 uid=0 auid=0 ses=211 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=9515 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327791.156:5579): pid=9515 uid=0 auid=0 ses=211 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=9515 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRED_REFR msg=audit(1414327791.157:5580): pid=9515 uid=0 auid=0 ses=211 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_END msg=audit(1414327791.172:5581): pid=9512 uid=0 auid=0 ses=211 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRED_DISP msg=audit(1414327791.172:5582): pid=9512 uid=0 auid=0 ses=211 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_END msg=audit(1414327791.172:5583): pid=9512 uid=0 auid=0 ses=211 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1414327791.172:5584): pid=9512 uid=0 auid=0 ses=211 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327791.173:5585): pid=9512 uid=0 auid=0 ses=211 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=9512 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327791.173:5586): pid=9512 uid=0 auid=0 ses=211 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=9512 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327791.173:5587): pid=9512 uid=0 auid=0 ses=211 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=9512 suid=0 rport=59821 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327794.197:5588): pid=9524 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=9524 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327794.197:5589): pid=9524 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=9524 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414327794.198:5590): pid=9523 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=9524 suid=74 rport=59823 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414327794.198:5591): pid=9523 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=9524 suid=74 rport=59823 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327794.737:5592): pid=9523 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=59823 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327794.737:5593): pid=9523 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=e7:e2:3d:94:48:cf:f5:8c:5e:54:98:bd:89:a5:29:a9 rport=59823 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_ACCT msg=audit(1414327794.741:5594): pid=9523 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327794.742:5595): pid=9523 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=9524 suid=74 rport=59823 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327794.743:5596): pid=9523 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1414327794.743:5597): pid=9523 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=LOGIN msg=audit(1414327794.743:5598): pid=9523 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=212 res=1 >type=USER_ROLE_CHANGE msg=audit(1414327794.819:5599): pid=9523 uid=0 auid=0 ses=212 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_START msg=audit(1414327794.837:5600): pid=9523 uid=0 auid=0 ses=212 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1414327794.841:5601): pid=9523 uid=0 auid=0 ses=212 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_START msg=audit(1414327794.841:5602): pid=9523 uid=0 auid=0 ses=212 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327794.843:5603): pid=9526 uid=0 auid=0 ses=212 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=9526 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327794.843:5604): pid=9526 uid=0 auid=0 ses=212 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=9526 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRED_REFR msg=audit(1414327794.844:5605): pid=9526 uid=0 auid=0 ses=212 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_END msg=audit(1414327794.861:5606): pid=9523 uid=0 auid=0 ses=212 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRED_DISP msg=audit(1414327794.861:5607): pid=9523 uid=0 auid=0 ses=212 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_END msg=audit(1414327794.862:5608): pid=9523 uid=0 auid=0 ses=212 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1414327794.862:5609): pid=9523 uid=0 auid=0 ses=212 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327794.862:5610): pid=9523 uid=0 auid=0 ses=212 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=9523 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327794.862:5611): pid=9523 uid=0 auid=0 ses=212 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=9523 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327794.862:5612): pid=9523 uid=0 auid=0 ses=212 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=9523 suid=0 rport=59823 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=ADD_GROUP msg=audit(1414327797.317:5613): pid=9566 uid=0 auid=0 ses=207 subj=unconfined_u:system_r:groupadd_t:s0-s0:c0.c1023 msg='op=adding group to /etc/group id=36 exe="/usr/sbin/groupadd" hostname=? addr=? terminal=? res=success' >type=ADD_GROUP msg=audit(1414327797.319:5614): pid=9566 uid=0 auid=0 ses=207 subj=unconfined_u:system_r:groupadd_t:s0-s0:c0.c1023 msg='op=adding group to /etc/gshadow id=36 exe="/usr/sbin/groupadd" hostname=? addr=? terminal=? res=success' >type=ADD_GROUP msg=audit(1414327797.320:5615): pid=9566 uid=0 auid=0 ses=207 subj=unconfined_u:system_r:groupadd_t:s0-s0:c0.c1023 msg='op= id=36 exe="/usr/sbin/groupadd" hostname=? addr=? terminal=? res=success' >type=ADD_GROUP msg=audit(1414327797.327:5616): pid=9571 uid=0 auid=0 ses=207 subj=unconfined_u:system_r:groupadd_t:s0-s0:c0.c1023 msg='op=adding group to /etc/group id=107 exe="/usr/sbin/groupadd" hostname=? addr=? terminal=? res=success' >type=ADD_GROUP msg=audit(1414327797.328:5617): pid=9571 uid=0 auid=0 ses=207 subj=unconfined_u:system_r:groupadd_t:s0-s0:c0.c1023 msg='op=adding group to /etc/gshadow id=107 exe="/usr/sbin/groupadd" hostname=? addr=? terminal=? res=success' >type=ADD_GROUP msg=audit(1414327797.329:5618): pid=9571 uid=0 auid=0 ses=207 subj=unconfined_u:system_r:groupadd_t:s0-s0:c0.c1023 msg='op= id=107 exe="/usr/sbin/groupadd" hostname=? addr=? terminal=? res=success' >type=ADD_USER msg=audit(1414327797.338:5619): pid=9576 uid=0 auid=0 ses=207 subj=unconfined_u:system_r:useradd_t:s0-s0:c0.c1023 msg='op=adding user id=107 exe="/usr/sbin/useradd" hostname=? addr=? terminal=? res=success' >type=ADD_USER msg=audit(1414327797.338:5620): pid=9576 uid=0 auid=0 ses=207 subj=unconfined_u:system_r:useradd_t:s0-s0:c0.c1023 msg='op=adding user to group acct="qemu" exe="/usr/sbin/useradd" hostname=? addr=? terminal=? res=success' >type=ADD_USER msg=audit(1414327797.338:5621): pid=9576 uid=0 auid=0 ses=207 subj=unconfined_u:system_r:useradd_t:s0-s0:c0.c1023 msg='op=adding user to shadow group acct="qemu" exe="/usr/sbin/useradd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327797.890:5622): pid=9589 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=9589 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327797.890:5623): pid=9589 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=9589 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414327797.891:5624): pid=9588 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=9589 suid=74 rport=59828 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414327797.891:5625): pid=9588 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=9589 suid=74 rport=59828 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327798.428:5626): pid=9588 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=59828 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327798.428:5627): pid=9588 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=e7:e2:3d:94:48:cf:f5:8c:5e:54:98:bd:89:a5:29:a9 rport=59828 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_ACCT msg=audit(1414327798.433:5628): pid=9588 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327798.433:5629): pid=9588 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=9589 suid=74 rport=59828 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327798.434:5630): pid=9588 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1414327798.434:5631): pid=9588 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=LOGIN msg=audit(1414327798.434:5632): pid=9588 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=213 res=1 >type=USER_ROLE_CHANGE msg=audit(1414327798.517:5633): pid=9588 uid=0 auid=0 ses=213 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_START msg=audit(1414327798.575:5634): pid=9588 uid=0 auid=0 ses=213 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1414327798.579:5635): pid=9588 uid=0 auid=0 ses=213 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_START msg=audit(1414327798.580:5636): pid=9588 uid=0 auid=0 ses=213 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327798.582:5637): pid=9605 uid=0 auid=0 ses=213 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=9605 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327798.582:5638): pid=9605 uid=0 auid=0 ses=213 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=9605 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRED_REFR msg=audit(1414327798.583:5639): pid=9605 uid=0 auid=0 ses=213 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_END msg=audit(1414327798.599:5640): pid=9588 uid=0 auid=0 ses=213 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRED_DISP msg=audit(1414327798.599:5641): pid=9588 uid=0 auid=0 ses=213 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_END msg=audit(1414327798.600:5642): pid=9588 uid=0 auid=0 ses=213 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1414327798.600:5643): pid=9588 uid=0 auid=0 ses=213 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327798.600:5644): pid=9588 uid=0 auid=0 ses=213 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=9588 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327798.600:5645): pid=9588 uid=0 auid=0 ses=213 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=9588 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327798.600:5646): pid=9588 uid=0 auid=0 ses=213 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=9588 suid=0 rport=59828 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327801.633:5647): pid=9615 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=9615 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327801.633:5648): pid=9615 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=9615 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414327801.637:5649): pid=9614 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=9615 suid=74 rport=59829 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414327801.637:5650): pid=9614 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=9615 suid=74 rport=59829 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_ACCT msg=audit(1414327801.676:5651): pid=9617 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="keystone" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1414327801.676:5652): pid=9617 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="keystone" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1414327801.677:5653): pid=9617 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=163 old-ses=4294967295 ses=214 res=1 >type=USER_START msg=audit(1414327801.687:5654): pid=9617 uid=0 auid=163 ses=214 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="keystone" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1414327801.688:5655): pid=9617 uid=0 auid=163 ses=214 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="keystone" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_AUTH msg=audit(1414327802.178:5656): pid=9614 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=59829 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327802.179:5657): pid=9614 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=e7:e2:3d:94:48:cf:f5:8c:5e:54:98:bd:89:a5:29:a9 rport=59829 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_ACCT msg=audit(1414327802.183:5658): pid=9614 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327802.183:5659): pid=9614 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=9615 suid=74 rport=59829 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327802.184:5660): pid=9614 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1414327802.184:5661): pid=9614 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=LOGIN msg=audit(1414327802.184:5662): pid=9614 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=215 res=1 >type=USER_ROLE_CHANGE msg=audit(1414327802.270:5663): pid=9614 uid=0 auid=0 ses=215 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_START msg=audit(1414327802.287:5664): pid=9614 uid=0 auid=0 ses=215 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1414327802.292:5665): pid=9614 uid=0 auid=0 ses=215 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_START msg=audit(1414327802.293:5666): pid=9614 uid=0 auid=0 ses=215 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327802.294:5667): pid=9631 uid=0 auid=0 ses=215 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=9631 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327802.294:5668): pid=9631 uid=0 auid=0 ses=215 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=9631 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRED_REFR msg=audit(1414327802.295:5669): pid=9631 uid=0 auid=0 ses=215 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_END msg=audit(1414327802.311:5670): pid=9614 uid=0 auid=0 ses=215 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRED_DISP msg=audit(1414327802.311:5671): pid=9614 uid=0 auid=0 ses=215 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_END msg=audit(1414327802.312:5672): pid=9614 uid=0 auid=0 ses=215 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1414327802.312:5673): pid=9614 uid=0 auid=0 ses=215 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327802.312:5674): pid=9614 uid=0 auid=0 ses=215 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=9614 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327802.312:5675): pid=9614 uid=0 auid=0 ses=215 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=9614 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327802.312:5676): pid=9614 uid=0 auid=0 ses=215 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=9614 suid=0 rport=59829 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRED_DISP msg=audit(1414327802.343:5677): pid=9617 uid=0 auid=163 ses=214 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="keystone" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1414327802.348:5678): pid=9617 uid=0 auid=163 ses=214 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="keystone" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=NETFILTER_CFG msg=audit(1414327802.554:5679): table=filter family=2 entries=37 >type=SYSCALL msg=audit(1414327802.554:5679): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=2116220 items=0 ppid=9244 pid=9641 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=207 comm="iptables" exe="/usr/sbin/xtables-multi" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null) >type=CRYPTO_KEY_USER msg=audit(1414327805.335:5680): pid=9681 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=9681 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327805.335:5681): pid=9681 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=9681 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414327805.337:5682): pid=9680 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=9681 suid=74 rport=59832 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414327805.337:5683): pid=9680 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=9681 suid=74 rport=59832 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327805.874:5684): pid=9680 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=59832 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327805.874:5685): pid=9680 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=e7:e2:3d:94:48:cf:f5:8c:5e:54:98:bd:89:a5:29:a9 rport=59832 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_ACCT msg=audit(1414327805.879:5686): pid=9680 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327805.879:5687): pid=9680 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=9681 suid=74 rport=59832 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327805.880:5688): pid=9680 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1414327805.881:5689): pid=9680 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=LOGIN msg=audit(1414327805.881:5690): pid=9680 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=216 res=1 >type=USER_ROLE_CHANGE msg=audit(1414327805.964:5691): pid=9680 uid=0 auid=0 ses=216 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_START msg=audit(1414327805.981:5692): pid=9680 uid=0 auid=0 ses=216 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1414327805.987:5693): pid=9680 uid=0 auid=0 ses=216 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_START msg=audit(1414327805.987:5694): pid=9680 uid=0 auid=0 ses=216 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327805.988:5695): pid=9683 uid=0 auid=0 ses=216 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=9683 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327805.988:5696): pid=9683 uid=0 auid=0 ses=216 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=9683 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRED_REFR msg=audit(1414327805.989:5697): pid=9683 uid=0 auid=0 ses=216 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_END msg=audit(1414327806.006:5698): pid=9680 uid=0 auid=0 ses=216 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRED_DISP msg=audit(1414327806.006:5699): pid=9680 uid=0 auid=0 ses=216 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_END msg=audit(1414327806.007:5700): pid=9680 uid=0 auid=0 ses=216 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1414327806.007:5701): pid=9680 uid=0 auid=0 ses=216 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327806.008:5702): pid=9680 uid=0 auid=0 ses=216 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=9680 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327806.008:5703): pid=9680 uid=0 auid=0 ses=216 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=9680 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327806.008:5704): pid=9680 uid=0 auid=0 ses=216 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=9680 suid=0 rport=59832 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327809.029:5705): pid=9690 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=9690 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327809.029:5706): pid=9690 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=9690 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414327809.030:5707): pid=9689 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=9690 suid=74 rport=59834 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414327809.030:5708): pid=9689 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=9690 suid=74 rport=59834 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327809.568:5709): pid=9689 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=59834 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327809.568:5710): pid=9689 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=e7:e2:3d:94:48:cf:f5:8c:5e:54:98:bd:89:a5:29:a9 rport=59834 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_ACCT msg=audit(1414327809.572:5711): pid=9689 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327809.572:5712): pid=9689 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=9690 suid=74 rport=59834 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327809.573:5713): pid=9689 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1414327809.573:5714): pid=9689 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=LOGIN msg=audit(1414327809.574:5715): pid=9689 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=217 res=1 >type=USER_ROLE_CHANGE msg=audit(1414327809.645:5716): pid=9689 uid=0 auid=0 ses=217 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_START msg=audit(1414327809.659:5717): pid=9689 uid=0 auid=0 ses=217 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1414327809.663:5718): pid=9689 uid=0 auid=0 ses=217 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_START msg=audit(1414327809.663:5719): pid=9689 uid=0 auid=0 ses=217 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327809.665:5720): pid=9692 uid=0 auid=0 ses=217 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=9692 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327809.665:5721): pid=9692 uid=0 auid=0 ses=217 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=9692 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRED_REFR msg=audit(1414327809.666:5722): pid=9692 uid=0 auid=0 ses=217 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_END msg=audit(1414327809.681:5723): pid=9689 uid=0 auid=0 ses=217 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRED_DISP msg=audit(1414327809.681:5724): pid=9689 uid=0 auid=0 ses=217 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_END msg=audit(1414327809.682:5725): pid=9689 uid=0 auid=0 ses=217 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1414327809.682:5726): pid=9689 uid=0 auid=0 ses=217 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327809.682:5727): pid=9689 uid=0 auid=0 ses=217 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=9689 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327809.682:5728): pid=9689 uid=0 auid=0 ses=217 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=9689 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327809.683:5729): pid=9689 uid=0 auid=0 ses=217 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=9689 suid=0 rport=59834 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327812.705:5730): pid=9700 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=9700 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327812.705:5731): pid=9700 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=9700 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414327812.706:5732): pid=9699 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=9700 suid=74 rport=59835 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414327812.706:5733): pid=9699 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=9700 suid=74 rport=59835 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327813.241:5734): pid=9699 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=59835 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327813.241:5735): pid=9699 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=e7:e2:3d:94:48:cf:f5:8c:5e:54:98:bd:89:a5:29:a9 rport=59835 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_ACCT msg=audit(1414327813.245:5736): pid=9699 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327813.246:5737): pid=9699 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=9700 suid=74 rport=59835 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327813.247:5738): pid=9699 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1414327813.248:5739): pid=9699 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=LOGIN msg=audit(1414327813.248:5740): pid=9699 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=218 res=1 >type=USER_ROLE_CHANGE msg=audit(1414327813.322:5741): pid=9699 uid=0 auid=0 ses=218 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_START msg=audit(1414327813.342:5742): pid=9699 uid=0 auid=0 ses=218 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1414327813.346:5743): pid=9699 uid=0 auid=0 ses=218 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_START msg=audit(1414327813.346:5744): pid=9699 uid=0 auid=0 ses=218 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327813.348:5745): pid=9702 uid=0 auid=0 ses=218 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=9702 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327813.348:5746): pid=9702 uid=0 auid=0 ses=218 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=9702 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRED_REFR msg=audit(1414327813.349:5747): pid=9702 uid=0 auid=0 ses=218 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_END msg=audit(1414327813.363:5748): pid=9699 uid=0 auid=0 ses=218 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRED_DISP msg=audit(1414327813.363:5749): pid=9699 uid=0 auid=0 ses=218 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_END msg=audit(1414327813.364:5750): pid=9699 uid=0 auid=0 ses=218 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1414327813.364:5751): pid=9699 uid=0 auid=0 ses=218 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327813.364:5752): pid=9699 uid=0 auid=0 ses=218 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=9699 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327813.364:5753): pid=9699 uid=0 auid=0 ses=218 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=9699 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327813.364:5754): pid=9699 uid=0 auid=0 ses=218 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=9699 suid=0 rport=59835 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327816.388:5755): pid=9708 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=9708 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327816.388:5756): pid=9708 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=9708 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414327816.390:5757): pid=9707 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=9708 suid=74 rport=59836 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414327816.390:5758): pid=9707 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=9708 suid=74 rport=59836 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327816.938:5759): pid=9707 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=59836 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327816.938:5760): pid=9707 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=e7:e2:3d:94:48:cf:f5:8c:5e:54:98:bd:89:a5:29:a9 rport=59836 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_ACCT msg=audit(1414327816.943:5761): pid=9707 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327816.943:5762): pid=9707 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=9708 suid=74 rport=59836 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327816.944:5763): pid=9707 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1414327816.944:5764): pid=9707 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=LOGIN msg=audit(1414327816.945:5765): pid=9707 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=219 res=1 >type=USER_ROLE_CHANGE msg=audit(1414327817.021:5766): pid=9707 uid=0 auid=0 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_START msg=audit(1414327817.036:5767): pid=9707 uid=0 auid=0 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1414327817.039:5768): pid=9707 uid=0 auid=0 ses=219 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_START msg=audit(1414327817.040:5769): pid=9707 uid=0 auid=0 ses=219 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327817.041:5770): pid=9710 uid=0 auid=0 ses=219 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=9710 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327817.041:5771): pid=9710 uid=0 auid=0 ses=219 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=9710 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRED_REFR msg=audit(1414327817.042:5772): pid=9710 uid=0 auid=0 ses=219 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_END msg=audit(1414327817.057:5773): pid=9707 uid=0 auid=0 ses=219 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRED_DISP msg=audit(1414327817.057:5774): pid=9707 uid=0 auid=0 ses=219 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_END msg=audit(1414327817.058:5775): pid=9707 uid=0 auid=0 ses=219 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1414327817.058:5776): pid=9707 uid=0 auid=0 ses=219 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327817.058:5777): pid=9707 uid=0 auid=0 ses=219 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=9707 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327817.058:5778): pid=9707 uid=0 auid=0 ses=219 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=9707 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327817.058:5779): pid=9707 uid=0 auid=0 ses=219 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=9707 suid=0 rport=59836 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327820.080:5780): pid=9719 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=9719 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327820.080:5781): pid=9719 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=9719 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414327820.081:5782): pid=9718 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=9719 suid=74 rport=59840 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414327820.081:5783): pid=9718 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=9719 suid=74 rport=59840 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327820.620:5784): pid=9718 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=59840 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327820.620:5785): pid=9718 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=e7:e2:3d:94:48:cf:f5:8c:5e:54:98:bd:89:a5:29:a9 rport=59840 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_ACCT msg=audit(1414327820.625:5786): pid=9718 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327820.625:5787): pid=9718 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=9719 suid=74 rport=59840 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327820.626:5788): pid=9718 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1414327820.626:5789): pid=9718 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=LOGIN msg=audit(1414327820.627:5790): pid=9718 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=220 res=1 >type=USER_ROLE_CHANGE msg=audit(1414327820.707:5791): pid=9718 uid=0 auid=0 ses=220 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_START msg=audit(1414327820.723:5792): pid=9718 uid=0 auid=0 ses=220 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1414327820.727:5793): pid=9718 uid=0 auid=0 ses=220 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_START msg=audit(1414327820.727:5794): pid=9718 uid=0 auid=0 ses=220 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327820.729:5795): pid=9721 uid=0 auid=0 ses=220 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=9721 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327820.729:5796): pid=9721 uid=0 auid=0 ses=220 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=9721 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRED_REFR msg=audit(1414327820.730:5797): pid=9721 uid=0 auid=0 ses=220 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_END msg=audit(1414327820.745:5798): pid=9718 uid=0 auid=0 ses=220 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRED_DISP msg=audit(1414327820.746:5799): pid=9718 uid=0 auid=0 ses=220 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_END msg=audit(1414327820.746:5800): pid=9718 uid=0 auid=0 ses=220 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1414327820.746:5801): pid=9718 uid=0 auid=0 ses=220 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327820.747:5802): pid=9718 uid=0 auid=0 ses=220 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=9718 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327820.747:5803): pid=9718 uid=0 auid=0 ses=220 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=9718 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327820.747:5804): pid=9718 uid=0 auid=0 ses=220 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=9718 suid=0 rport=59840 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327823.771:5805): pid=9730 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=9730 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327823.771:5806): pid=9730 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=9730 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414327823.773:5807): pid=9729 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=9730 suid=74 rport=59842 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414327823.773:5808): pid=9729 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=9730 suid=74 rport=59842 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327824.314:5809): pid=9729 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=59842 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327824.314:5810): pid=9729 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=e7:e2:3d:94:48:cf:f5:8c:5e:54:98:bd:89:a5:29:a9 rport=59842 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_ACCT msg=audit(1414327824.318:5811): pid=9729 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327824.319:5812): pid=9729 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=9730 suid=74 rport=59842 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327824.320:5813): pid=9729 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1414327824.320:5814): pid=9729 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=LOGIN msg=audit(1414327824.320:5815): pid=9729 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=221 res=1 >type=USER_ROLE_CHANGE msg=audit(1414327824.390:5816): pid=9729 uid=0 auid=0 ses=221 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_START msg=audit(1414327824.406:5817): pid=9729 uid=0 auid=0 ses=221 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1414327824.410:5818): pid=9729 uid=0 auid=0 ses=221 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_START msg=audit(1414327824.411:5819): pid=9729 uid=0 auid=0 ses=221 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327824.412:5820): pid=9732 uid=0 auid=0 ses=221 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=9732 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327824.412:5821): pid=9732 uid=0 auid=0 ses=221 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=9732 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRED_REFR msg=audit(1414327824.413:5822): pid=9732 uid=0 auid=0 ses=221 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_END msg=audit(1414327824.428:5823): pid=9729 uid=0 auid=0 ses=221 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRED_DISP msg=audit(1414327824.428:5824): pid=9729 uid=0 auid=0 ses=221 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_END msg=audit(1414327824.429:5825): pid=9729 uid=0 auid=0 ses=221 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1414327824.429:5826): pid=9729 uid=0 auid=0 ses=221 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327824.429:5827): pid=9729 uid=0 auid=0 ses=221 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=9729 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327824.429:5828): pid=9729 uid=0 auid=0 ses=221 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=9729 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327824.429:5829): pid=9729 uid=0 auid=0 ses=221 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=9729 suid=0 rport=59842 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327827.452:5830): pid=9738 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=9738 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327827.452:5831): pid=9738 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=9738 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414327827.453:5832): pid=9737 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=9738 suid=74 rport=59844 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414327827.453:5833): pid=9737 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=9738 suid=74 rport=59844 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327827.997:5834): pid=9737 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=59844 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327827.997:5835): pid=9737 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=e7:e2:3d:94:48:cf:f5:8c:5e:54:98:bd:89:a5:29:a9 rport=59844 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_ACCT msg=audit(1414327828.002:5836): pid=9737 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327828.003:5837): pid=9737 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=9738 suid=74 rport=59844 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327828.004:5838): pid=9737 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1414327828.005:5839): pid=9737 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=LOGIN msg=audit(1414327828.005:5840): pid=9737 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=222 res=1 >type=USER_ROLE_CHANGE msg=audit(1414327828.080:5841): pid=9737 uid=0 auid=0 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_START msg=audit(1414327828.096:5842): pid=9737 uid=0 auid=0 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1414327828.100:5843): pid=9737 uid=0 auid=0 ses=222 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_START msg=audit(1414327828.100:5844): pid=9737 uid=0 auid=0 ses=222 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327828.102:5845): pid=9740 uid=0 auid=0 ses=222 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=9740 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327828.102:5846): pid=9740 uid=0 auid=0 ses=222 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=9740 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRED_REFR msg=audit(1414327828.103:5847): pid=9740 uid=0 auid=0 ses=222 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_END msg=audit(1414327828.118:5848): pid=9737 uid=0 auid=0 ses=222 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRED_DISP msg=audit(1414327828.118:5849): pid=9737 uid=0 auid=0 ses=222 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_END msg=audit(1414327828.118:5850): pid=9737 uid=0 auid=0 ses=222 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1414327828.118:5851): pid=9737 uid=0 auid=0 ses=222 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327828.118:5852): pid=9737 uid=0 auid=0 ses=222 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=9737 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327828.119:5853): pid=9737 uid=0 auid=0 ses=222 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=9737 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327828.119:5854): pid=9737 uid=0 auid=0 ses=222 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=9737 suid=0 rport=59844 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327831.150:5855): pid=9746 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=9746 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327831.150:5856): pid=9746 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=9746 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414327831.151:5857): pid=9745 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=9746 suid=74 rport=59846 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414327831.151:5858): pid=9745 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=9746 suid=74 rport=59846 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327831.690:5859): pid=9745 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=59846 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327831.690:5860): pid=9745 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=e7:e2:3d:94:48:cf:f5:8c:5e:54:98:bd:89:a5:29:a9 rport=59846 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_ACCT msg=audit(1414327831.695:5861): pid=9745 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327831.696:5862): pid=9745 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=9746 suid=74 rport=59846 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327831.697:5863): pid=9745 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1414327831.697:5864): pid=9745 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=LOGIN msg=audit(1414327831.697:5865): pid=9745 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=223 res=1 >type=USER_ROLE_CHANGE msg=audit(1414327831.769:5866): pid=9745 uid=0 auid=0 ses=223 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_START msg=audit(1414327831.786:5867): pid=9745 uid=0 auid=0 ses=223 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1414327831.789:5868): pid=9745 uid=0 auid=0 ses=223 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_START msg=audit(1414327831.790:5869): pid=9745 uid=0 auid=0 ses=223 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327831.791:5870): pid=9748 uid=0 auid=0 ses=223 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=9748 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327831.791:5871): pid=9748 uid=0 auid=0 ses=223 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=9748 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRED_REFR msg=audit(1414327831.792:5872): pid=9748 uid=0 auid=0 ses=223 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_END msg=audit(1414327831.806:5873): pid=9745 uid=0 auid=0 ses=223 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRED_DISP msg=audit(1414327831.806:5874): pid=9745 uid=0 auid=0 ses=223 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_END msg=audit(1414327831.807:5875): pid=9745 uid=0 auid=0 ses=223 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1414327831.807:5876): pid=9745 uid=0 auid=0 ses=223 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327831.807:5877): pid=9745 uid=0 auid=0 ses=223 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=9745 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327831.807:5878): pid=9745 uid=0 auid=0 ses=223 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=9745 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327831.807:5879): pid=9745 uid=0 auid=0 ses=223 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=9745 suid=0 rport=59846 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327834.831:5880): pid=9760 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=9760 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327834.831:5881): pid=9760 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=9760 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414327834.832:5882): pid=9759 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=9760 suid=74 rport=59851 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414327834.832:5883): pid=9759 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=9760 suid=74 rport=59851 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327835.369:5884): pid=9759 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=59851 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327835.369:5885): pid=9759 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=e7:e2:3d:94:48:cf:f5:8c:5e:54:98:bd:89:a5:29:a9 rport=59851 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_ACCT msg=audit(1414327835.373:5886): pid=9759 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327835.374:5887): pid=9759 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=9760 suid=74 rport=59851 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327835.375:5888): pid=9759 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1414327835.376:5889): pid=9759 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=LOGIN msg=audit(1414327835.376:5890): pid=9759 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=224 res=1 >type=USER_ROLE_CHANGE msg=audit(1414327835.446:5891): pid=9759 uid=0 auid=0 ses=224 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_START msg=audit(1414327835.461:5892): pid=9759 uid=0 auid=0 ses=224 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1414327835.465:5893): pid=9759 uid=0 auid=0 ses=224 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_START msg=audit(1414327835.465:5894): pid=9759 uid=0 auid=0 ses=224 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327835.467:5895): pid=9762 uid=0 auid=0 ses=224 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=9762 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327835.467:5896): pid=9762 uid=0 auid=0 ses=224 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=9762 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRED_REFR msg=audit(1414327835.468:5897): pid=9762 uid=0 auid=0 ses=224 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_END msg=audit(1414327835.482:5898): pid=9759 uid=0 auid=0 ses=224 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRED_DISP msg=audit(1414327835.482:5899): pid=9759 uid=0 auid=0 ses=224 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_END msg=audit(1414327835.482:5900): pid=9759 uid=0 auid=0 ses=224 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1414327835.482:5901): pid=9759 uid=0 auid=0 ses=224 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327835.483:5902): pid=9759 uid=0 auid=0 ses=224 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=9759 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327835.483:5903): pid=9759 uid=0 auid=0 ses=224 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=9759 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327835.483:5904): pid=9759 uid=0 auid=0 ses=224 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=9759 suid=0 rport=59851 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327838.503:5905): pid=9768 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=9768 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327838.504:5906): pid=9768 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=9768 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414327838.505:5907): pid=9767 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=9768 suid=74 rport=59853 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414327838.506:5908): pid=9767 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=9768 suid=74 rport=59853 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327839.048:5909): pid=9767 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=59853 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327839.048:5910): pid=9767 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=e7:e2:3d:94:48:cf:f5:8c:5e:54:98:bd:89:a5:29:a9 rport=59853 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_ACCT msg=audit(1414327839.053:5911): pid=9767 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327839.053:5912): pid=9767 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=9768 suid=74 rport=59853 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327839.054:5913): pid=9767 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1414327839.055:5914): pid=9767 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=LOGIN msg=audit(1414327839.055:5915): pid=9767 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=225 res=1 >type=USER_ROLE_CHANGE msg=audit(1414327839.127:5916): pid=9767 uid=0 auid=0 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_START msg=audit(1414327839.141:5917): pid=9767 uid=0 auid=0 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1414327839.145:5918): pid=9767 uid=0 auid=0 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_START msg=audit(1414327839.145:5919): pid=9767 uid=0 auid=0 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327839.147:5920): pid=9774 uid=0 auid=0 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=9774 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327839.147:5921): pid=9774 uid=0 auid=0 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=9774 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRED_REFR msg=audit(1414327839.148:5922): pid=9774 uid=0 auid=0 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_END msg=audit(1414327839.170:5923): pid=9767 uid=0 auid=0 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRED_DISP msg=audit(1414327839.170:5924): pid=9767 uid=0 auid=0 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_END msg=audit(1414327839.171:5925): pid=9767 uid=0 auid=0 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1414327839.171:5926): pid=9767 uid=0 auid=0 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327839.171:5927): pid=9767 uid=0 auid=0 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=9767 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327839.171:5928): pid=9767 uid=0 auid=0 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=9767 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327839.171:5929): pid=9767 uid=0 auid=0 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=9767 suid=0 rport=59853 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327842.194:5930): pid=9785 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=9785 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327842.194:5931): pid=9785 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=9785 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414327842.195:5932): pid=9784 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=9785 suid=74 rport=59859 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414327842.195:5933): pid=9784 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=9785 suid=74 rport=59859 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327842.736:5934): pid=9784 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=59859 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327842.736:5935): pid=9784 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=e7:e2:3d:94:48:cf:f5:8c:5e:54:98:bd:89:a5:29:a9 rport=59859 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_ACCT msg=audit(1414327842.741:5936): pid=9784 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327842.742:5937): pid=9784 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=9785 suid=74 rport=59859 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327842.743:5938): pid=9784 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1414327842.743:5939): pid=9784 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=LOGIN msg=audit(1414327842.744:5940): pid=9784 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=226 res=1 >type=USER_ROLE_CHANGE msg=audit(1414327842.817:5941): pid=9784 uid=0 auid=0 ses=226 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_START msg=audit(1414327842.833:5942): pid=9784 uid=0 auid=0 ses=226 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1414327842.837:5943): pid=9784 uid=0 auid=0 ses=226 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_START msg=audit(1414327842.837:5944): pid=9784 uid=0 auid=0 ses=226 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327842.839:5945): pid=9787 uid=0 auid=0 ses=226 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=9787 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327842.839:5946): pid=9787 uid=0 auid=0 ses=226 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=9787 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRED_REFR msg=audit(1414327842.840:5947): pid=9787 uid=0 auid=0 ses=226 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_END msg=audit(1414327842.854:5948): pid=9784 uid=0 auid=0 ses=226 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRED_DISP msg=audit(1414327842.854:5949): pid=9784 uid=0 auid=0 ses=226 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_END msg=audit(1414327842.855:5950): pid=9784 uid=0 auid=0 ses=226 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1414327842.855:5951): pid=9784 uid=0 auid=0 ses=226 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327842.855:5952): pid=9784 uid=0 auid=0 ses=226 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=9784 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327842.856:5953): pid=9784 uid=0 auid=0 ses=226 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=9784 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327842.856:5954): pid=9784 uid=0 auid=0 ses=226 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=9784 suid=0 rport=59859 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_CMD msg=audit(1414327844.021:5955): pid=9832 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D4320766773202D2D6E6F68656164696E6773202D2D756E69743D67202D6F206E616D652C73697A652C667265652C6C765F636F756E742C75756964202D2D736570617261746F72203A202D2D6E6F7375666669782063696E6465722D766F6C756D6573 terminal=? res=success' >type=CRED_ACQ msg=audit(1414327844.021:5956): pid=9832 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1414327844.022:5957): pid=9832 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1414327844.090:5958): pid=9832 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1414327844.091:5959): pid=9832 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=ADD_GROUP msg=audit(1414327844.147:5960): pid=9837 uid=0 auid=0 ses=207 subj=unconfined_u:system_r:groupadd_t:s0-s0:c0.c1023 msg='op=adding group to /etc/group id=75 exe="/usr/sbin/groupadd" hostname=? addr=? terminal=? res=success' >type=ADD_GROUP msg=audit(1414327844.153:5961): pid=9837 uid=0 auid=0 ses=207 subj=unconfined_u:system_r:groupadd_t:s0-s0:c0.c1023 msg='op=adding group to /etc/gshadow id=75 exe="/usr/sbin/groupadd" hostname=? addr=? terminal=? res=success' >type=ADD_GROUP msg=audit(1414327844.154:5962): pid=9837 uid=0 auid=0 ses=207 subj=unconfined_u:system_r:groupadd_t:s0-s0:c0.c1023 msg='op= id=75 exe="/usr/sbin/groupadd" hostname=? addr=? terminal=? res=success' >type=ADD_USER msg=audit(1414327844.163:5963): pid=9842 uid=0 auid=0 ses=207 subj=unconfined_u:system_r:useradd_t:s0-s0:c0.c1023 msg='op=adding user id=75 exe="/usr/sbin/useradd" hostname=? addr=? terminal=? res=success' >type=ADD_GROUP msg=audit(1414327845.605:5964): pid=9875 uid=0 auid=0 ses=207 subj=unconfined_u:system_r:groupadd_t:s0-s0:c0.c1023 msg='op=adding group to /etc/group id=76 exe="/usr/sbin/groupadd" hostname=? addr=? terminal=? res=success' >type=ADD_GROUP msg=audit(1414327845.607:5965): pid=9875 uid=0 auid=0 ses=207 subj=unconfined_u:system_r:groupadd_t:s0-s0:c0.c1023 msg='op=adding group to /etc/gshadow id=76 exe="/usr/sbin/groupadd" hostname=? addr=? terminal=? res=success' >type=ADD_GROUP msg=audit(1414327845.608:5966): pid=9875 uid=0 auid=0 ses=207 subj=unconfined_u:system_r:groupadd_t:s0-s0:c0.c1023 msg='op= id=76 exe="/usr/sbin/groupadd" hostname=? addr=? terminal=? res=success' >type=ADD_USER msg=audit(1414327845.627:5967): pid=9880 uid=0 auid=0 ses=207 subj=unconfined_u:system_r:useradd_t:s0-s0:c0.c1023 msg='op=adding user id=995 exe="/usr/sbin/useradd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327845.889:5968): pid=9900 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=9900 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327845.889:5969): pid=9900 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=9900 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414327845.891:5970): pid=9899 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=9900 suid=74 rport=59860 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414327845.893:5971): pid=9899 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=9900 suid=74 rport=59860 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=ADD_GROUP msg=audit(1414327846.369:5972): pid=9927 uid=0 auid=0 ses=207 subj=unconfined_u:system_r:groupadd_t:s0-s0:c0.c1023 msg='op=adding group to /etc/group id=993 exe="/usr/sbin/groupadd" hostname=? addr=? terminal=? res=success' >type=ADD_GROUP msg=audit(1414327846.371:5973): pid=9927 uid=0 auid=0 ses=207 subj=unconfined_u:system_r:groupadd_t:s0-s0:c0.c1023 msg='op=adding group to /etc/gshadow id=993 exe="/usr/sbin/groupadd" hostname=? addr=? terminal=? res=success' >type=ADD_GROUP msg=audit(1414327846.372:5974): pid=9927 uid=0 auid=0 ses=207 subj=unconfined_u:system_r:groupadd_t:s0-s0:c0.c1023 msg='op= id=993 exe="/usr/sbin/groupadd" hostname=? addr=? terminal=? res=success' >type=ADD_USER msg=audit(1414327846.391:5975): pid=9932 uid=0 auid=0 ses=207 subj=unconfined_u:system_r:useradd_t:s0-s0:c0.c1023 msg='op=adding user id=994 exe="/usr/sbin/useradd" hostname=? addr=? terminal=? res=success' >type=USER_AUTH msg=audit(1414327846.431:5976): pid=9899 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=59860 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327846.431:5977): pid=9899 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=e7:e2:3d:94:48:cf:f5:8c:5e:54:98:bd:89:a5:29:a9 rport=59860 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_ACCT msg=audit(1414327846.435:5978): pid=9899 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327846.436:5979): pid=9899 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=9900 suid=74 rport=59860 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327846.437:5980): pid=9899 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1414327846.438:5981): pid=9899 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=LOGIN msg=audit(1414327846.438:5982): pid=9899 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=227 res=1 >type=CRED_ACQ msg=audit(1414327846.476:5983): pid=9940 uid=0 auid=0 ses=207 subj=unconfined_u:system_r:rpm_script_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="unbound" exe="/usr/sbin/runuser" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1414327846.477:5984): pid=9940 uid=0 auid=0 ses=207 subj=unconfined_u:system_r:rpm_script_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="unbound" exe="/usr/sbin/runuser" hostname=? addr=? terminal=? res=success' >type=USER_ROLE_CHANGE msg=audit(1414327846.517:5985): pid=9899 uid=0 auid=0 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_START msg=audit(1414327846.568:5986): pid=9899 uid=0 auid=0 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1414327846.572:5987): pid=9899 uid=0 auid=0 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_START msg=audit(1414327846.572:5988): pid=9899 uid=0 auid=0 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327846.574:5989): pid=9942 uid=0 auid=0 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=9942 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327846.574:5990): pid=9942 uid=0 auid=0 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=9942 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRED_REFR msg=audit(1414327846.575:5991): pid=9942 uid=0 auid=0 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_END msg=audit(1414327846.589:5992): pid=9899 uid=0 auid=0 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRED_DISP msg=audit(1414327846.590:5993): pid=9899 uid=0 auid=0 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_END msg=audit(1414327846.590:5994): pid=9899 uid=0 auid=0 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1414327846.590:5995): pid=9899 uid=0 auid=0 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327846.590:5996): pid=9899 uid=0 auid=0 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=9899 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327846.590:5997): pid=9899 uid=0 auid=0 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=9899 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327846.591:5998): pid=9899 uid=0 auid=0 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=9899 suid=0 rport=59860 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_END msg=audit(1414327846.804:5999): pid=9940 uid=0 auid=0 ses=207 subj=unconfined_u:system_r:rpm_script_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="unbound" exe="/usr/sbin/runuser" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1414327846.804:6000): pid=9940 uid=0 auid=0 ses=207 subj=unconfined_u:system_r:rpm_script_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="unbound" exe="/usr/sbin/runuser" hostname=? addr=? terminal=? res=success' >type=USER_CHAUTHTOK msg=audit(1414327848.595:6001): pid=9980 uid=0 auid=0 ses=207 subj=unconfined_u:system_r:useradd_t:s0-s0:c0.c1023 msg='op=adding user to group acct="nova" exe="/usr/sbin/usermod" hostname=? addr=? terminal=? res=success' >type=USER_CHAUTHTOK msg=audit(1414327848.596:6002): pid=9980 uid=0 auid=0 ses=207 subj=unconfined_u:system_r:useradd_t:s0-s0:c0.c1023 msg='op=adding user to shadow group acct="nova" exe="/usr/sbin/usermod" hostname=? addr=? terminal=? res=success' >type=NETFILTER_CFG msg=audit(1414327849.339:6003): table=filter family=2 entries=38 >type=SYSCALL msg=audit(1414327849.339:6003): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=1832670 items=0 ppid=9244 pid=10005 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=207 comm="iptables" exe="/usr/sbin/xtables-multi" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null) >type=CRYPTO_KEY_USER msg=audit(1414327849.616:6004): pid=10042 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=10042 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327849.616:6005): pid=10042 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=10042 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414327849.618:6006): pid=10041 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=10042 suid=74 rport=59861 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414327849.618:6007): pid=10041 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=10042 suid=74 rport=59861 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327850.157:6008): pid=10041 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=59861 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327850.157:6009): pid=10041 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=e7:e2:3d:94:48:cf:f5:8c:5e:54:98:bd:89:a5:29:a9 rport=59861 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_ACCT msg=audit(1414327850.161:6010): pid=10041 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327850.162:6011): pid=10041 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=10042 suid=74 rport=59861 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327850.163:6012): pid=10041 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1414327850.163:6013): pid=10041 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=LOGIN msg=audit(1414327850.163:6014): pid=10041 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=228 res=1 >type=USER_ROLE_CHANGE msg=audit(1414327850.239:6015): pid=10041 uid=0 auid=0 ses=228 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_START msg=audit(1414327850.291:6016): pid=10041 uid=0 auid=0 ses=228 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1414327850.295:6017): pid=10041 uid=0 auid=0 ses=228 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_START msg=audit(1414327850.295:6018): pid=10041 uid=0 auid=0 ses=228 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327850.297:6019): pid=10044 uid=0 auid=0 ses=228 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=10044 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327850.297:6020): pid=10044 uid=0 auid=0 ses=228 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=10044 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRED_REFR msg=audit(1414327850.298:6021): pid=10044 uid=0 auid=0 ses=228 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_END msg=audit(1414327850.313:6022): pid=10041 uid=0 auid=0 ses=228 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRED_DISP msg=audit(1414327850.313:6023): pid=10041 uid=0 auid=0 ses=228 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_END msg=audit(1414327850.314:6024): pid=10041 uid=0 auid=0 ses=228 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1414327850.314:6025): pid=10041 uid=0 auid=0 ses=228 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327850.314:6026): pid=10041 uid=0 auid=0 ses=228 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=10041 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327850.314:6027): pid=10041 uid=0 auid=0 ses=228 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=10041 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327850.314:6028): pid=10041 uid=0 auid=0 ses=228 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=10041 suid=0 rport=59861 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327853.339:6029): pid=10060 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=10060 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327853.340:6030): pid=10060 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=10060 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414327853.342:6031): pid=10059 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=10060 suid=74 rport=59863 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414327853.342:6032): pid=10059 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=10060 suid=74 rport=59863 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327853.886:6033): pid=10059 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=59863 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327853.886:6034): pid=10059 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=e7:e2:3d:94:48:cf:f5:8c:5e:54:98:bd:89:a5:29:a9 rport=59863 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_ACCT msg=audit(1414327853.891:6035): pid=10059 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327853.891:6036): pid=10059 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=10060 suid=74 rport=59863 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327853.893:6037): pid=10059 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1414327853.893:6038): pid=10059 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=LOGIN msg=audit(1414327853.893:6039): pid=10059 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=229 res=1 >type=USER_ROLE_CHANGE msg=audit(1414327853.969:6040): pid=10059 uid=0 auid=0 ses=229 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_START msg=audit(1414327853.984:6041): pid=10059 uid=0 auid=0 ses=229 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1414327853.988:6042): pid=10059 uid=0 auid=0 ses=229 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_START msg=audit(1414327853.988:6043): pid=10059 uid=0 auid=0 ses=229 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327853.989:6044): pid=10069 uid=0 auid=0 ses=229 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=10069 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327853.989:6045): pid=10069 uid=0 auid=0 ses=229 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=10069 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRED_REFR msg=audit(1414327853.990:6046): pid=10069 uid=0 auid=0 ses=229 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_END msg=audit(1414327854.002:6047): pid=10059 uid=0 auid=0 ses=229 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRED_DISP msg=audit(1414327854.003:6048): pid=10059 uid=0 auid=0 ses=229 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_END msg=audit(1414327854.003:6049): pid=10059 uid=0 auid=0 ses=229 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1414327854.003:6050): pid=10059 uid=0 auid=0 ses=229 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327854.003:6051): pid=10059 uid=0 auid=0 ses=229 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=10059 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327854.003:6052): pid=10059 uid=0 auid=0 ses=229 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=10059 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327854.004:6053): pid=10059 uid=0 auid=0 ses=229 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=10059 suid=0 rport=59863 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327857.027:6054): pid=10084 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=10084 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327857.028:6055): pid=10084 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=10084 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414327857.029:6056): pid=10083 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=10084 suid=74 rport=59864 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414327857.030:6057): pid=10083 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=10084 suid=74 rport=59864 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327857.568:6058): pid=10083 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=59864 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327857.568:6059): pid=10083 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=e7:e2:3d:94:48:cf:f5:8c:5e:54:98:bd:89:a5:29:a9 rport=59864 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_ACCT msg=audit(1414327857.573:6060): pid=10083 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327857.573:6061): pid=10083 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=10084 suid=74 rport=59864 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327857.574:6062): pid=10083 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1414327857.574:6063): pid=10083 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=LOGIN msg=audit(1414327857.574:6064): pid=10083 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=230 res=1 >type=USER_ROLE_CHANGE msg=audit(1414327857.645:6065): pid=10083 uid=0 auid=0 ses=230 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_START msg=audit(1414327857.661:6066): pid=10083 uid=0 auid=0 ses=230 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1414327857.665:6067): pid=10083 uid=0 auid=0 ses=230 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_START msg=audit(1414327857.665:6068): pid=10083 uid=0 auid=0 ses=230 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327857.667:6069): pid=10090 uid=0 auid=0 ses=230 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=10090 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327857.667:6070): pid=10090 uid=0 auid=0 ses=230 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=10090 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRED_REFR msg=audit(1414327857.668:6071): pid=10090 uid=0 auid=0 ses=230 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_END msg=audit(1414327857.677:6072): pid=10083 uid=0 auid=0 ses=230 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1414327857.677:6073): pid=10083 uid=0 auid=0 ses=230 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_END msg=audit(1414327857.681:6074): pid=10083 uid=0 auid=0 ses=230 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRED_DISP msg=audit(1414327857.681:6075): pid=10083 uid=0 auid=0 ses=230 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327857.682:6076): pid=10083 uid=0 auid=0 ses=230 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=10083 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327857.682:6077): pid=10083 uid=0 auid=0 ses=230 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=10083 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327857.682:6078): pid=10083 uid=0 auid=0 ses=230 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=10083 suid=0 rport=59864 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327860.707:6079): pid=10122 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=10122 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327860.707:6080): pid=10122 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=10122 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414327860.708:6081): pid=10121 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=10122 suid=74 rport=59868 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414327860.708:6082): pid=10121 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=10122 suid=74 rport=59868 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327861.250:6083): pid=10121 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=59868 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327861.250:6084): pid=10121 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=e7:e2:3d:94:48:cf:f5:8c:5e:54:98:bd:89:a5:29:a9 rport=59868 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_ACCT msg=audit(1414327861.256:6085): pid=10121 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327861.256:6086): pid=10121 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=10122 suid=74 rport=59868 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327861.257:6087): pid=10121 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1414327861.257:6088): pid=10121 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=LOGIN msg=audit(1414327861.258:6089): pid=10121 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=231 res=1 >type=USER_ROLE_CHANGE msg=audit(1414327861.333:6090): pid=10121 uid=0 auid=0 ses=231 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_START msg=audit(1414327861.407:6091): pid=10121 uid=0 auid=0 ses=231 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1414327861.412:6092): pid=10121 uid=0 auid=0 ses=231 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_START msg=audit(1414327861.412:6093): pid=10121 uid=0 auid=0 ses=231 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327861.414:6094): pid=10124 uid=0 auid=0 ses=231 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=10124 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327861.415:6095): pid=10124 uid=0 auid=0 ses=231 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=10124 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRED_REFR msg=audit(1414327861.415:6096): pid=10124 uid=0 auid=0 ses=231 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_END msg=audit(1414327861.431:6097): pid=10121 uid=0 auid=0 ses=231 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRED_DISP msg=audit(1414327861.431:6098): pid=10121 uid=0 auid=0 ses=231 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_END msg=audit(1414327861.432:6099): pid=10121 uid=0 auid=0 ses=231 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1414327861.432:6100): pid=10121 uid=0 auid=0 ses=231 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327861.432:6101): pid=10121 uid=0 auid=0 ses=231 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=10121 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327861.432:6102): pid=10121 uid=0 auid=0 ses=231 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=10121 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327861.432:6103): pid=10121 uid=0 auid=0 ses=231 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=10121 suid=0 rport=59868 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_ACCT msg=audit(1414327861.633:6104): pid=10126 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="keystone" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1414327861.633:6105): pid=10126 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="keystone" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1414327861.633:6106): pid=10126 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=163 old-ses=4294967295 ses=232 res=1 >type=USER_START msg=audit(1414327861.652:6107): pid=10126 uid=0 auid=163 ses=232 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="keystone" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1414327861.653:6108): pid=10126 uid=0 auid=163 ses=232 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="keystone" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1414327862.290:6109): pid=10126 uid=0 auid=163 ses=232 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="keystone" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1414327862.293:6110): pid=10126 uid=0 auid=163 ses=232 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="keystone" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRYPTO_KEY_USER msg=audit(1414327864.465:6111): pid=10150 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=10150 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327864.465:6112): pid=10150 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=10150 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414327864.466:6113): pid=10149 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=10150 suid=74 rport=59871 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414327864.466:6114): pid=10149 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=10150 suid=74 rport=59871 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327865.004:6115): pid=10149 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=59871 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327865.004:6116): pid=10149 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=e7:e2:3d:94:48:cf:f5:8c:5e:54:98:bd:89:a5:29:a9 rport=59871 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_ACCT msg=audit(1414327865.009:6117): pid=10149 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327865.010:6118): pid=10149 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=10150 suid=74 rport=59871 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327865.011:6119): pid=10149 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1414327865.011:6120): pid=10149 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=LOGIN msg=audit(1414327865.011:6121): pid=10149 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=233 res=1 >type=USER_ROLE_CHANGE msg=audit(1414327865.090:6122): pid=10149 uid=0 auid=0 ses=233 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_START msg=audit(1414327865.107:6123): pid=10149 uid=0 auid=0 ses=233 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1414327865.110:6124): pid=10149 uid=0 auid=0 ses=233 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_START msg=audit(1414327865.110:6125): pid=10149 uid=0 auid=0 ses=233 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327865.112:6126): pid=10153 uid=0 auid=0 ses=233 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=10153 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327865.112:6127): pid=10153 uid=0 auid=0 ses=233 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=10153 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRED_REFR msg=audit(1414327865.113:6128): pid=10153 uid=0 auid=0 ses=233 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_END msg=audit(1414327865.129:6129): pid=10149 uid=0 auid=0 ses=233 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRED_DISP msg=audit(1414327865.129:6130): pid=10149 uid=0 auid=0 ses=233 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_END msg=audit(1414327865.129:6131): pid=10149 uid=0 auid=0 ses=233 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1414327865.130:6132): pid=10149 uid=0 auid=0 ses=233 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327865.130:6133): pid=10149 uid=0 auid=0 ses=233 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=10149 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327865.130:6134): pid=10149 uid=0 auid=0 ses=233 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=10149 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327865.130:6135): pid=10149 uid=0 auid=0 ses=233 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=10149 suid=0 rport=59871 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327868.156:6136): pid=10179 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=10179 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327868.156:6137): pid=10179 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=10179 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414327868.158:6138): pid=10178 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=10179 suid=74 rport=59873 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414327868.158:6139): pid=10178 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=10179 suid=74 rport=59873 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327868.701:6140): pid=10178 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=59873 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327868.701:6141): pid=10178 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=e7:e2:3d:94:48:cf:f5:8c:5e:54:98:bd:89:a5:29:a9 rport=59873 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_ACCT msg=audit(1414327868.705:6142): pid=10178 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327868.705:6143): pid=10178 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=10179 suid=74 rport=59873 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327868.706:6144): pid=10178 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1414327868.706:6145): pid=10178 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=LOGIN msg=audit(1414327868.706:6146): pid=10178 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=234 res=1 >type=USER_ROLE_CHANGE msg=audit(1414327868.782:6147): pid=10178 uid=0 auid=0 ses=234 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_START msg=audit(1414327868.834:6148): pid=10178 uid=0 auid=0 ses=234 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1414327868.839:6149): pid=10178 uid=0 auid=0 ses=234 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_START msg=audit(1414327868.839:6150): pid=10178 uid=0 auid=0 ses=234 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327868.840:6151): pid=10181 uid=0 auid=0 ses=234 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=10181 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327868.841:6152): pid=10181 uid=0 auid=0 ses=234 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=10181 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRED_REFR msg=audit(1414327868.841:6153): pid=10181 uid=0 auid=0 ses=234 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_END msg=audit(1414327868.856:6154): pid=10178 uid=0 auid=0 ses=234 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRED_DISP msg=audit(1414327868.857:6155): pid=10178 uid=0 auid=0 ses=234 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_END msg=audit(1414327868.857:6156): pid=10178 uid=0 auid=0 ses=234 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1414327868.857:6157): pid=10178 uid=0 auid=0 ses=234 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327868.858:6158): pid=10178 uid=0 auid=0 ses=234 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=10178 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327868.858:6159): pid=10178 uid=0 auid=0 ses=234 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=10178 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327868.858:6160): pid=10178 uid=0 auid=0 ses=234 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=10178 suid=0 rport=59873 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327871.885:6161): pid=10209 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=10209 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327871.885:6162): pid=10209 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=10209 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414327871.887:6163): pid=10205 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=10209 suid=74 rport=59877 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414327871.887:6164): pid=10205 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=10209 suid=74 rport=59877 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=SERVICE_START msg=audit(1414327872.391:6165): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="libvirtd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=USER_AUTH msg=audit(1414327872.425:6166): pid=10205 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=59877 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327872.425:6167): pid=10205 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=e7:e2:3d:94:48:cf:f5:8c:5e:54:98:bd:89:a5:29:a9 rport=59877 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_ACCT msg=audit(1414327872.429:6168): pid=10205 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327872.430:6169): pid=10205 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=10209 suid=74 rport=59877 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327872.431:6170): pid=10205 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1414327872.431:6171): pid=10205 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=LOGIN msg=audit(1414327872.432:6172): pid=10205 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=235 res=1 >type=NETFILTER_CFG msg=audit(1414327872.498:6173): table=filter family=10 entries=0 >type=SYSCALL msg=audit(1414327872.498:6173): arch=c000003e syscall=313 success=yes exit=0 a0=0 a1=7f53805abd89 a2=0 a3=0 items=0 ppid=10270 pid=10271 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="modprobe" exe="/usr/bin/kmod" subj=system_u:system_r:insmod_t:s0 key=(null) >type=USER_ROLE_CHANGE msg=audit(1414327872.512:6174): pid=10205 uid=0 auid=0 ses=235 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_START msg=audit(1414327872.534:6175): pid=10205 uid=0 auid=0 ses=235 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1414327872.538:6176): pid=10205 uid=0 auid=0 ses=235 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_START msg=audit(1414327872.539:6177): pid=10205 uid=0 auid=0 ses=235 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327872.540:6178): pid=10279 uid=0 auid=0 ses=235 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=10279 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327872.541:6179): pid=10279 uid=0 auid=0 ses=235 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=10279 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRED_REFR msg=audit(1414327872.541:6180): pid=10279 uid=0 auid=0 ses=235 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_END msg=audit(1414327872.563:6181): pid=10205 uid=0 auid=0 ses=235 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRED_DISP msg=audit(1414327872.563:6182): pid=10205 uid=0 auid=0 ses=235 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_END msg=audit(1414327872.564:6183): pid=10205 uid=0 auid=0 ses=235 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1414327872.564:6184): pid=10205 uid=0 auid=0 ses=235 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327872.564:6185): pid=10205 uid=0 auid=0 ses=235 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=10205 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327872.564:6186): pid=10205 uid=0 auid=0 ses=235 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=10205 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327872.564:6187): pid=10205 uid=0 auid=0 ses=235 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=10205 suid=0 rport=59877 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=NETFILTER_CFG msg=audit(1414327872.660:6188): table=filter family=2 entries=0 >type=NETFILTER_CFG msg=audit(1414327872.660:6188): table=nat family=2 entries=0 >type=NETFILTER_CFG msg=audit(1414327872.660:6188): table=mangle family=2 entries=0 >type=NETFILTER_CFG msg=audit(1414327872.660:6188): table=filter family=10 entries=0 >type=SYSCALL msg=audit(1414327872.660:6188): arch=c000003e syscall=56 success=yes exit=10314 a0=6c020011 a1=7fc0641e5530 a2=8 a3=7fc06ad0bc60 items=0 ppid=1 pid=10238 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="libvirtd" exe="/usr/sbin/libvirtd" subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 key=(null) >type=NETFILTER_CFG msg=audit(1414327872.751:6189): table=filter family=2 entries=39 >type=SYSCALL msg=audit(1414327872.751:6189): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=15a5110 items=0 ppid=10225 pid=10321 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0-s0:c0.c1023 key=(null) >type=NETFILTER_CFG msg=audit(1414327872.755:6190): table=filter family=2 entries=40 >type=SYSCALL msg=audit(1414327872.755:6190): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=77b300 items=0 ppid=10225 pid=10322 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0-s0:c0.c1023 key=(null) >type=NETFILTER_CFG msg=audit(1414327872.758:6191): table=mangle family=2 entries=9 >type=SYSCALL msg=audit(1414327872.758:6191): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=9b0300 items=0 ppid=10225 pid=10323 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0-s0:c0.c1023 key=(null) >type=NETFILTER_CFG msg=audit(1414327872.767:6192): table=filter family=2 entries=41 >type=SYSCALL msg=audit(1414327872.767:6192): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=8924c0 items=0 ppid=10225 pid=10326 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0-s0:c0.c1023 key=(null) >type=NETFILTER_CFG msg=audit(1414327872.770:6193): table=filter family=2 entries=42 >type=SYSCALL msg=audit(1414327872.770:6193): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=21a76b0 items=0 ppid=10225 pid=10327 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0-s0:c0.c1023 key=(null) >type=NETFILTER_CFG msg=audit(1414327872.773:6194): table=filter family=2 entries=43 >type=SYSCALL msg=audit(1414327872.773:6194): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=f05df0 items=0 ppid=10225 pid=10328 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0-s0:c0.c1023 key=(null) >type=NETFILTER_CFG msg=audit(1414327872.775:6195): table=filter family=2 entries=44 >type=SYSCALL msg=audit(1414327872.775:6195): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=1da2f60 items=0 ppid=10225 pid=10329 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0-s0:c0.c1023 key=(null) >type=NETFILTER_CFG msg=audit(1414327872.778:6196): table=filter family=2 entries=45 >type=SYSCALL msg=audit(1414327872.778:6196): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=97ebf0 items=0 ppid=10225 pid=10330 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0-s0:c0.c1023 key=(null) >type=NETFILTER_CFG msg=audit(1414327872.781:6197): table=filter family=2 entries=46 >type=SYSCALL msg=audit(1414327872.781:6197): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=d1ed60 items=0 ppid=10225 pid=10331 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0-s0:c0.c1023 key=(null) >type=NETFILTER_CFG msg=audit(1414327872.784:6198): table=filter family=2 entries=47 >type=SYSCALL msg=audit(1414327872.784:6198): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=2524dc0 items=0 ppid=10225 pid=10332 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0-s0:c0.c1023 key=(null) >type=NETFILTER_CFG msg=audit(1414327872.787:6199): table=nat family=2 entries=23 >type=SYSCALL msg=audit(1414327872.787:6199): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=ef3790 items=0 ppid=10225 pid=10333 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0-s0:c0.c1023 key=(null) >type=NETFILTER_CFG msg=audit(1414327872.793:6200): table=nat family=2 entries=24 >type=SYSCALL msg=audit(1414327872.793:6200): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=2211c60 items=0 ppid=10225 pid=10336 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0-s0:c0.c1023 key=(null) >type=NETFILTER_CFG msg=audit(1414327872.796:6201): table=nat family=2 entries=25 >type=SYSCALL msg=audit(1414327872.796:6201): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=2162df0 items=0 ppid=10225 pid=10337 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0-s0:c0.c1023 key=(null) >type=CRYPTO_KEY_USER msg=audit(1414327875.583:6202): pid=10349 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=10349 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327875.583:6203): pid=10349 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=10349 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414327875.584:6204): pid=10348 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=10349 suid=74 rport=59878 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414327875.584:6205): pid=10348 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=10349 suid=74 rport=59878 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327876.120:6206): pid=10348 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=59878 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327876.121:6207): pid=10348 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=e7:e2:3d:94:48:cf:f5:8c:5e:54:98:bd:89:a5:29:a9 rport=59878 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_ACCT msg=audit(1414327876.125:6208): pid=10348 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327876.125:6209): pid=10348 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=10349 suid=74 rport=59878 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327876.127:6210): pid=10348 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1414327876.127:6211): pid=10348 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=LOGIN msg=audit(1414327876.127:6212): pid=10348 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=236 res=1 >type=USER_ROLE_CHANGE msg=audit(1414327876.207:6213): pid=10348 uid=0 auid=0 ses=236 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_START msg=audit(1414327876.223:6214): pid=10348 uid=0 auid=0 ses=236 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1414327876.227:6215): pid=10348 uid=0 auid=0 ses=236 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_START msg=audit(1414327876.227:6216): pid=10348 uid=0 auid=0 ses=236 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327876.229:6217): pid=10353 uid=0 auid=0 ses=236 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=10353 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327876.229:6218): pid=10353 uid=0 auid=0 ses=236 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=10353 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRED_REFR msg=audit(1414327876.230:6219): pid=10353 uid=0 auid=0 ses=236 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_END msg=audit(1414327876.246:6220): pid=10348 uid=0 auid=0 ses=236 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRED_DISP msg=audit(1414327876.246:6221): pid=10348 uid=0 auid=0 ses=236 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_END msg=audit(1414327876.246:6222): pid=10348 uid=0 auid=0 ses=236 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1414327876.246:6223): pid=10348 uid=0 auid=0 ses=236 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327876.246:6224): pid=10348 uid=0 auid=0 ses=236 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=10348 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327876.247:6225): pid=10348 uid=0 auid=0 ses=236 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=10348 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327876.247:6226): pid=10348 uid=0 auid=0 ses=236 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=10348 suid=0 rport=59878 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=SERVICE_START msg=audit(1414327878.992:6227): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="openstack-nova-novncproxy" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327879.282:6228): pid=10453 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=10453 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327879.282:6229): pid=10453 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=10453 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414327879.286:6230): pid=10452 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=10453 suid=74 rport=59881 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414327879.286:6231): pid=10452 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=10453 suid=74 rport=59881 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327879.824:6232): pid=10452 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=59881 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327879.824:6233): pid=10452 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=e7:e2:3d:94:48:cf:f5:8c:5e:54:98:bd:89:a5:29:a9 rport=59881 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_ACCT msg=audit(1414327879.829:6234): pid=10452 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327879.829:6235): pid=10452 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=10453 suid=74 rport=59881 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327879.830:6236): pid=10452 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1414327879.830:6237): pid=10452 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=LOGIN msg=audit(1414327879.830:6238): pid=10452 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=237 res=1 >type=SERVICE_START msg=audit(1414327879.843:6239): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="openstack-nova-consoleauth" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=USER_ROLE_CHANGE msg=audit(1414327879.912:6240): pid=10452 uid=0 auid=0 ses=237 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=SERVICE_START msg=audit(1414327880.662:6241): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="openstack-nova-scheduler" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1414327880.686:6242): pid=10452 uid=0 auid=0 ses=237 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1414327880.690:6243): pid=10452 uid=0 auid=0 ses=237 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_START msg=audit(1414327880.690:6244): pid=10452 uid=0 auid=0 ses=237 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327880.691:6245): pid=10501 uid=0 auid=0 ses=237 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=10501 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327880.691:6246): pid=10501 uid=0 auid=0 ses=237 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=10501 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRED_REFR msg=audit(1414327880.692:6247): pid=10501 uid=0 auid=0 ses=237 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_END msg=audit(1414327880.714:6248): pid=10452 uid=0 auid=0 ses=237 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRED_DISP msg=audit(1414327880.714:6249): pid=10452 uid=0 auid=0 ses=237 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_END msg=audit(1414327880.714:6250): pid=10452 uid=0 auid=0 ses=237 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1414327880.714:6251): pid=10452 uid=0 auid=0 ses=237 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327880.715:6252): pid=10452 uid=0 auid=0 ses=237 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=10452 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327880.715:6253): pid=10452 uid=0 auid=0 ses=237 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=10452 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327880.715:6254): pid=10452 uid=0 auid=0 ses=237 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=10452 suid=0 rport=59881 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=SERVICE_START msg=audit(1414327881.498:6255): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="openstack-nova-conductor" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1414327882.817:6256): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="openstack-nova-compute" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327883.742:6257): pid=10627 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=10627 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327883.743:6258): pid=10627 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=10627 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414327883.744:6259): pid=10626 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=10627 suid=74 rport=59901 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414327883.744:6260): pid=10626 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=10627 suid=74 rport=59901 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327884.282:6261): pid=10626 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=59901 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327884.282:6262): pid=10626 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=e7:e2:3d:94:48:cf:f5:8c:5e:54:98:bd:89:a5:29:a9 rport=59901 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_ACCT msg=audit(1414327884.286:6263): pid=10626 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327884.286:6264): pid=10626 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=10627 suid=74 rport=59901 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327884.287:6265): pid=10626 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1414327884.288:6266): pid=10626 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=LOGIN msg=audit(1414327884.288:6267): pid=10626 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=238 res=1 >type=USER_ROLE_CHANGE msg=audit(1414327884.366:6268): pid=10626 uid=0 auid=0 ses=238 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_START msg=audit(1414327884.423:6269): pid=10626 uid=0 auid=0 ses=238 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1414327884.427:6270): pid=10626 uid=0 auid=0 ses=238 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_START msg=audit(1414327884.428:6271): pid=10626 uid=0 auid=0 ses=238 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327884.431:6272): pid=10629 uid=0 auid=0 ses=238 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=10629 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327884.431:6273): pid=10629 uid=0 auid=0 ses=238 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=10629 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRED_REFR msg=audit(1414327884.432:6274): pid=10629 uid=0 auid=0 ses=238 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_END msg=audit(1414327884.446:6275): pid=10626 uid=0 auid=0 ses=238 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRED_DISP msg=audit(1414327884.446:6276): pid=10626 uid=0 auid=0 ses=238 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_END msg=audit(1414327884.447:6277): pid=10626 uid=0 auid=0 ses=238 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1414327884.447:6278): pid=10626 uid=0 auid=0 ses=238 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327884.447:6279): pid=10626 uid=0 auid=0 ses=238 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=10626 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327884.447:6280): pid=10626 uid=0 auid=0 ses=238 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=10626 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327884.447:6281): pid=10626 uid=0 auid=0 ses=238 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=10626 suid=0 rport=59901 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327887.471:6282): pid=10641 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=10641 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327887.472:6283): pid=10641 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=10641 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414327887.473:6284): pid=10640 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=10641 suid=74 rport=59905 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414327887.473:6285): pid=10640 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=10641 suid=74 rport=59905 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327888.011:6286): pid=10640 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=59905 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327888.011:6287): pid=10640 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=e7:e2:3d:94:48:cf:f5:8c:5e:54:98:bd:89:a5:29:a9 rport=59905 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_ACCT msg=audit(1414327888.016:6288): pid=10640 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327888.016:6289): pid=10640 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=10641 suid=74 rport=59905 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327888.017:6290): pid=10640 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1414327888.017:6291): pid=10640 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=LOGIN msg=audit(1414327888.017:6292): pid=10640 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=239 res=1 >type=USER_ROLE_CHANGE msg=audit(1414327888.090:6293): pid=10640 uid=0 auid=0 ses=239 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_START msg=audit(1414327888.109:6294): pid=10640 uid=0 auid=0 ses=239 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1414327888.112:6295): pid=10640 uid=0 auid=0 ses=239 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_START msg=audit(1414327888.113:6296): pid=10640 uid=0 auid=0 ses=239 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327888.114:6297): pid=10643 uid=0 auid=0 ses=239 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=10643 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327888.114:6298): pid=10643 uid=0 auid=0 ses=239 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=10643 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRED_REFR msg=audit(1414327888.115:6299): pid=10643 uid=0 auid=0 ses=239 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_END msg=audit(1414327888.137:6300): pid=10640 uid=0 auid=0 ses=239 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRED_DISP msg=audit(1414327888.137:6301): pid=10640 uid=0 auid=0 ses=239 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_END msg=audit(1414327888.137:6302): pid=10640 uid=0 auid=0 ses=239 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1414327888.138:6303): pid=10640 uid=0 auid=0 ses=239 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327888.138:6304): pid=10640 uid=0 auid=0 ses=239 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=10640 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327888.138:6305): pid=10640 uid=0 auid=0 ses=239 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=10640 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327888.138:6306): pid=10640 uid=0 auid=0 ses=239 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=10640 suid=0 rport=59905 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=SERVICE_START msg=audit(1414327889.248:6307): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="openstack-nova-cert" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327891.162:6308): pid=10703 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=10703 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327891.162:6309): pid=10703 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=10703 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414327891.163:6310): pid=10702 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=10703 suid=74 rport=59908 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414327891.163:6311): pid=10702 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=10703 suid=74 rport=59908 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327891.705:6312): pid=10702 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=59908 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327891.705:6313): pid=10702 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=e7:e2:3d:94:48:cf:f5:8c:5e:54:98:bd:89:a5:29:a9 rport=59908 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_ACCT msg=audit(1414327891.709:6314): pid=10702 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327891.710:6315): pid=10702 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=10703 suid=74 rport=59908 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327891.711:6316): pid=10702 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1414327891.712:6317): pid=10702 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=LOGIN msg=audit(1414327891.712:6318): pid=10702 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=240 res=1 >type=USER_ROLE_CHANGE msg=audit(1414327891.790:6319): pid=10702 uid=0 auid=0 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_START msg=audit(1414327891.842:6320): pid=10702 uid=0 auid=0 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1414327891.846:6321): pid=10702 uid=0 auid=0 ses=240 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_START msg=audit(1414327891.846:6322): pid=10702 uid=0 auid=0 ses=240 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327891.848:6323): pid=10705 uid=0 auid=0 ses=240 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=10705 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327891.848:6324): pid=10705 uid=0 auid=0 ses=240 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=10705 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRED_REFR msg=audit(1414327891.849:6325): pid=10705 uid=0 auid=0 ses=240 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_END msg=audit(1414327891.866:6326): pid=10702 uid=0 auid=0 ses=240 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRED_DISP msg=audit(1414327891.866:6327): pid=10702 uid=0 auid=0 ses=240 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_END msg=audit(1414327891.867:6328): pid=10702 uid=0 auid=0 ses=240 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1414327891.867:6329): pid=10702 uid=0 auid=0 ses=240 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327891.867:6330): pid=10702 uid=0 auid=0 ses=240 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=10702 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327891.867:6331): pid=10702 uid=0 auid=0 ses=240 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=10702 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327891.867:6332): pid=10702 uid=0 auid=0 ses=240 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=10702 suid=0 rport=59908 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327891.886:6333): pid=10709 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=10709 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327891.886:6334): pid=10709 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=10709 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414327891.888:6335): pid=10708 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=10709 suid=74 rport=59909 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414327891.888:6336): pid=10708 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=10709 suid=74 rport=59909 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327892.425:6337): pid=10708 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=59909 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327892.425:6338): pid=10708 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=e7:e2:3d:94:48:cf:f5:8c:5e:54:98:bd:89:a5:29:a9 rport=59909 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_ACCT msg=audit(1414327892.430:6339): pid=10708 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327892.431:6340): pid=10708 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=10709 suid=74 rport=59909 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327892.432:6341): pid=10708 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1414327892.432:6342): pid=10708 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=LOGIN msg=audit(1414327892.432:6343): pid=10708 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=241 res=1 >type=USER_ROLE_CHANGE msg=audit(1414327892.502:6344): pid=10708 uid=0 auid=0 ses=241 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_START msg=audit(1414327892.522:6345): pid=10708 uid=0 auid=0 ses=241 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1414327892.526:6346): pid=10708 uid=0 auid=0 ses=241 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_START msg=audit(1414327892.526:6347): pid=10708 uid=0 auid=0 ses=241 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327892.528:6348): pid=10713 uid=0 auid=0 ses=241 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=10713 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327892.528:6349): pid=10713 uid=0 auid=0 ses=241 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=10713 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRED_REFR msg=audit(1414327892.528:6350): pid=10713 uid=0 auid=0 ses=241 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_END msg=audit(1414327892.554:6351): pid=10708 uid=0 auid=0 ses=241 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRED_DISP msg=audit(1414327892.554:6352): pid=10708 uid=0 auid=0 ses=241 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_END msg=audit(1414327892.554:6353): pid=10708 uid=0 auid=0 ses=241 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1414327892.555:6354): pid=10708 uid=0 auid=0 ses=241 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327892.555:6355): pid=10708 uid=0 auid=0 ses=241 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=10708 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327892.555:6356): pid=10708 uid=0 auid=0 ses=241 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=10708 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327892.555:6357): pid=10708 uid=0 auid=0 ses=241 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=10708 suid=0 rport=59909 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327892.567:6358): pid=10724 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=10724 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327892.567:6359): pid=10724 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=10724 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414327892.568:6360): pid=10723 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=10724 suid=74 rport=59910 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414327892.568:6361): pid=10723 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=10724 suid=74 rport=59910 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327893.107:6362): pid=10723 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=59910 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327893.107:6363): pid=10723 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=e7:e2:3d:94:48:cf:f5:8c:5e:54:98:bd:89:a5:29:a9 rport=59910 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_ACCT msg=audit(1414327893.112:6364): pid=10723 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327893.112:6365): pid=10723 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=10724 suid=74 rport=59910 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327893.113:6366): pid=10723 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1414327893.114:6367): pid=10723 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=LOGIN msg=audit(1414327893.114:6368): pid=10723 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=242 res=1 >type=USER_ROLE_CHANGE msg=audit(1414327893.185:6369): pid=10723 uid=0 auid=0 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_START msg=audit(1414327893.200:6370): pid=10723 uid=0 auid=0 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1414327893.204:6371): pid=10723 uid=0 auid=0 ses=242 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_START msg=audit(1414327893.204:6372): pid=10723 uid=0 auid=0 ses=242 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327893.206:6373): pid=10732 uid=0 auid=0 ses=242 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=10732 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327893.206:6374): pid=10732 uid=0 auid=0 ses=242 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=10732 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRED_REFR msg=audit(1414327893.207:6375): pid=10732 uid=0 auid=0 ses=242 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_END msg=audit(1414327893.223:6376): pid=10723 uid=0 auid=0 ses=242 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRED_DISP msg=audit(1414327893.223:6377): pid=10723 uid=0 auid=0 ses=242 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_END msg=audit(1414327893.224:6378): pid=10723 uid=0 auid=0 ses=242 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1414327893.224:6379): pid=10723 uid=0 auid=0 ses=242 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327893.224:6380): pid=10723 uid=0 auid=0 ses=242 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=10723 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327893.224:6381): pid=10723 uid=0 auid=0 ses=242 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=10723 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327893.224:6382): pid=10723 uid=0 auid=0 ses=242 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=10723 suid=0 rport=59910 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327896.242:6383): pid=10892 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=10892 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327896.243:6384): pid=10892 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=10892 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414327896.244:6385): pid=10891 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=10892 suid=74 rport=59917 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414327896.244:6386): pid=10891 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=10892 suid=74 rport=59917 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=NETFILTER_CFG msg=audit(1414327896.283:6387): table=filter family=2 entries=0 >type=NETFILTER_CFG msg=audit(1414327896.283:6387): table=nat family=2 entries=0 >type=NETFILTER_CFG msg=audit(1414327896.283:6387): table=mangle family=2 entries=0 >type=NETFILTER_CFG msg=audit(1414327896.283:6387): table=filter family=10 entries=0 >type=SYSCALL msg=audit(1414327896.283:6387): arch=c000003e syscall=272 success=yes exit=0 a0=40000000 a1=c0 a2=0 a3=7fff4d7749d0 items=0 ppid=10887 pid=10899 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=241 comm="ip" exe="/usr/sbin/ip" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null) >type=NETFILTER_CFG msg=audit(1414327896.356:6388): table=filter family=2 entries=0 >type=NETFILTER_CFG msg=audit(1414327896.356:6388): table=nat family=2 entries=0 >type=NETFILTER_CFG msg=audit(1414327896.356:6388): table=mangle family=2 entries=0 >type=NETFILTER_CFG msg=audit(1414327896.356:6388): table=filter family=10 entries=0 >type=SYSCALL msg=audit(1414327896.356:6388): arch=c000003e syscall=272 success=yes exit=0 a0=40000000 a1=c0 a2=0 a3=7fffa0031b50 items=0 ppid=10887 pid=10906 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=241 comm="ip" exe="/usr/sbin/ip" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null) >type=NETFILTER_CFG msg=audit(1414327896.700:6389): table=filter family=2 entries=0 >type=NETFILTER_CFG msg=audit(1414327896.700:6389): table=nat family=2 entries=0 >type=NETFILTER_CFG msg=audit(1414327896.700:6389): table=mangle family=2 entries=0 >type=NETFILTER_CFG msg=audit(1414327896.700:6389): table=filter family=10 entries=0 >type=SYSCALL msg=audit(1414327896.700:6389): arch=c000003e syscall=272 success=yes exit=0 a0=40000000 a1=c0 a2=0 a3=7fffa0417aa0 items=0 ppid=10887 pid=10908 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=241 comm="ip" exe="/usr/sbin/ip" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null) >type=USER_AUTH msg=audit(1414327896.790:6390): pid=10891 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=59917 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327896.790:6391): pid=10891 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=e7:e2:3d:94:48:cf:f5:8c:5e:54:98:bd:89:a5:29:a9 rport=59917 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_ACCT msg=audit(1414327896.795:6392): pid=10891 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327896.796:6393): pid=10891 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=10892 suid=74 rport=59917 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327896.797:6394): pid=10891 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1414327896.797:6395): pid=10891 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=LOGIN msg=audit(1414327896.797:6396): pid=10891 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=243 res=1 >type=USER_ROLE_CHANGE msg=audit(1414327896.871:6397): pid=10891 uid=0 auid=0 ses=243 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_START msg=audit(1414327896.887:6398): pid=10891 uid=0 auid=0 ses=243 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1414327896.890:6399): pid=10891 uid=0 auid=0 ses=243 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_START msg=audit(1414327896.890:6400): pid=10891 uid=0 auid=0 ses=243 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327896.892:6401): pid=10916 uid=0 auid=0 ses=243 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=10916 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327896.892:6402): pid=10916 uid=0 auid=0 ses=243 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=10916 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRED_REFR msg=audit(1414327896.893:6403): pid=10916 uid=0 auid=0 ses=243 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_END msg=audit(1414327896.906:6404): pid=10891 uid=0 auid=0 ses=243 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRED_DISP msg=audit(1414327896.906:6405): pid=10891 uid=0 auid=0 ses=243 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_END msg=audit(1414327896.907:6406): pid=10891 uid=0 auid=0 ses=243 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1414327896.907:6407): pid=10891 uid=0 auid=0 ses=243 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327896.907:6408): pid=10891 uid=0 auid=0 ses=243 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=10891 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327896.907:6409): pid=10891 uid=0 auid=0 ses=243 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=10891 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327896.907:6410): pid=10891 uid=0 auid=0 ses=243 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=10891 suid=0 rport=59917 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327899.933:6411): pid=10950 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=10950 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327899.933:6412): pid=10950 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=10950 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414327899.934:6413): pid=10949 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=10950 suid=74 rport=59918 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414327899.935:6414): pid=10949 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=10950 suid=74 rport=59918 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327900.482:6415): pid=10949 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=59918 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327900.482:6416): pid=10949 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=e7:e2:3d:94:48:cf:f5:8c:5e:54:98:bd:89:a5:29:a9 rport=59918 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_ACCT msg=audit(1414327900.487:6417): pid=10949 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327900.488:6418): pid=10949 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=10950 suid=74 rport=59918 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327900.489:6419): pid=10949 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1414327900.489:6420): pid=10949 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=LOGIN msg=audit(1414327900.489:6421): pid=10949 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=244 res=1 >type=USER_ROLE_CHANGE msg=audit(1414327900.590:6422): pid=10949 uid=0 auid=0 ses=244 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_START msg=audit(1414327900.608:6423): pid=10949 uid=0 auid=0 ses=244 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1414327900.612:6424): pid=10949 uid=0 auid=0 ses=244 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_START msg=audit(1414327900.613:6425): pid=10949 uid=0 auid=0 ses=244 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327900.614:6426): pid=10952 uid=0 auid=0 ses=244 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=10952 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327900.614:6427): pid=10952 uid=0 auid=0 ses=244 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=10952 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRED_REFR msg=audit(1414327900.616:6428): pid=10952 uid=0 auid=0 ses=244 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_END msg=audit(1414327900.639:6429): pid=10949 uid=0 auid=0 ses=244 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRED_DISP msg=audit(1414327900.640:6430): pid=10949 uid=0 auid=0 ses=244 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_END msg=audit(1414327900.640:6431): pid=10949 uid=0 auid=0 ses=244 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1414327900.640:6432): pid=10949 uid=0 auid=0 ses=244 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327900.640:6433): pid=10949 uid=0 auid=0 ses=244 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=10949 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327900.640:6434): pid=10949 uid=0 auid=0 ses=244 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=10949 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327900.641:6435): pid=10949 uid=0 auid=0 ses=244 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=10949 suid=0 rport=59918 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=NETFILTER_CFG msg=audit(1414327901.443:6436): table=filter family=2 entries=48 >type=SYSCALL msg=audit(1414327901.443:6436): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=1f2ab20 items=0 ppid=10718 pid=10963 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=241 comm="iptables" exe="/usr/sbin/xtables-multi" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null) >type=CRYPTO_KEY_USER msg=audit(1414327903.661:6437): pid=11010 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=11010 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327903.661:6438): pid=11010 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=11010 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414327903.663:6439): pid=11009 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=11010 suid=74 rport=59919 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414327903.663:6440): pid=11009 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=11010 suid=74 rport=59919 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_CMD msg=audit(1414327904.030:6441): pid=11011 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D4320766773202D2D6E6F68656164696E6773202D2D756E69743D67202D6F206E616D652C73697A652C667265652C6C765F636F756E742C75756964202D2D736570617261746F72203A202D2D6E6F7375666669782063696E6465722D766F6C756D6573 terminal=? res=success' >type=CRED_ACQ msg=audit(1414327904.030:6442): pid=11011 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1414327904.032:6443): pid=11011 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1414327904.104:6444): pid=11011 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1414327904.105:6445): pid=11011 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_AUTH msg=audit(1414327904.216:6446): pid=11009 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=59919 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327904.216:6447): pid=11009 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=e7:e2:3d:94:48:cf:f5:8c:5e:54:98:bd:89:a5:29:a9 rport=59919 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_ACCT msg=audit(1414327904.220:6448): pid=11009 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327904.221:6449): pid=11009 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=11010 suid=74 rport=59919 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327904.222:6450): pid=11009 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1414327904.222:6451): pid=11009 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=LOGIN msg=audit(1414327904.222:6452): pid=11009 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=245 res=1 >type=USER_ROLE_CHANGE msg=audit(1414327904.297:6453): pid=11009 uid=0 auid=0 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_START msg=audit(1414327904.323:6454): pid=11009 uid=0 auid=0 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1414327904.328:6455): pid=11009 uid=0 auid=0 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_START msg=audit(1414327904.328:6456): pid=11009 uid=0 auid=0 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327904.330:6457): pid=11015 uid=0 auid=0 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=11015 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327904.330:6458): pid=11015 uid=0 auid=0 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=11015 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRED_REFR msg=audit(1414327904.331:6459): pid=11015 uid=0 auid=0 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_END msg=audit(1414327904.352:6460): pid=11009 uid=0 auid=0 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRED_DISP msg=audit(1414327904.352:6461): pid=11009 uid=0 auid=0 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_END msg=audit(1414327904.352:6462): pid=11009 uid=0 auid=0 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1414327904.352:6463): pid=11009 uid=0 auid=0 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327904.352:6464): pid=11009 uid=0 auid=0 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=11009 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327904.352:6465): pid=11009 uid=0 auid=0 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=11009 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327904.353:6466): pid=11009 uid=0 auid=0 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=11009 suid=0 rport=59919 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327907.375:6467): pid=11032 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=11032 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327907.375:6468): pid=11032 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=11032 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414327907.376:6469): pid=11031 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=11032 suid=74 rport=59927 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414327907.376:6470): pid=11031 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=11032 suid=74 rport=59927 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327907.912:6471): pid=11031 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=59927 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327907.912:6472): pid=11031 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=e7:e2:3d:94:48:cf:f5:8c:5e:54:98:bd:89:a5:29:a9 rport=59927 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_ACCT msg=audit(1414327907.917:6473): pid=11031 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327907.917:6474): pid=11031 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=11032 suid=74 rport=59927 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327907.918:6475): pid=11031 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1414327907.918:6476): pid=11031 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=LOGIN msg=audit(1414327907.919:6477): pid=11031 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=246 res=1 >type=USER_ROLE_CHANGE msg=audit(1414327907.994:6478): pid=11031 uid=0 auid=0 ses=246 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_START msg=audit(1414327908.011:6479): pid=11031 uid=0 auid=0 ses=246 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1414327908.016:6480): pid=11031 uid=0 auid=0 ses=246 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_START msg=audit(1414327908.016:6481): pid=11031 uid=0 auid=0 ses=246 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327908.018:6482): pid=11034 uid=0 auid=0 ses=246 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=11034 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327908.018:6483): pid=11034 uid=0 auid=0 ses=246 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=11034 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRED_REFR msg=audit(1414327908.019:6484): pid=11034 uid=0 auid=0 ses=246 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_END msg=audit(1414327908.038:6485): pid=11031 uid=0 auid=0 ses=246 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRED_DISP msg=audit(1414327908.038:6486): pid=11031 uid=0 auid=0 ses=246 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_END msg=audit(1414327908.039:6487): pid=11031 uid=0 auid=0 ses=246 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1414327908.039:6488): pid=11031 uid=0 auid=0 ses=246 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327908.039:6489): pid=11031 uid=0 auid=0 ses=246 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=11031 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327908.039:6490): pid=11031 uid=0 auid=0 ses=246 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=11031 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327908.039:6491): pid=11031 uid=0 auid=0 ses=246 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=11031 suid=0 rport=59927 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327911.058:6492): pid=11040 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=11040 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327911.059:6493): pid=11040 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=11040 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414327911.062:6494): pid=11039 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=11040 suid=74 rport=59930 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414327911.062:6495): pid=11039 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=11040 suid=74 rport=59930 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327911.603:6496): pid=11039 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=59930 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327911.603:6497): pid=11039 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=e7:e2:3d:94:48:cf:f5:8c:5e:54:98:bd:89:a5:29:a9 rport=59930 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_ACCT msg=audit(1414327911.608:6498): pid=11039 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327911.608:6499): pid=11039 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=11040 suid=74 rport=59930 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327911.609:6500): pid=11039 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1414327911.609:6501): pid=11039 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=LOGIN msg=audit(1414327911.609:6502): pid=11039 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=247 res=1 >type=USER_ROLE_CHANGE msg=audit(1414327911.682:6503): pid=11039 uid=0 auid=0 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_START msg=audit(1414327911.701:6504): pid=11039 uid=0 auid=0 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1414327911.705:6505): pid=11039 uid=0 auid=0 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_START msg=audit(1414327911.705:6506): pid=11039 uid=0 auid=0 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327911.707:6507): pid=11042 uid=0 auid=0 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=11042 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327911.707:6508): pid=11042 uid=0 auid=0 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=11042 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRED_REFR msg=audit(1414327911.708:6509): pid=11042 uid=0 auid=0 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_END msg=audit(1414327911.725:6510): pid=11039 uid=0 auid=0 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRED_DISP msg=audit(1414327911.725:6511): pid=11039 uid=0 auid=0 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_END msg=audit(1414327911.726:6512): pid=11039 uid=0 auid=0 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1414327911.726:6513): pid=11039 uid=0 auid=0 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327911.726:6514): pid=11039 uid=0 auid=0 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=11039 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327911.726:6515): pid=11039 uid=0 auid=0 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=11039 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327911.727:6516): pid=11039 uid=0 auid=0 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=11039 suid=0 rport=59930 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327914.752:6517): pid=11050 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=11050 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327914.753:6518): pid=11050 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=11050 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414327914.755:6519): pid=11049 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=11050 suid=74 rport=59931 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414327914.756:6520): pid=11049 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=11050 suid=74 rport=59931 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=ADD_GROUP msg=audit(1414327915.201:6521): pid=11054 uid=0 auid=0 ses=241 subj=unconfined_u:system_r:groupadd_t:s0-s0:c0.c1023 msg='op=adding group to /etc/group id=992 exe="/usr/sbin/groupadd" hostname=? addr=? terminal=? res=success' >type=ADD_GROUP msg=audit(1414327915.203:6522): pid=11054 uid=0 auid=0 ses=241 subj=unconfined_u:system_r:groupadd_t:s0-s0:c0.c1023 msg='op=adding group to /etc/gshadow id=992 exe="/usr/sbin/groupadd" hostname=? addr=? terminal=? res=success' >type=ADD_GROUP msg=audit(1414327915.204:6523): pid=11054 uid=0 auid=0 ses=241 subj=unconfined_u:system_r:groupadd_t:s0-s0:c0.c1023 msg='op= id=992 exe="/usr/sbin/groupadd" hostname=? addr=? terminal=? res=success' >type=ADD_USER msg=audit(1414327915.226:6524): pid=11059 uid=0 auid=0 ses=241 subj=unconfined_u:system_r:useradd_t:s0-s0:c0.c1023 msg='op=adding user id=993 exe="/usr/sbin/useradd" hostname=? addr=? terminal=? res=success' >type=USER_AUTH msg=audit(1414327915.303:6525): pid=11049 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=59931 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327915.303:6526): pid=11049 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=e7:e2:3d:94:48:cf:f5:8c:5e:54:98:bd:89:a5:29:a9 rport=59931 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_ACCT msg=audit(1414327915.308:6527): pid=11049 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327915.309:6528): pid=11049 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=11050 suid=74 rport=59931 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327915.310:6529): pid=11049 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1414327915.310:6530): pid=11049 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=LOGIN msg=audit(1414327915.310:6531): pid=11049 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=248 res=1 >type=USER_ROLE_CHANGE msg=audit(1414327915.388:6532): pid=11049 uid=0 auid=0 ses=248 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_START msg=audit(1414327915.565:6533): pid=11049 uid=0 auid=0 ses=248 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1414327915.572:6534): pid=11049 uid=0 auid=0 ses=248 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_START msg=audit(1414327915.572:6535): pid=11049 uid=0 auid=0 ses=248 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327915.574:6536): pid=11097 uid=0 auid=0 ses=248 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=11097 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327915.574:6537): pid=11097 uid=0 auid=0 ses=248 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=11097 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRED_REFR msg=audit(1414327915.575:6538): pid=11097 uid=0 auid=0 ses=248 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_END msg=audit(1414327915.631:6539): pid=11049 uid=0 auid=0 ses=248 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRED_DISP msg=audit(1414327915.631:6540): pid=11049 uid=0 auid=0 ses=248 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_END msg=audit(1414327915.632:6541): pid=11049 uid=0 auid=0 ses=248 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1414327915.632:6542): pid=11049 uid=0 auid=0 ses=248 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327915.632:6543): pid=11049 uid=0 auid=0 ses=248 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=11049 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327915.632:6544): pid=11049 uid=0 auid=0 ses=248 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=11049 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327915.632:6545): pid=11049 uid=0 auid=0 ses=248 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=11049 suid=0 rport=59931 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=NETFILTER_CFG msg=audit(1414327916.139:6546): table=filter family=2 entries=49 >type=SYSCALL msg=audit(1414327916.139:6546): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=827f70 items=0 ppid=10718 pid=11124 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=241 comm="iptables" exe="/usr/sbin/xtables-multi" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null) >type=NETFILTER_CFG msg=audit(1414327916.429:6547): table=filter family=2 entries=50 >type=SYSCALL msg=audit(1414327916.429:6547): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=19ed3d0 items=0 ppid=10718 pid=11157 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=241 comm="iptables" exe="/usr/sbin/xtables-multi" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null) >type=CRYPTO_KEY_USER msg=audit(1414327918.617:6548): pid=11197 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=11197 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327918.617:6549): pid=11197 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=11197 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414327918.619:6550): pid=11196 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=11197 suid=74 rport=59932 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414327918.619:6551): pid=11196 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=11197 suid=74 rport=59932 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327919.157:6552): pid=11196 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=59932 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327919.157:6553): pid=11196 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=e7:e2:3d:94:48:cf:f5:8c:5e:54:98:bd:89:a5:29:a9 rport=59932 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_ACCT msg=audit(1414327919.161:6554): pid=11196 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327919.162:6555): pid=11196 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=11197 suid=74 rport=59932 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327919.163:6556): pid=11196 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1414327919.163:6557): pid=11196 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=LOGIN msg=audit(1414327919.163:6558): pid=11196 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=249 res=1 >type=USER_ROLE_CHANGE msg=audit(1414327919.243:6559): pid=11196 uid=0 auid=0 ses=249 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_START msg=audit(1414327919.298:6560): pid=11196 uid=0 auid=0 ses=249 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1414327919.309:6561): pid=11196 uid=0 auid=0 ses=249 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_START msg=audit(1414327919.309:6562): pid=11196 uid=0 auid=0 ses=249 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327919.311:6563): pid=11199 uid=0 auid=0 ses=249 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=11199 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327919.311:6564): pid=11199 uid=0 auid=0 ses=249 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=11199 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRED_REFR msg=audit(1414327919.312:6565): pid=11199 uid=0 auid=0 ses=249 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_END msg=audit(1414327919.327:6566): pid=11196 uid=0 auid=0 ses=249 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRED_DISP msg=audit(1414327919.328:6567): pid=11196 uid=0 auid=0 ses=249 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_END msg=audit(1414327919.328:6568): pid=11196 uid=0 auid=0 ses=249 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1414327919.328:6569): pid=11196 uid=0 auid=0 ses=249 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327919.328:6570): pid=11196 uid=0 auid=0 ses=249 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=11196 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327919.329:6571): pid=11196 uid=0 auid=0 ses=249 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=11196 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327919.329:6572): pid=11196 uid=0 auid=0 ses=249 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=11196 suid=0 rport=59932 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_ACCT msg=audit(1414327921.305:6573): pid=11204 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="keystone" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1414327921.305:6574): pid=11204 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="keystone" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1414327921.306:6575): pid=11204 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=163 old-ses=4294967295 ses=250 res=1 >type=USER_START msg=audit(1414327921.318:6576): pid=11204 uid=0 auid=163 ses=250 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="keystone" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1414327921.318:6577): pid=11204 uid=0 auid=163 ses=250 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="keystone" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1414327921.923:6578): pid=11204 uid=0 auid=163 ses=250 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="keystone" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1414327921.926:6579): pid=11204 uid=0 auid=163 ses=250 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="keystone" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRYPTO_KEY_USER msg=audit(1414327922.360:6580): pid=11224 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=11224 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327922.360:6581): pid=11224 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=11224 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414327922.362:6582): pid=11223 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=11224 suid=74 rport=59936 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414327922.362:6583): pid=11223 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=11224 suid=74 rport=59936 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327922.903:6584): pid=11223 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=59936 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327922.903:6585): pid=11223 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=e7:e2:3d:94:48:cf:f5:8c:5e:54:98:bd:89:a5:29:a9 rport=59936 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_ACCT msg=audit(1414327922.908:6586): pid=11223 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327922.908:6587): pid=11223 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=11224 suid=74 rport=59936 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327922.909:6588): pid=11223 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1414327922.909:6589): pid=11223 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=LOGIN msg=audit(1414327922.909:6590): pid=11223 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=251 res=1 >type=USER_ROLE_CHANGE msg=audit(1414327922.985:6591): pid=11223 uid=0 auid=0 ses=251 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_START msg=audit(1414327923.006:6592): pid=11223 uid=0 auid=0 ses=251 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1414327923.011:6593): pid=11223 uid=0 auid=0 ses=251 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_START msg=audit(1414327923.011:6594): pid=11223 uid=0 auid=0 ses=251 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327923.013:6595): pid=11226 uid=0 auid=0 ses=251 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=11226 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327923.013:6596): pid=11226 uid=0 auid=0 ses=251 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=11226 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRED_REFR msg=audit(1414327923.014:6597): pid=11226 uid=0 auid=0 ses=251 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_END msg=audit(1414327923.032:6598): pid=11223 uid=0 auid=0 ses=251 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRED_DISP msg=audit(1414327923.032:6599): pid=11223 uid=0 auid=0 ses=251 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_END msg=audit(1414327923.033:6600): pid=11223 uid=0 auid=0 ses=251 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1414327923.033:6601): pid=11223 uid=0 auid=0 ses=251 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327923.033:6602): pid=11223 uid=0 auid=0 ses=251 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=11223 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327923.033:6603): pid=11223 uid=0 auid=0 ses=251 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=11223 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327923.033:6604): pid=11223 uid=0 auid=0 ses=251 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=11223 suid=0 rport=59936 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=SERVICE_START msg=audit(1414327925.841:6605): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="openvswitch-nonetwork" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1414327925.845:6606): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="openvswitch" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327926.055:6607): pid=11313 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=11313 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327926.055:6608): pid=11313 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=11313 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414327926.056:6609): pid=11312 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=11313 suid=74 rport=59937 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414327926.057:6610): pid=11312 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=11313 suid=74 rport=59937 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=ANOM_PROMISCUOUS msg=audit(1414327926.149:6611): dev=ovs-system prom=256 old_prom=0 auid=4294967295 uid=0 gid=0 ses=4294967295 >type=SYSCALL msg=audit(1414327926.149:6611): arch=c000003e syscall=46 success=yes exit=56 a0=10 a1=7fff806620c0 a2=0 a3=3 items=0 ppid=11281 pid=11282 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ovs-vswitchd" exe="/usr/sbin/ovs-vswitchd" subj=system_u:system_r:openvswitch_t:s0 key=(null) >type=ANOM_PROMISCUOUS msg=audit(1414327926.172:6612): dev=br-int prom=256 old_prom=0 auid=4294967295 uid=0 gid=0 ses=4294967295 >type=SYSCALL msg=audit(1414327926.172:6612): arch=c000003e syscall=46 success=yes exit=52 a0=10 a1=7fff806620f0 a2=0 a3=0 items=0 ppid=11281 pid=11282 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ovs-vswitchd" exe="/usr/sbin/ovs-vswitchd" subj=system_u:system_r:openvswitch_t:s0 key=(null) >type=USER_AUTH msg=audit(1414327926.598:6613): pid=11312 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=59937 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327926.598:6614): pid=11312 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=e7:e2:3d:94:48:cf:f5:8c:5e:54:98:bd:89:a5:29:a9 rport=59937 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_ACCT msg=audit(1414327926.603:6615): pid=11312 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327926.603:6616): pid=11312 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=11313 suid=74 rport=59937 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327926.604:6617): pid=11312 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1414327926.604:6618): pid=11312 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=LOGIN msg=audit(1414327926.604:6619): pid=11312 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=252 res=1 >type=USER_ROLE_CHANGE msg=audit(1414327926.685:6620): pid=11312 uid=0 auid=0 ses=252 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_START msg=audit(1414327926.742:6621): pid=11312 uid=0 auid=0 ses=252 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1414327926.746:6622): pid=11312 uid=0 auid=0 ses=252 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_START msg=audit(1414327926.747:6623): pid=11312 uid=0 auid=0 ses=252 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327926.748:6624): pid=11342 uid=0 auid=0 ses=252 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=11342 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327926.749:6625): pid=11342 uid=0 auid=0 ses=252 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=11342 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRED_REFR msg=audit(1414327926.749:6626): pid=11342 uid=0 auid=0 ses=252 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_END msg=audit(1414327926.770:6627): pid=11312 uid=0 auid=0 ses=252 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRED_DISP msg=audit(1414327926.770:6628): pid=11312 uid=0 auid=0 ses=252 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_END msg=audit(1414327926.771:6629): pid=11312 uid=0 auid=0 ses=252 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1414327926.771:6630): pid=11312 uid=0 auid=0 ses=252 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327926.771:6631): pid=11312 uid=0 auid=0 ses=252 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=11312 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327926.771:6632): pid=11312 uid=0 auid=0 ses=252 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=11312 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327926.771:6633): pid=11312 uid=0 auid=0 ses=252 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=11312 suid=0 rport=59937 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327929.784:6634): pid=11353 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=11353 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327929.784:6635): pid=11353 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=11353 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414327929.786:6636): pid=11352 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=11353 suid=74 rport=59938 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414327929.788:6637): pid=11352 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=11353 suid=74 rport=59938 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327930.328:6638): pid=11352 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=59938 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327930.328:6639): pid=11352 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=e7:e2:3d:94:48:cf:f5:8c:5e:54:98:bd:89:a5:29:a9 rport=59938 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_ACCT msg=audit(1414327930.332:6640): pid=11352 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327930.333:6641): pid=11352 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=11353 suid=74 rport=59938 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327930.334:6642): pid=11352 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1414327930.335:6643): pid=11352 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=LOGIN msg=audit(1414327930.335:6644): pid=11352 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=253 res=1 >type=USER_ROLE_CHANGE msg=audit(1414327930.411:6645): pid=11352 uid=0 auid=0 ses=253 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_START msg=audit(1414327930.428:6646): pid=11352 uid=0 auid=0 ses=253 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1414327930.432:6647): pid=11352 uid=0 auid=0 ses=253 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_START msg=audit(1414327930.432:6648): pid=11352 uid=0 auid=0 ses=253 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327930.434:6649): pid=11356 uid=0 auid=0 ses=253 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=11356 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327930.434:6650): pid=11356 uid=0 auid=0 ses=253 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=11356 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRED_REFR msg=audit(1414327930.435:6651): pid=11356 uid=0 auid=0 ses=253 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_END msg=audit(1414327930.449:6652): pid=11352 uid=0 auid=0 ses=253 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRED_DISP msg=audit(1414327930.449:6653): pid=11352 uid=0 auid=0 ses=253 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_END msg=audit(1414327930.450:6654): pid=11352 uid=0 auid=0 ses=253 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1414327930.450:6655): pid=11352 uid=0 auid=0 ses=253 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327930.450:6656): pid=11352 uid=0 auid=0 ses=253 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=11352 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327930.450:6657): pid=11352 uid=0 auid=0 ses=253 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=11352 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327930.450:6658): pid=11352 uid=0 auid=0 ses=253 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=11352 suid=0 rport=59938 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327933.479:6659): pid=11371 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=11371 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327933.479:6660): pid=11371 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=11371 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414327933.480:6661): pid=11370 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=11371 suid=74 rport=59944 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414327933.480:6662): pid=11370 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=11371 suid=74 rport=59944 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327934.028:6663): pid=11370 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=59944 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327934.028:6664): pid=11370 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=e7:e2:3d:94:48:cf:f5:8c:5e:54:98:bd:89:a5:29:a9 rport=59944 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_ACCT msg=audit(1414327934.034:6665): pid=11370 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327934.034:6666): pid=11370 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=11371 suid=74 rport=59944 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327934.035:6667): pid=11370 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1414327934.035:6668): pid=11370 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=LOGIN msg=audit(1414327934.035:6669): pid=11370 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=254 res=1 >type=USER_ROLE_CHANGE msg=audit(1414327934.115:6670): pid=11370 uid=0 auid=0 ses=254 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_START msg=audit(1414327934.131:6671): pid=11370 uid=0 auid=0 ses=254 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1414327934.136:6672): pid=11370 uid=0 auid=0 ses=254 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_START msg=audit(1414327934.136:6673): pid=11370 uid=0 auid=0 ses=254 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327934.138:6674): pid=11376 uid=0 auid=0 ses=254 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=11376 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327934.138:6675): pid=11376 uid=0 auid=0 ses=254 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=11376 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRED_REFR msg=audit(1414327934.139:6676): pid=11376 uid=0 auid=0 ses=254 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_END msg=audit(1414327934.159:6677): pid=11370 uid=0 auid=0 ses=254 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRED_DISP msg=audit(1414327934.159:6678): pid=11370 uid=0 auid=0 ses=254 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_END msg=audit(1414327934.160:6679): pid=11370 uid=0 auid=0 ses=254 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1414327934.160:6680): pid=11370 uid=0 auid=0 ses=254 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327934.160:6681): pid=11370 uid=0 auid=0 ses=254 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=11370 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327934.160:6682): pid=11370 uid=0 auid=0 ses=254 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=11370 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327934.160:6683): pid=11370 uid=0 auid=0 ses=254 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=11370 suid=0 rport=59944 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327937.178:6684): pid=11386 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=11386 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327937.179:6685): pid=11386 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=11386 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414327937.180:6686): pid=11385 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=11386 suid=74 rport=59947 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414327937.180:6687): pid=11385 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=11386 suid=74 rport=59947 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327937.718:6688): pid=11385 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=59947 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327937.718:6689): pid=11385 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=e7:e2:3d:94:48:cf:f5:8c:5e:54:98:bd:89:a5:29:a9 rport=59947 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_ACCT msg=audit(1414327937.722:6690): pid=11385 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327937.723:6691): pid=11385 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=11386 suid=74 rport=59947 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327937.723:6692): pid=11385 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1414327937.724:6693): pid=11385 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=LOGIN msg=audit(1414327937.724:6694): pid=11385 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=255 res=1 >type=USER_ROLE_CHANGE msg=audit(1414327937.801:6695): pid=11385 uid=0 auid=0 ses=255 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_START msg=audit(1414327937.819:6696): pid=11385 uid=0 auid=0 ses=255 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1414327937.824:6697): pid=11385 uid=0 auid=0 ses=255 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_START msg=audit(1414327937.824:6698): pid=11385 uid=0 auid=0 ses=255 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327937.825:6699): pid=11394 uid=0 auid=0 ses=255 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=11394 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327937.825:6700): pid=11394 uid=0 auid=0 ses=255 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=11394 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRED_REFR msg=audit(1414327937.826:6701): pid=11394 uid=0 auid=0 ses=255 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_END msg=audit(1414327937.851:6702): pid=11385 uid=0 auid=0 ses=255 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRED_DISP msg=audit(1414327937.851:6703): pid=11385 uid=0 auid=0 ses=255 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_END msg=audit(1414327937.851:6704): pid=11385 uid=0 auid=0 ses=255 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1414327937.852:6705): pid=11385 uid=0 auid=0 ses=255 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327937.852:6706): pid=11385 uid=0 auid=0 ses=255 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=11385 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327937.852:6707): pid=11385 uid=0 auid=0 ses=255 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=11385 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327937.852:6708): pid=11385 uid=0 auid=0 ses=255 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=11385 suid=0 rport=59947 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_CMD msg=audit(1414327938.281:6709): pid=11404 uid=993 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D767363746C202D2D74696D656F75743D3130206C6973742D6272 terminal=? res=success' >type=CRED_ACQ msg=audit(1414327938.281:6710): pid=11404 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1414327938.282:6711): pid=11404 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1414327938.336:6712): pid=11404 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1414327938.336:6713): pid=11404 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1414327938.345:6714): pid=11407 uid=993 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D767363746C202D2D74696D656F75743D3130206C6973742D706F7274732062722D696E74 terminal=? res=success' >type=CRED_ACQ msg=audit(1414327938.345:6715): pid=11407 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1414327938.346:6716): pid=11407 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1414327938.396:6717): pid=11407 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1414327938.396:6718): pid=11407 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1414327938.405:6719): pid=11410 uid=993 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D767363746C202D2D74696D656F75743D3130206C6973742D706F7274732062722D696E74 terminal=? res=success' >type=CRED_ACQ msg=audit(1414327938.405:6720): pid=11410 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1414327938.405:6721): pid=11410 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1414327938.456:6722): pid=11410 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1414327938.456:6723): pid=11410 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1414327938.494:6724): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="neutron-ovs-cleanup" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=ANOM_PROMISCUOUS msg=audit(1414327938.671:6725): dev=br-tun prom=256 old_prom=0 auid=4294967295 uid=0 gid=0 ses=4294967295 >type=SYSCALL msg=audit(1414327938.671:6725): arch=c000003e syscall=46 success=yes exit=52 a0=15 a1=7fff806620f0 a2=0 a3=0 items=0 ppid=11281 pid=11282 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ovs-vswitchd" exe="/usr/sbin/ovs-vswitchd" subj=system_u:system_r:openvswitch_t:s0 key=(null) >type=SERVICE_START msg=audit(1414327938.795:6726): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="neutron-openvswitch-agent" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=ANOM_PROMISCUOUS msg=audit(1414327938.957:6727): dev=br-ex prom=256 old_prom=0 auid=4294967295 uid=0 gid=0 ses=4294967295 >type=SYSCALL msg=audit(1414327938.957:6727): arch=c000003e syscall=46 success=yes exit=52 a0=15 a1=7fff806620f0 a2=0 a3=3 items=0 ppid=11281 pid=11282 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ovs-vswitchd" exe="/usr/sbin/ovs-vswitchd" subj=system_u:system_r:openvswitch_t:s0 key=(null) >type=USER_CMD msg=audit(1414327939.219:6728): pid=11501 uid=993 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D767363746C202D2D74696D656F75743D3130202D2D202D2D6D61792D6578697374206164642D62722062722D696E74 terminal=? res=success' >type=CRED_ACQ msg=audit(1414327939.219:6729): pid=11501 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1414327939.220:6730): pid=11501 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=NETFILTER_CFG msg=audit(1414327939.245:6731): table=filter family=2 entries=51 >type=SYSCALL msg=audit(1414327939.245:6731): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=1269820 items=0 ppid=10718 pid=11503 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=241 comm="iptables" exe="/usr/sbin/xtables-multi" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null) >type=USER_END msg=audit(1414327939.277:6732): pid=11501 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1414327939.277:6733): pid=11501 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1414327939.286:6734): pid=11524 uid=993 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D767363746C202D2D74696D656F75743D3130202D2D207365742D6661696C2D6D6F64652062722D696E7420736563757265 terminal=? res=success' >type=CRED_ACQ msg=audit(1414327939.286:6735): pid=11524 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1414327939.287:6736): pid=11524 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1414327939.344:6737): pid=11524 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1414327939.344:6738): pid=11524 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1414327939.352:6739): pid=11534 uid=993 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D767363746C202D2D74696D656F75743D3130202D2D202D2D69662D6578697374732064656C2D706F72742062722D696E742070617463682D74756E terminal=? res=success' >type=CRED_ACQ msg=audit(1414327939.352:6740): pid=11534 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1414327939.353:6741): pid=11534 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1414327939.407:6742): pid=11534 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1414327939.407:6743): pid=11534 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1414327939.415:6744): pid=11541 uid=993 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D6F6663746C2064656C2D666C6F77732062722D696E74 terminal=? res=success' >type=CRED_ACQ msg=audit(1414327939.415:6745): pid=11541 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1414327939.415:6746): pid=11541 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1414327939.469:6747): pid=11541 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1414327939.469:6748): pid=11541 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1414327939.478:6749): pid=11544 uid=993 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D6F6663746C206164642D666C6F77732062722D696E74202D terminal=? res=success' >type=CRED_ACQ msg=audit(1414327939.478:6750): pid=11544 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1414327939.478:6751): pid=11544 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1414327939.533:6752): pid=11544 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1414327939.533:6753): pid=11544 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1414327939.542:6754): pid=11551 uid=993 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D6F6663746C206164642D666C6F77732062722D696E74202D terminal=? res=success' >type=CRED_ACQ msg=audit(1414327939.542:6755): pid=11551 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1414327939.543:6756): pid=11551 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1414327939.596:6757): pid=11551 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1414327939.596:6758): pid=11551 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1414327939.739:6759): pid=11554 uid=993 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D767363746C202D2D74696D656F75743D3130206C6973742D6272 terminal=? res=success' >type=CRED_ACQ msg=audit(1414327939.740:6760): pid=11554 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1414327939.740:6761): pid=11554 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1414327939.797:6762): pid=11554 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1414327939.797:6763): pid=11554 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1414327939.806:6764): pid=11557 uid=993 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D767363746C202D2D74696D656F75743D3130202D2D202D2D69662D6578697374732064656C2D62722062722D74756E terminal=? res=success' >type=CRED_ACQ msg=audit(1414327939.806:6765): pid=11557 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1414327939.806:6766): pid=11557 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=ANOM_PROMISCUOUS msg=audit(1414327939.855:6767): dev=br-tun prom=0 old_prom=256 auid=4294967295 uid=0 gid=0 ses=4294967295 >type=SYSCALL msg=audit(1414327939.855:6767): arch=c000003e syscall=46 success=yes exit=32 a0=15 a1=7fff80662300 a2=0 a3=0 items=0 ppid=11281 pid=11282 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ovs-vswitchd" exe="/usr/sbin/ovs-vswitchd" subj=system_u:system_r:openvswitch_t:s0 key=(null) >type=USER_END msg=audit(1414327939.881:6768): pid=11557 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1414327939.881:6769): pid=11557 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1414327939.889:6770): pid=11576 uid=993 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D767363746C202D2D74696D656F75743D3130202D2D202D2D6D61792D6578697374206164642D62722062722D74756E terminal=? res=success' >type=CRED_ACQ msg=audit(1414327939.890:6771): pid=11576 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1414327939.890:6772): pid=11576 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=ANOM_PROMISCUOUS msg=audit(1414327939.944:6773): dev=br-tun prom=256 old_prom=0 auid=4294967295 uid=0 gid=0 ses=4294967295 >type=SYSCALL msg=audit(1414327939.944:6773): arch=c000003e syscall=46 success=yes exit=52 a0=10 a1=7fff806620f0 a2=0 a3=0 items=0 ppid=11281 pid=11282 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ovs-vswitchd" exe="/usr/sbin/ovs-vswitchd" subj=system_u:system_r:openvswitch_t:s0 key=(null) >type=USER_END msg=audit(1414327939.955:6774): pid=11576 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1414327939.955:6775): pid=11576 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1414327939.963:6776): pid=11584 uid=993 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D767363746C202D2D74696D656F75743D3130206164642D706F72742062722D696E742070617463682D74756E202D2D2073657420496E746572666163652070617463682D74756E20747970653D7061746368206F7074696F6E733A706565723D70617463682D696E74 terminal=? res=success' >type=CRED_ACQ msg=audit(1414327939.963:6777): pid=11584 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1414327939.964:6778): pid=11584 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1414327940.021:6779): pid=11584 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1414327940.021:6780): pid=11584 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1414327940.030:6781): pid=11587 uid=993 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D767363746C202D2D74696D656F75743D31302067657420496E746572666163652070617463682D74756E206F66706F7274 terminal=? res=success' >type=CRED_ACQ msg=audit(1414327940.030:6782): pid=11587 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1414327940.030:6783): pid=11587 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1414327940.085:6784): pid=11587 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1414327940.085:6785): pid=11587 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1414327940.094:6786): pid=11590 uid=993 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D767363746C202D2D74696D656F75743D3130206164642D706F72742062722D74756E2070617463682D696E74202D2D2073657420496E746572666163652070617463682D696E7420747970653D7061746368206F7074696F6E733A706565723D70617463682D74756E terminal=? res=success' >type=CRED_ACQ msg=audit(1414327940.094:6787): pid=11590 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1414327940.094:6788): pid=11590 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1414327940.150:6789): pid=11590 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1414327940.151:6790): pid=11590 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1414327940.160:6791): pid=11593 uid=993 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D767363746C202D2D74696D656F75743D31302067657420496E746572666163652070617463682D696E74206F66706F7274 terminal=? res=success' >type=CRED_ACQ msg=audit(1414327940.160:6792): pid=11593 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1414327940.160:6793): pid=11593 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1414327940.212:6794): pid=11593 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1414327940.212:6795): pid=11593 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1414327940.221:6796): pid=11596 uid=993 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D6F6663746C2064656C2D666C6F77732062722D74756E terminal=? res=success' >type=CRED_ACQ msg=audit(1414327940.221:6797): pid=11596 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1414327940.221:6798): pid=11596 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1414327940.277:6799): pid=11596 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1414327940.277:6800): pid=11596 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1414327940.287:6801): pid=11599 uid=993 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D6F6663746C206164642D666C6F77732062722D74756E202D terminal=? res=success' >type=CRED_ACQ msg=audit(1414327940.287:6802): pid=11599 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1414327940.288:6803): pid=11599 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1414327940.341:6804): pid=11599 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1414327940.341:6805): pid=11599 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1414327940.351:6806): pid=11602 uid=993 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D6F6663746C206164642D666C6F77732062722D74756E202D terminal=? res=success' >type=CRED_ACQ msg=audit(1414327940.352:6807): pid=11602 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1414327940.352:6808): pid=11602 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1414327940.408:6809): pid=11602 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1414327940.408:6810): pid=11602 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1414327940.417:6811): pid=11606 uid=993 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D6F6663746C206164642D666C6F77732062722D74756E202D terminal=? res=success' >type=CRED_ACQ msg=audit(1414327940.417:6812): pid=11606 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1414327940.417:6813): pid=11606 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1414327940.472:6814): pid=11606 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1414327940.472:6815): pid=11606 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1414327940.480:6816): pid=11609 uid=993 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D6F6663746C206164642D666C6F77732062722D74756E202D terminal=? res=success' >type=CRED_ACQ msg=audit(1414327940.480:6817): pid=11609 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1414327940.480:6818): pid=11609 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1414327940.535:6819): pid=11609 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1414327940.535:6820): pid=11609 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1414327940.544:6821): pid=11612 uid=993 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D6F6663746C206164642D666C6F77732062722D74756E202D terminal=? res=success' >type=CRED_ACQ msg=audit(1414327940.544:6822): pid=11612 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1414327940.544:6823): pid=11612 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1414327940.599:6824): pid=11612 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1414327940.599:6825): pid=11612 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1414327940.608:6826): pid=11615 uid=993 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D6F6663746C206164642D666C6F77732062722D74756E202D terminal=? res=success' >type=CRED_ACQ msg=audit(1414327940.608:6827): pid=11615 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1414327940.609:6828): pid=11615 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1414327940.664:6829): pid=11615 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1414327940.664:6830): pid=11615 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1414327940.673:6831): pid=11618 uid=993 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D6F6663746C206164642D666C6F77732062722D74756E202D terminal=? res=success' >type=CRED_ACQ msg=audit(1414327940.673:6832): pid=11618 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1414327940.674:6833): pid=11618 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1414327940.752:6834): pid=11618 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1414327940.753:6835): pid=11618 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1414327940.761:6836): pid=11621 uid=993 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D6F6663746C206164642D666C6F77732062722D74756E202D terminal=? res=success' >type=CRED_ACQ msg=audit(1414327940.761:6837): pid=11621 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1414327940.761:6838): pid=11621 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1414327940.813:6839): pid=11621 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1414327940.813:6840): pid=11621 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1414327940.821:6841): pid=11624 uid=993 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D6F6663746C206164642D666C6F77732062722D74756E202D terminal=? res=success' >type=CRED_ACQ msg=audit(1414327940.822:6842): pid=11624 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1414327940.822:6843): pid=11624 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327940.875:6844): pid=11631 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=11631 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327940.875:6845): pid=11631 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=11631 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414327940.877:6846): pid=11629 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=11631 suid=74 rport=59956 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414327940.877:6847): pid=11629 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=11631 suid=74 rport=59956 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_END msg=audit(1414327940.881:6848): pid=11624 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1414327940.881:6849): pid=11624 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1414327940.890:6850): pid=11632 uid=993 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D767363746C202D2D74696D656F75743D3130206C6973742D6272 terminal=? res=success' >type=CRED_ACQ msg=audit(1414327940.891:6851): pid=11632 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1414327940.891:6852): pid=11632 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1414327940.953:6853): pid=11632 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1414327940.953:6854): pid=11632 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1414327940.962:6855): pid=11635 uid=993 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D767363746C202D2D74696D656F75743D322062722D6765742D65787465726E616C2D69642062722D6578206272696467652D6964 terminal=? res=success' >type=CRED_ACQ msg=audit(1414327940.962:6856): pid=11635 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1414327940.962:6857): pid=11635 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1414327941.021:6858): pid=11635 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1414327941.022:6859): pid=11635 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1414327941.079:6860): pid=11638 uid=993 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F767364622D636C69656E74206D6F6E69746F7220496E74657266616365206E616D652C6F66706F7274202D2D666F726D61743D6A736F6E terminal=? res=success' >type=CRED_ACQ msg=audit(1414327941.079:6861): pid=11638 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1414327941.079:6862): pid=11638 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1414327941.080:6863): pid=11639 uid=993 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D6F6663746C2064756D702D666C6F77732062722D696E74207461626C653D3233 terminal=? res=success' >type=CRED_ACQ msg=audit(1414327941.080:6864): pid=11639 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1414327941.081:6865): pid=11639 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1414327941.142:6866): pid=11639 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1414327941.142:6867): pid=11639 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_AUTH msg=audit(1414327941.417:6868): pid=11629 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=59956 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327941.417:6869): pid=11629 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=e7:e2:3d:94:48:cf:f5:8c:5e:54:98:bd:89:a5:29:a9 rport=59956 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_ACCT msg=audit(1414327941.422:6870): pid=11629 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327941.422:6871): pid=11629 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=11631 suid=74 rport=59956 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327941.423:6872): pid=11629 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1414327941.423:6873): pid=11629 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=LOGIN msg=audit(1414327941.424:6874): pid=11629 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=256 res=1 >type=USER_ROLE_CHANGE msg=audit(1414327941.519:6875): pid=11629 uid=0 auid=0 ses=256 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_START msg=audit(1414327941.609:6876): pid=11629 uid=0 auid=0 ses=256 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1414327941.615:6877): pid=11629 uid=0 auid=0 ses=256 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_START msg=audit(1414327941.615:6878): pid=11629 uid=0 auid=0 ses=256 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327941.617:6879): pid=11645 uid=0 auid=0 ses=256 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=11645 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327941.617:6880): pid=11645 uid=0 auid=0 ses=256 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=11645 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRED_REFR msg=audit(1414327941.618:6881): pid=11645 uid=0 auid=0 ses=256 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_END msg=audit(1414327941.639:6882): pid=11629 uid=0 auid=0 ses=256 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRED_DISP msg=audit(1414327941.640:6883): pid=11629 uid=0 auid=0 ses=256 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_END msg=audit(1414327941.640:6884): pid=11629 uid=0 auid=0 ses=256 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1414327941.640:6885): pid=11629 uid=0 auid=0 ses=256 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327941.641:6886): pid=11629 uid=0 auid=0 ses=256 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=11629 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327941.641:6887): pid=11629 uid=0 auid=0 ses=256 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=11629 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327941.641:6888): pid=11629 uid=0 auid=0 ses=256 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=11629 suid=0 rport=59956 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=SERVICE_START msg=audit(1414327942.899:6889): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="neutron-dhcp-agent" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1414327943.177:6890): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="neutron-l3-agent" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1414327944.448:6891): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="neutron-server" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1414327944.625:6892): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="neutron-metadata-agent" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327944.662:6893): pid=11766 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=11766 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327944.662:6894): pid=11766 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=11766 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414327944.663:6895): pid=11765 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=11766 suid=74 rport=59971 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414327944.664:6896): pid=11765 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=11766 suid=74 rport=59971 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327945.209:6897): pid=11765 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=59971 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327945.209:6898): pid=11765 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=e7:e2:3d:94:48:cf:f5:8c:5e:54:98:bd:89:a5:29:a9 rport=59971 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_ACCT msg=audit(1414327945.214:6899): pid=11765 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327945.215:6900): pid=11765 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=11766 suid=74 rport=59971 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327945.216:6901): pid=11765 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1414327945.216:6902): pid=11765 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=LOGIN msg=audit(1414327945.216:6903): pid=11765 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=257 res=1 >type=USER_ROLE_CHANGE msg=audit(1414327945.325:6904): pid=11765 uid=0 auid=0 ses=257 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_START msg=audit(1414327945.404:6905): pid=11765 uid=0 auid=0 ses=257 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1414327945.414:6906): pid=11765 uid=0 auid=0 ses=257 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_START msg=audit(1414327945.415:6907): pid=11765 uid=0 auid=0 ses=257 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327945.417:6908): pid=11797 uid=0 auid=0 ses=257 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=11797 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327945.417:6909): pid=11797 uid=0 auid=0 ses=257 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=11797 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRED_REFR msg=audit(1414327945.418:6910): pid=11797 uid=0 auid=0 ses=257 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_END msg=audit(1414327945.442:6911): pid=11765 uid=0 auid=0 ses=257 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRED_DISP msg=audit(1414327945.443:6912): pid=11765 uid=0 auid=0 ses=257 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_END msg=audit(1414327945.443:6913): pid=11765 uid=0 auid=0 ses=257 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1414327945.443:6914): pid=11765 uid=0 auid=0 ses=257 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327945.443:6915): pid=11765 uid=0 auid=0 ses=257 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=11765 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327945.443:6916): pid=11765 uid=0 auid=0 ses=257 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=11765 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327945.444:6917): pid=11765 uid=0 auid=0 ses=257 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=11765 suid=0 rport=59971 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327948.470:6918): pid=11805 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=11805 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327948.470:6919): pid=11805 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=11805 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414327948.471:6920): pid=11804 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=11805 suid=74 rport=59980 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414327948.472:6921): pid=11804 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=11805 suid=74 rport=59980 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327949.008:6922): pid=11804 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=59980 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327949.008:6923): pid=11804 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=e7:e2:3d:94:48:cf:f5:8c:5e:54:98:bd:89:a5:29:a9 rport=59980 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_ACCT msg=audit(1414327949.013:6924): pid=11804 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327949.013:6925): pid=11804 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=11805 suid=74 rport=59980 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327949.014:6926): pid=11804 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1414327949.014:6927): pid=11804 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=LOGIN msg=audit(1414327949.014:6928): pid=11804 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=258 res=1 >type=USER_ROLE_CHANGE msg=audit(1414327949.087:6929): pid=11804 uid=0 auid=0 ses=258 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_START msg=audit(1414327949.103:6930): pid=11804 uid=0 auid=0 ses=258 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1414327949.107:6931): pid=11804 uid=0 auid=0 ses=258 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_START msg=audit(1414327949.107:6932): pid=11804 uid=0 auid=0 ses=258 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327949.109:6933): pid=11807 uid=0 auid=0 ses=258 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=11807 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327949.109:6934): pid=11807 uid=0 auid=0 ses=258 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=11807 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRED_REFR msg=audit(1414327949.110:6935): pid=11807 uid=0 auid=0 ses=258 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_END msg=audit(1414327949.131:6936): pid=11804 uid=0 auid=0 ses=258 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRED_DISP msg=audit(1414327949.131:6937): pid=11804 uid=0 auid=0 ses=258 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_END msg=audit(1414327949.131:6938): pid=11804 uid=0 auid=0 ses=258 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1414327949.132:6939): pid=11804 uid=0 auid=0 ses=258 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327949.132:6940): pid=11804 uid=0 auid=0 ses=258 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=11804 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327949.132:6941): pid=11804 uid=0 auid=0 ses=258 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=11804 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327949.132:6942): pid=11804 uid=0 auid=0 ses=258 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=11804 suid=0 rport=59980 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327949.155:6943): pid=11811 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=11811 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327949.155:6944): pid=11811 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=11811 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414327949.158:6945): pid=11810 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=11811 suid=74 rport=59981 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414327949.159:6946): pid=11810 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=11811 suid=74 rport=59981 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327949.694:6947): pid=11810 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=59981 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327949.695:6948): pid=11810 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=e7:e2:3d:94:48:cf:f5:8c:5e:54:98:bd:89:a5:29:a9 rport=59981 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_ACCT msg=audit(1414327949.699:6949): pid=11810 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327949.699:6950): pid=11810 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=11811 suid=74 rport=59981 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327949.700:6951): pid=11810 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1414327949.700:6952): pid=11810 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=LOGIN msg=audit(1414327949.701:6953): pid=11810 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=259 res=1 >type=USER_ROLE_CHANGE msg=audit(1414327949.771:6954): pid=11810 uid=0 auid=0 ses=259 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_START msg=audit(1414327949.788:6955): pid=11810 uid=0 auid=0 ses=259 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1414327949.792:6956): pid=11810 uid=0 auid=0 ses=259 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_START msg=audit(1414327949.792:6957): pid=11810 uid=0 auid=0 ses=259 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327949.794:6958): pid=11814 uid=0 auid=0 ses=259 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=11814 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327949.794:6959): pid=11814 uid=0 auid=0 ses=259 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=11814 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRED_REFR msg=audit(1414327949.795:6960): pid=11814 uid=0 auid=0 ses=259 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327949.825:6961): pid=11823 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=11823 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327949.825:6962): pid=11823 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=11823 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414327949.826:6963): pid=11822 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=11823 suid=74 rport=59982 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414327949.826:6964): pid=11822 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=11823 suid=74 rport=59982 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_END msg=audit(1414327949.827:6965): pid=11810 uid=0 auid=0 ses=259 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRED_DISP msg=audit(1414327949.827:6966): pid=11810 uid=0 auid=0 ses=259 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_END msg=audit(1414327949.828:6967): pid=11810 uid=0 auid=0 ses=259 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1414327949.828:6968): pid=11810 uid=0 auid=0 ses=259 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327949.828:6969): pid=11810 uid=0 auid=0 ses=259 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=11810 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327949.828:6970): pid=11810 uid=0 auid=0 ses=259 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=11810 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327949.828:6971): pid=11810 uid=0 auid=0 ses=259 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=11810 suid=0 rport=59981 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327950.366:6972): pid=11822 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=59982 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327950.366:6973): pid=11822 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=e7:e2:3d:94:48:cf:f5:8c:5e:54:98:bd:89:a5:29:a9 rport=59982 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_ACCT msg=audit(1414327950.370:6974): pid=11822 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327950.371:6975): pid=11822 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=11823 suid=74 rport=59982 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327950.372:6976): pid=11822 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1414327950.372:6977): pid=11822 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=LOGIN msg=audit(1414327950.372:6978): pid=11822 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=260 res=1 >type=USER_ROLE_CHANGE msg=audit(1414327950.444:6979): pid=11822 uid=0 auid=0 ses=260 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_START msg=audit(1414327950.460:6980): pid=11822 uid=0 auid=0 ses=260 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1414327950.464:6981): pid=11822 uid=0 auid=0 ses=260 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_START msg=audit(1414327950.464:6982): pid=11822 uid=0 auid=0 ses=260 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327950.466:6983): pid=11831 uid=0 auid=0 ses=260 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=11831 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327950.466:6984): pid=11831 uid=0 auid=0 ses=260 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=11831 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRED_REFR msg=audit(1414327950.467:6985): pid=11831 uid=0 auid=0 ses=260 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_END msg=audit(1414327950.485:6986): pid=11822 uid=0 auid=0 ses=260 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRED_DISP msg=audit(1414327950.485:6987): pid=11822 uid=0 auid=0 ses=260 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_END msg=audit(1414327950.485:6988): pid=11822 uid=0 auid=0 ses=260 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1414327950.485:6989): pid=11822 uid=0 auid=0 ses=260 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327950.485:6990): pid=11822 uid=0 auid=0 ses=260 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=11822 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327950.486:6991): pid=11822 uid=0 auid=0 ses=260 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=11822 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327950.486:6992): pid=11822 uid=0 auid=0 ses=260 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=11822 suid=0 rport=59982 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327950.496:6993): pid=11838 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=11838 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327950.496:6994): pid=11838 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=11838 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414327950.497:6995): pid=11837 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=11838 suid=74 rport=59983 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414327950.498:6996): pid=11837 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=11838 suid=74 rport=59983 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327951.038:6997): pid=11837 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=59983 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327951.038:6998): pid=11837 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=e7:e2:3d:94:48:cf:f5:8c:5e:54:98:bd:89:a5:29:a9 rport=59983 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_ACCT msg=audit(1414327951.043:6999): pid=11837 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327951.043:7000): pid=11837 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=11838 suid=74 rport=59983 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327951.045:7001): pid=11837 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1414327951.045:7002): pid=11837 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=LOGIN msg=audit(1414327951.045:7003): pid=11837 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=261 res=1 >type=USER_ROLE_CHANGE msg=audit(1414327951.123:7004): pid=11837 uid=0 auid=0 ses=261 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_START msg=audit(1414327951.145:7005): pid=11837 uid=0 auid=0 ses=261 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1414327951.149:7006): pid=11837 uid=0 auid=0 ses=261 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_START msg=audit(1414327951.149:7007): pid=11837 uid=0 auid=0 ses=261 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327951.150:7008): pid=11841 uid=0 auid=0 ses=261 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=11841 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327951.150:7009): pid=11841 uid=0 auid=0 ses=261 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=11841 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRED_REFR msg=audit(1414327951.151:7010): pid=11841 uid=0 auid=0 ses=261 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_END msg=audit(1414327951.166:7011): pid=11837 uid=0 auid=0 ses=261 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRED_DISP msg=audit(1414327951.166:7012): pid=11837 uid=0 auid=0 ses=261 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_END msg=audit(1414327951.166:7013): pid=11837 uid=0 auid=0 ses=261 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1414327951.166:7014): pid=11837 uid=0 auid=0 ses=261 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327951.167:7015): pid=11837 uid=0 auid=0 ses=261 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=11837 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327951.167:7016): pid=11837 uid=0 auid=0 ses=261 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=11837 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327951.167:7017): pid=11837 uid=0 auid=0 ses=261 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=11837 suid=0 rport=59983 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327951.184:7018): pid=11856 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=11856 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327951.184:7019): pid=11856 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=11856 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414327951.186:7020): pid=11854 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=11856 suid=74 rport=59984 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414327951.186:7021): pid=11854 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=11856 suid=74 rport=59984 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327951.724:7022): pid=11854 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=59984 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327951.724:7023): pid=11854 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=e7:e2:3d:94:48:cf:f5:8c:5e:54:98:bd:89:a5:29:a9 rport=59984 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_ACCT msg=audit(1414327951.729:7024): pid=11854 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327951.729:7025): pid=11854 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=11856 suid=74 rport=59984 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327951.730:7026): pid=11854 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1414327951.730:7027): pid=11854 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=LOGIN msg=audit(1414327951.730:7028): pid=11854 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=262 res=1 >type=USER_ROLE_CHANGE msg=audit(1414327951.805:7029): pid=11854 uid=0 auid=0 ses=262 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_START msg=audit(1414327951.821:7030): pid=11854 uid=0 auid=0 ses=262 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1414327951.825:7031): pid=11854 uid=0 auid=0 ses=262 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_START msg=audit(1414327951.825:7032): pid=11854 uid=0 auid=0 ses=262 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327951.827:7033): pid=11882 uid=0 auid=0 ses=262 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=11882 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327951.827:7034): pid=11882 uid=0 auid=0 ses=262 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=11882 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRED_REFR msg=audit(1414327951.828:7035): pid=11882 uid=0 auid=0 ses=262 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_END msg=audit(1414327951.843:7036): pid=11854 uid=0 auid=0 ses=262 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRED_DISP msg=audit(1414327951.843:7037): pid=11854 uid=0 auid=0 ses=262 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_END msg=audit(1414327951.844:7038): pid=11854 uid=0 auid=0 ses=262 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1414327951.844:7039): pid=11854 uid=0 auid=0 ses=262 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327951.844:7040): pid=11854 uid=0 auid=0 ses=262 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=11854 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327951.844:7041): pid=11854 uid=0 auid=0 ses=262 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=11854 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327951.844:7042): pid=11854 uid=0 auid=0 ses=262 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=11854 suid=0 rport=59984 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=NETFILTER_CFG msg=audit(1414327952.799:7043): table=filter family=2 entries=0 >type=NETFILTER_CFG msg=audit(1414327952.799:7043): table=nat family=2 entries=0 >type=NETFILTER_CFG msg=audit(1414327952.799:7043): table=mangle family=2 entries=0 >type=NETFILTER_CFG msg=audit(1414327952.799:7043): table=filter family=10 entries=0 >type=SYSCALL msg=audit(1414327952.799:7043): arch=c000003e syscall=272 success=yes exit=0 a0=40000000 a1=c0 a2=0 a3=7fff0d89b870 items=0 ppid=12092 pid=12099 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=259 comm="ip" exe="/usr/sbin/ip" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null) >type=NETFILTER_CFG msg=audit(1414327952.854:7044): table=filter family=2 entries=0 >type=NETFILTER_CFG msg=audit(1414327952.854:7044): table=nat family=2 entries=0 >type=NETFILTER_CFG msg=audit(1414327952.854:7044): table=mangle family=2 entries=0 >type=NETFILTER_CFG msg=audit(1414327952.854:7044): table=filter family=10 entries=0 >type=SYSCALL msg=audit(1414327952.854:7044): arch=c000003e syscall=272 success=yes exit=0 a0=40000000 a1=c0 a2=0 a3=7fffe52a0b70 items=0 ppid=12092 pid=12106 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=259 comm="ip" exe="/usr/sbin/ip" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null) >type=NETFILTER_CFG msg=audit(1414327953.199:7045): table=filter family=2 entries=0 >type=NETFILTER_CFG msg=audit(1414327953.199:7045): table=nat family=2 entries=0 >type=NETFILTER_CFG msg=audit(1414327953.199:7045): table=mangle family=2 entries=0 >type=NETFILTER_CFG msg=audit(1414327953.199:7045): table=filter family=10 entries=0 >type=SYSCALL msg=audit(1414327953.199:7045): arch=c000003e syscall=272 success=yes exit=0 a0=40000000 a1=c0 a2=0 a3=7fff7ea05ba0 items=0 ppid=12092 pid=12108 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=259 comm="ip" exe="/usr/sbin/ip" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null) >type=CRYPTO_KEY_USER msg=audit(1414327954.867:7046): pid=12142 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=12142 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327954.867:7047): pid=12142 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=12142 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414327954.869:7048): pid=12141 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=12142 suid=74 rport=59985 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414327954.869:7049): pid=12141 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=12142 suid=74 rport=59985 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=NETFILTER_CFG msg=audit(1414327959.308:7050): table=filter family=2 entries=0 >type=NETFILTER_CFG msg=audit(1414327959.308:7050): table=nat family=2 entries=0 >type=NETFILTER_CFG msg=audit(1414327959.308:7050): table=mangle family=2 entries=0 >type=NETFILTER_CFG msg=audit(1414327959.308:7050): table=filter family=10 entries=0 >type=SYSCALL msg=audit(1414327959.308:7050): arch=c000003e syscall=272 success=yes exit=0 a0=40000000 a1=c0 a2=0 a3=7fff764ba000 items=0 ppid=12398 pid=12405 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=261 comm="ip" exe="/usr/sbin/ip" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null) >type=NETFILTER_CFG msg=audit(1414327959.374:7051): table=filter family=2 entries=0 >type=NETFILTER_CFG msg=audit(1414327959.374:7051): table=nat family=2 entries=0 >type=NETFILTER_CFG msg=audit(1414327959.374:7051): table=mangle family=2 entries=0 >type=NETFILTER_CFG msg=audit(1414327959.374:7051): table=filter family=10 entries=0 >type=SYSCALL msg=audit(1414327959.374:7051): arch=c000003e syscall=272 success=yes exit=0 a0=40000000 a1=c0 a2=0 a3=7fffc423ca80 items=0 ppid=12398 pid=12412 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=261 comm="ip" exe="/usr/sbin/ip" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null) >type=NETFILTER_CFG msg=audit(1414327959.706:7052): table=filter family=2 entries=0 >type=NETFILTER_CFG msg=audit(1414327959.706:7052): table=nat family=2 entries=0 >type=NETFILTER_CFG msg=audit(1414327959.706:7052): table=mangle family=2 entries=0 >type=NETFILTER_CFG msg=audit(1414327959.706:7052): table=filter family=10 entries=0 >type=SYSCALL msg=audit(1414327959.706:7052): arch=c000003e syscall=272 success=yes exit=0 a0=40000000 a1=c0 a2=0 a3=7fff38883400 items=0 ppid=12398 pid=12414 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=261 comm="ip" exe="/usr/sbin/ip" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null) >type=USER_AUTH msg=audit(1414327960.387:7053): pid=12141 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=59985 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327960.387:7054): pid=12141 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=e7:e2:3d:94:48:cf:f5:8c:5e:54:98:bd:89:a5:29:a9 rport=59985 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_ACCT msg=audit(1414327960.392:7055): pid=12141 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327960.392:7056): pid=12141 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=12142 suid=74 rport=59985 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327960.393:7057): pid=12141 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1414327960.394:7058): pid=12141 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=LOGIN msg=audit(1414327960.394:7059): pid=12141 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=263 res=1 >type=USER_ROLE_CHANGE msg=audit(1414327960.475:7060): pid=12141 uid=0 auid=0 ses=263 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_START msg=audit(1414327960.492:7061): pid=12141 uid=0 auid=0 ses=263 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1414327960.496:7062): pid=12141 uid=0 auid=0 ses=263 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_START msg=audit(1414327960.496:7063): pid=12141 uid=0 auid=0 ses=263 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327960.498:7064): pid=12431 uid=0 auid=0 ses=263 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=12431 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327960.499:7065): pid=12431 uid=0 auid=0 ses=263 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=12431 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRED_REFR msg=audit(1414327960.500:7066): pid=12431 uid=0 auid=0 ses=263 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_END msg=audit(1414327960.517:7067): pid=12141 uid=0 auid=0 ses=263 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRED_DISP msg=audit(1414327960.517:7068): pid=12141 uid=0 auid=0 ses=263 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_END msg=audit(1414327960.518:7069): pid=12141 uid=0 auid=0 ses=263 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1414327960.518:7070): pid=12141 uid=0 auid=0 ses=263 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327960.518:7071): pid=12141 uid=0 auid=0 ses=263 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=12141 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327960.518:7072): pid=12141 uid=0 auid=0 ses=263 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=12141 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327960.518:7073): pid=12141 uid=0 auid=0 ses=263 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=12141 suid=0 rport=59985 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327963.537:7074): pid=12458 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=12458 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327963.537:7075): pid=12458 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=12458 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414327963.540:7076): pid=12457 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=12458 suid=74 rport=59986 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414327963.540:7077): pid=12457 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=12458 suid=74 rport=59986 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_CMD msg=audit(1414327964.040:7078): pid=12459 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D4320766773202D2D6E6F68656164696E6773202D2D756E69743D67202D6F206E616D652C73697A652C667265652C6C765F636F756E742C75756964202D2D736570617261746F72203A202D2D6E6F7375666669782063696E6465722D766F6C756D6573 terminal=? res=success' >type=CRED_ACQ msg=audit(1414327964.041:7079): pid=12459 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1414327964.042:7080): pid=12459 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_AUTH msg=audit(1414327964.085:7081): pid=12457 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=59986 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327964.085:7082): pid=12457 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=e7:e2:3d:94:48:cf:f5:8c:5e:54:98:bd:89:a5:29:a9 rport=59986 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_ACCT msg=audit(1414327964.089:7083): pid=12457 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327964.089:7084): pid=12457 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=12458 suid=74 rport=59986 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327964.090:7085): pid=12457 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1414327964.090:7086): pid=12457 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=LOGIN msg=audit(1414327964.090:7087): pid=12457 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=264 res=1 >type=USER_END msg=audit(1414327964.117:7088): pid=12459 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1414327964.117:7089): pid=12459 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_ROLE_CHANGE msg=audit(1414327964.170:7090): pid=12457 uid=0 auid=0 ses=264 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_START msg=audit(1414327964.185:7091): pid=12457 uid=0 auid=0 ses=264 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1414327964.188:7092): pid=12457 uid=0 auid=0 ses=264 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_START msg=audit(1414327964.189:7093): pid=12457 uid=0 auid=0 ses=264 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327964.190:7094): pid=12463 uid=0 auid=0 ses=264 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=12463 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327964.190:7095): pid=12463 uid=0 auid=0 ses=264 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=12463 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRED_REFR msg=audit(1414327964.191:7096): pid=12463 uid=0 auid=0 ses=264 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_END msg=audit(1414327964.211:7097): pid=12457 uid=0 auid=0 ses=264 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRED_DISP msg=audit(1414327964.211:7098): pid=12457 uid=0 auid=0 ses=264 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_END msg=audit(1414327964.211:7099): pid=12457 uid=0 auid=0 ses=264 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1414327964.211:7100): pid=12457 uid=0 auid=0 ses=264 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327964.211:7101): pid=12457 uid=0 auid=0 ses=264 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=12457 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327964.212:7102): pid=12457 uid=0 auid=0 ses=264 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=12457 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327964.212:7103): pid=12457 uid=0 auid=0 ses=264 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=12457 suid=0 rport=59986 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=NETFILTER_CFG msg=audit(1414327964.649:7104): table=filter family=2 entries=52 >type=SYSCALL msg=audit(1414327964.649:7104): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=11ebc80 items=0 ppid=12151 pid=12474 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=261 comm="iptables" exe="/usr/sbin/xtables-multi" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null) >type=CRYPTO_KEY_USER msg=audit(1414327967.229:7105): pid=12519 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=12519 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327967.229:7106): pid=12519 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=12519 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414327967.234:7107): pid=12518 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=12519 suid=74 rport=59987 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414327967.234:7108): pid=12518 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=12519 suid=74 rport=59987 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327967.772:7109): pid=12518 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=59987 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327967.772:7110): pid=12518 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=e7:e2:3d:94:48:cf:f5:8c:5e:54:98:bd:89:a5:29:a9 rport=59987 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_ACCT msg=audit(1414327967.776:7111): pid=12518 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327967.777:7112): pid=12518 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=12519 suid=74 rport=59987 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327967.778:7113): pid=12518 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1414327967.778:7114): pid=12518 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=LOGIN msg=audit(1414327967.778:7115): pid=12518 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=265 res=1 >type=USER_ROLE_CHANGE msg=audit(1414327967.853:7116): pid=12518 uid=0 auid=0 ses=265 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_START msg=audit(1414327967.870:7117): pid=12518 uid=0 auid=0 ses=265 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1414327967.874:7118): pid=12518 uid=0 auid=0 ses=265 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_START msg=audit(1414327967.874:7119): pid=12518 uid=0 auid=0 ses=265 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327967.876:7120): pid=12521 uid=0 auid=0 ses=265 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=12521 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327967.876:7121): pid=12521 uid=0 auid=0 ses=265 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=12521 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRED_REFR msg=audit(1414327967.877:7122): pid=12521 uid=0 auid=0 ses=265 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_END msg=audit(1414327967.896:7123): pid=12518 uid=0 auid=0 ses=265 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRED_DISP msg=audit(1414327967.897:7124): pid=12518 uid=0 auid=0 ses=265 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_END msg=audit(1414327967.897:7125): pid=12518 uid=0 auid=0 ses=265 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1414327967.897:7126): pid=12518 uid=0 auid=0 ses=265 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327967.897:7127): pid=12518 uid=0 auid=0 ses=265 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=12518 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327967.897:7128): pid=12518 uid=0 auid=0 ses=265 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=12518 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327967.897:7129): pid=12518 uid=0 auid=0 ses=265 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=12518 suid=0 rport=59987 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327967.914:7130): pid=12527 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=12527 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327967.914:7131): pid=12527 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=12527 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414327967.915:7132): pid=12526 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=12527 suid=74 rport=59988 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414327967.916:7133): pid=12526 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=12527 suid=74 rport=59988 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327968.452:7134): pid=12526 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=59988 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327968.452:7135): pid=12526 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=e7:e2:3d:94:48:cf:f5:8c:5e:54:98:bd:89:a5:29:a9 rport=59988 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_ACCT msg=audit(1414327968.456:7136): pid=12526 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327968.457:7137): pid=12526 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=12527 suid=74 rport=59988 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327968.458:7138): pid=12526 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1414327968.458:7139): pid=12526 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=LOGIN msg=audit(1414327968.458:7140): pid=12526 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=266 res=1 >type=USER_ROLE_CHANGE msg=audit(1414327968.531:7141): pid=12526 uid=0 auid=0 ses=266 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_START msg=audit(1414327968.556:7142): pid=12526 uid=0 auid=0 ses=266 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1414327968.560:7143): pid=12526 uid=0 auid=0 ses=266 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_START msg=audit(1414327968.560:7144): pid=12526 uid=0 auid=0 ses=266 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327968.561:7145): pid=12531 uid=0 auid=0 ses=266 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=12531 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327968.562:7146): pid=12531 uid=0 auid=0 ses=266 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=12531 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRED_REFR msg=audit(1414327968.562:7147): pid=12531 uid=0 auid=0 ses=266 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_END msg=audit(1414327968.590:7148): pid=12526 uid=0 auid=0 ses=266 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRED_DISP msg=audit(1414327968.590:7149): pid=12526 uid=0 auid=0 ses=266 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_END msg=audit(1414327968.591:7150): pid=12526 uid=0 auid=0 ses=266 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1414327968.591:7151): pid=12526 uid=0 auid=0 ses=266 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327968.591:7152): pid=12526 uid=0 auid=0 ses=266 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=12526 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327968.591:7153): pid=12526 uid=0 auid=0 ses=266 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=12526 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327968.591:7154): pid=12526 uid=0 auid=0 ses=266 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=12526 suid=0 rport=59988 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=ADD_GROUP msg=audit(1414327968.646:7155): pid=12535 uid=0 auid=0 ses=261 subj=unconfined_u:system_r:groupadd_t:s0-s0:c0.c1023 msg='op=adding group to /etc/group id=991 exe="/usr/sbin/groupadd" hostname=? addr=? terminal=? res=success' >type=ADD_GROUP msg=audit(1414327968.649:7156): pid=12535 uid=0 auid=0 ses=261 subj=unconfined_u:system_r:groupadd_t:s0-s0:c0.c1023 msg='op=adding group to /etc/gshadow id=991 exe="/usr/sbin/groupadd" hostname=? addr=? terminal=? res=success' >type=ADD_GROUP msg=audit(1414327968.650:7157): pid=12535 uid=0 auid=0 ses=261 subj=unconfined_u:system_r:groupadd_t:s0-s0:c0.c1023 msg='op= id=991 exe="/usr/sbin/groupadd" hostname=? addr=? terminal=? res=success' >type=ADD_USER msg=audit(1414327968.672:7158): pid=12540 uid=0 auid=0 ses=261 subj=unconfined_u:system_r:useradd_t:s0-s0:c0.c1023 msg='op=adding user id=992 exe="/usr/sbin/useradd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1414327969.290:7159): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="memcached" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327971.606:7160): pid=12599 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=12599 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327971.606:7161): pid=12599 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=12599 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414327971.607:7162): pid=12598 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=12599 suid=74 rport=59990 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414327971.607:7163): pid=12598 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=12599 suid=74 rport=59990 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327972.147:7164): pid=12598 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=59990 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327972.147:7165): pid=12598 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=e7:e2:3d:94:48:cf:f5:8c:5e:54:98:bd:89:a5:29:a9 rport=59990 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_ACCT msg=audit(1414327972.152:7166): pid=12598 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327972.152:7167): pid=12598 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=12599 suid=74 rport=59990 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327972.154:7168): pid=12598 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1414327972.154:7169): pid=12598 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=LOGIN msg=audit(1414327972.154:7170): pid=12598 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=267 res=1 >type=USER_ROLE_CHANGE msg=audit(1414327972.239:7171): pid=12598 uid=0 auid=0 ses=267 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_START msg=audit(1414327972.306:7172): pid=12598 uid=0 auid=0 ses=267 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1414327972.312:7173): pid=12598 uid=0 auid=0 ses=267 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_START msg=audit(1414327972.312:7174): pid=12598 uid=0 auid=0 ses=267 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327972.314:7175): pid=12603 uid=0 auid=0 ses=267 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=12603 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327972.314:7176): pid=12603 uid=0 auid=0 ses=267 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=12603 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRED_REFR msg=audit(1414327972.315:7177): pid=12603 uid=0 auid=0 ses=267 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_END msg=audit(1414327972.333:7178): pid=12598 uid=0 auid=0 ses=267 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRED_DISP msg=audit(1414327972.334:7179): pid=12598 uid=0 auid=0 ses=267 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_END msg=audit(1414327972.334:7180): pid=12598 uid=0 auid=0 ses=267 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1414327972.334:7181): pid=12598 uid=0 auid=0 ses=267 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327972.334:7182): pid=12598 uid=0 auid=0 ses=267 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=12598 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327972.334:7183): pid=12598 uid=0 auid=0 ses=267 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=12598 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327972.335:7184): pid=12598 uid=0 auid=0 ses=267 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=12598 suid=0 rport=59990 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327975.359:7185): pid=12611 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=12611 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327975.359:7186): pid=12611 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=12611 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414327975.360:7187): pid=12610 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=12611 suid=74 rport=59993 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414327975.360:7188): pid=12610 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=12611 suid=74 rport=59993 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327975.896:7189): pid=12610 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=59993 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327975.896:7190): pid=12610 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=e7:e2:3d:94:48:cf:f5:8c:5e:54:98:bd:89:a5:29:a9 rport=59993 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_ACCT msg=audit(1414327975.900:7191): pid=12610 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327975.900:7192): pid=12610 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=12611 suid=74 rport=59993 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327975.901:7193): pid=12610 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1414327975.901:7194): pid=12610 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=LOGIN msg=audit(1414327975.901:7195): pid=12610 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=268 res=1 >type=USER_ROLE_CHANGE msg=audit(1414327975.978:7196): pid=12610 uid=0 auid=0 ses=268 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_START msg=audit(1414327975.996:7197): pid=12610 uid=0 auid=0 ses=268 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1414327976.000:7198): pid=12610 uid=0 auid=0 ses=268 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_START msg=audit(1414327976.000:7199): pid=12610 uid=0 auid=0 ses=268 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327976.002:7200): pid=12613 uid=0 auid=0 ses=268 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=12613 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327976.002:7201): pid=12613 uid=0 auid=0 ses=268 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=12613 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRED_REFR msg=audit(1414327976.003:7202): pid=12613 uid=0 auid=0 ses=268 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_END msg=audit(1414327976.017:7203): pid=12610 uid=0 auid=0 ses=268 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRED_DISP msg=audit(1414327976.017:7204): pid=12610 uid=0 auid=0 ses=268 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_END msg=audit(1414327976.017:7205): pid=12610 uid=0 auid=0 ses=268 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1414327976.017:7206): pid=12610 uid=0 auid=0 ses=268 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327976.017:7207): pid=12610 uid=0 auid=0 ses=268 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=12610 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327976.017:7208): pid=12610 uid=0 auid=0 ses=268 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=12610 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327976.018:7209): pid=12610 uid=0 auid=0 ses=268 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=12610 suid=0 rport=59993 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327979.043:7210): pid=12631 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=12631 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327979.043:7211): pid=12631 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=12631 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414327979.044:7212): pid=12630 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=12631 suid=74 rport=60005 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414327979.045:7213): pid=12630 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=12631 suid=74 rport=60005 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327979.581:7214): pid=12630 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=60005 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327979.581:7215): pid=12630 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=e7:e2:3d:94:48:cf:f5:8c:5e:54:98:bd:89:a5:29:a9 rport=60005 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_ACCT msg=audit(1414327979.585:7216): pid=12630 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327979.586:7217): pid=12630 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=12631 suid=74 rport=60005 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327979.587:7218): pid=12630 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1414327979.587:7219): pid=12630 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=LOGIN msg=audit(1414327979.587:7220): pid=12630 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=269 res=1 >type=USER_ROLE_CHANGE msg=audit(1414327979.663:7221): pid=12630 uid=0 auid=0 ses=269 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_START msg=audit(1414327979.679:7222): pid=12630 uid=0 auid=0 ses=269 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1414327979.683:7223): pid=12630 uid=0 auid=0 ses=269 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_START msg=audit(1414327979.683:7224): pid=12630 uid=0 auid=0 ses=269 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327979.685:7225): pid=12633 uid=0 auid=0 ses=269 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=12633 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327979.685:7226): pid=12633 uid=0 auid=0 ses=269 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=12633 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRED_REFR msg=audit(1414327979.686:7227): pid=12633 uid=0 auid=0 ses=269 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_END msg=audit(1414327979.702:7228): pid=12630 uid=0 auid=0 ses=269 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRED_DISP msg=audit(1414327979.702:7229): pid=12630 uid=0 auid=0 ses=269 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_END msg=audit(1414327979.703:7230): pid=12630 uid=0 auid=0 ses=269 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1414327979.703:7231): pid=12630 uid=0 auid=0 ses=269 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327979.703:7232): pid=12630 uid=0 auid=0 ses=269 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=12630 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327979.703:7233): pid=12630 uid=0 auid=0 ses=269 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=12630 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327979.703:7234): pid=12630 uid=0 auid=0 ses=269 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=12630 suid=0 rport=60005 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_ACCT msg=audit(1414327981.940:7235): pid=12635 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="keystone" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1414327981.940:7236): pid=12635 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="keystone" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1414327981.942:7237): pid=12635 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=163 old-ses=4294967295 ses=270 res=1 >type=USER_START msg=audit(1414327981.956:7238): pid=12635 uid=0 auid=163 ses=270 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="keystone" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1414327981.957:7239): pid=12635 uid=0 auid=163 ses=270 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="keystone" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1414327982.633:7240): pid=12635 uid=0 auid=163 ses=270 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="keystone" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1414327982.636:7241): pid=12635 uid=0 auid=163 ses=270 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="keystone" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRYPTO_KEY_USER msg=audit(1414327982.725:7242): pid=12655 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=12655 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327982.725:7243): pid=12655 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=12655 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414327982.726:7244): pid=12654 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=12655 suid=74 rport=60012 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414327982.726:7245): pid=12654 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=12655 suid=74 rport=60012 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327983.268:7246): pid=12654 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=60012 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327983.268:7247): pid=12654 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=e7:e2:3d:94:48:cf:f5:8c:5e:54:98:bd:89:a5:29:a9 rport=60012 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_ACCT msg=audit(1414327983.272:7248): pid=12654 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327983.273:7249): pid=12654 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=12655 suid=74 rport=60012 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327983.275:7250): pid=12654 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1414327983.275:7251): pid=12654 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=LOGIN msg=audit(1414327983.275:7252): pid=12654 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=271 res=1 >type=USER_ROLE_CHANGE msg=audit(1414327983.356:7253): pid=12654 uid=0 auid=0 ses=271 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_START msg=audit(1414327983.371:7254): pid=12654 uid=0 auid=0 ses=271 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1414327983.375:7255): pid=12654 uid=0 auid=0 ses=271 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_START msg=audit(1414327983.375:7256): pid=12654 uid=0 auid=0 ses=271 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327983.377:7257): pid=12657 uid=0 auid=0 ses=271 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=12657 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327983.377:7258): pid=12657 uid=0 auid=0 ses=271 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=12657 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRED_REFR msg=audit(1414327983.379:7259): pid=12657 uid=0 auid=0 ses=271 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_END msg=audit(1414327983.394:7260): pid=12654 uid=0 auid=0 ses=271 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRED_DISP msg=audit(1414327983.394:7261): pid=12654 uid=0 auid=0 ses=271 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_END msg=audit(1414327983.395:7262): pid=12654 uid=0 auid=0 ses=271 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1414327983.395:7263): pid=12654 uid=0 auid=0 ses=271 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327983.395:7264): pid=12654 uid=0 auid=0 ses=271 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=12654 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327983.395:7265): pid=12654 uid=0 auid=0 ses=271 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=12654 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327983.395:7266): pid=12654 uid=0 auid=0 ses=271 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=12654 suid=0 rport=60012 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327986.420:7267): pid=12663 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=12663 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327986.421:7268): pid=12663 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=12663 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414327986.422:7269): pid=12662 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=12663 suid=74 rport=60020 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414327986.423:7270): pid=12662 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=12663 suid=74 rport=60020 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327986.963:7271): pid=12662 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=60020 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327986.963:7272): pid=12662 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=e7:e2:3d:94:48:cf:f5:8c:5e:54:98:bd:89:a5:29:a9 rport=60020 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_ACCT msg=audit(1414327986.968:7273): pid=12662 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327986.969:7274): pid=12662 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=12663 suid=74 rport=60020 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327986.969:7275): pid=12662 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1414327986.970:7276): pid=12662 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=LOGIN msg=audit(1414327986.970:7277): pid=12662 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=272 res=1 >type=USER_ROLE_CHANGE msg=audit(1414327987.041:7278): pid=12662 uid=0 auid=0 ses=272 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_START msg=audit(1414327987.057:7279): pid=12662 uid=0 auid=0 ses=272 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1414327987.061:7280): pid=12662 uid=0 auid=0 ses=272 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_START msg=audit(1414327987.061:7281): pid=12662 uid=0 auid=0 ses=272 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327987.063:7282): pid=12665 uid=0 auid=0 ses=272 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=12665 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327987.063:7283): pid=12665 uid=0 auid=0 ses=272 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=12665 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRED_REFR msg=audit(1414327987.064:7284): pid=12665 uid=0 auid=0 ses=272 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_END msg=audit(1414327987.082:7285): pid=12662 uid=0 auid=0 ses=272 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRED_DISP msg=audit(1414327987.082:7286): pid=12662 uid=0 auid=0 ses=272 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_END msg=audit(1414327987.082:7287): pid=12662 uid=0 auid=0 ses=272 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1414327987.083:7288): pid=12662 uid=0 auid=0 ses=272 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327987.083:7289): pid=12662 uid=0 auid=0 ses=272 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=12662 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327987.083:7290): pid=12662 uid=0 auid=0 ses=272 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=12662 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327987.083:7291): pid=12662 uid=0 auid=0 ses=272 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=12662 suid=0 rport=60020 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327990.103:7292): pid=12671 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=12671 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327990.103:7293): pid=12671 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=12671 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414327990.105:7294): pid=12670 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=12671 suid=74 rport=60032 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414327990.105:7295): pid=12670 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=12671 suid=74 rport=60032 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327990.641:7296): pid=12670 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=60032 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327990.642:7297): pid=12670 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=e7:e2:3d:94:48:cf:f5:8c:5e:54:98:bd:89:a5:29:a9 rport=60032 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_ACCT msg=audit(1414327990.646:7298): pid=12670 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327990.646:7299): pid=12670 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=12671 suid=74 rport=60032 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327990.647:7300): pid=12670 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1414327990.648:7301): pid=12670 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=LOGIN msg=audit(1414327990.648:7302): pid=12670 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=273 res=1 >type=USER_ROLE_CHANGE msg=audit(1414327990.721:7303): pid=12670 uid=0 auid=0 ses=273 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_START msg=audit(1414327990.736:7304): pid=12670 uid=0 auid=0 ses=273 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1414327990.740:7305): pid=12670 uid=0 auid=0 ses=273 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_START msg=audit(1414327990.740:7306): pid=12670 uid=0 auid=0 ses=273 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327990.742:7307): pid=12673 uid=0 auid=0 ses=273 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=12673 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327990.742:7308): pid=12673 uid=0 auid=0 ses=273 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=12673 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRED_REFR msg=audit(1414327990.743:7309): pid=12673 uid=0 auid=0 ses=273 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_END msg=audit(1414327990.761:7310): pid=12670 uid=0 auid=0 ses=273 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRED_DISP msg=audit(1414327990.761:7311): pid=12670 uid=0 auid=0 ses=273 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_END msg=audit(1414327990.762:7312): pid=12670 uid=0 auid=0 ses=273 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1414327990.762:7313): pid=12670 uid=0 auid=0 ses=273 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327990.763:7314): pid=12670 uid=0 auid=0 ses=273 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=12670 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327990.763:7315): pid=12670 uid=0 auid=0 ses=273 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=12670 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327990.763:7316): pid=12670 uid=0 auid=0 ses=273 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=12670 suid=0 rport=60032 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327993.795:7317): pid=12681 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=12681 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327993.795:7318): pid=12681 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=12681 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414327993.797:7319): pid=12680 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=12681 suid=74 rport=60043 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414327993.797:7320): pid=12680 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=12681 suid=74 rport=60043 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327994.335:7321): pid=12680 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=60043 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327994.335:7322): pid=12680 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=e7:e2:3d:94:48:cf:f5:8c:5e:54:98:bd:89:a5:29:a9 rport=60043 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_ACCT msg=audit(1414327994.340:7323): pid=12680 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327994.340:7324): pid=12680 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=12681 suid=74 rport=60043 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327994.341:7325): pid=12680 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1414327994.341:7326): pid=12680 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=LOGIN msg=audit(1414327994.342:7327): pid=12680 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=274 res=1 >type=USER_ROLE_CHANGE msg=audit(1414327994.416:7328): pid=12680 uid=0 auid=0 ses=274 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_START msg=audit(1414327994.434:7329): pid=12680 uid=0 auid=0 ses=274 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1414327994.437:7330): pid=12680 uid=0 auid=0 ses=274 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_START msg=audit(1414327994.438:7331): pid=12680 uid=0 auid=0 ses=274 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327994.440:7332): pid=12683 uid=0 auid=0 ses=274 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=12683 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327994.440:7333): pid=12683 uid=0 auid=0 ses=274 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=12683 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRED_REFR msg=audit(1414327994.441:7334): pid=12683 uid=0 auid=0 ses=274 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_END msg=audit(1414327994.458:7335): pid=12680 uid=0 auid=0 ses=274 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRED_DISP msg=audit(1414327994.458:7336): pid=12680 uid=0 auid=0 ses=274 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_END msg=audit(1414327994.459:7337): pid=12680 uid=0 auid=0 ses=274 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1414327994.459:7338): pid=12680 uid=0 auid=0 ses=274 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327994.459:7339): pid=12680 uid=0 auid=0 ses=274 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=12680 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327994.459:7340): pid=12680 uid=0 auid=0 ses=274 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=12680 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327994.459:7341): pid=12680 uid=0 auid=0 ses=274 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=12680 suid=0 rport=60043 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327997.482:7342): pid=12693 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=12693 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327997.483:7343): pid=12693 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=12693 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414327997.484:7344): pid=12692 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=12693 suid=74 rport=60054 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414327997.484:7345): pid=12692 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=12693 suid=74 rport=60054 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327998.021:7346): pid=12692 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=60054 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327998.021:7347): pid=12692 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=e7:e2:3d:94:48:cf:f5:8c:5e:54:98:bd:89:a5:29:a9 rport=60054 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_ACCT msg=audit(1414327998.026:7348): pid=12692 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327998.026:7349): pid=12692 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=12693 suid=74 rport=60054 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414327998.027:7350): pid=12692 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1414327998.028:7351): pid=12692 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=LOGIN msg=audit(1414327998.028:7352): pid=12692 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=275 res=1 >type=USER_ROLE_CHANGE msg=audit(1414327998.106:7353): pid=12692 uid=0 auid=0 ses=275 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_START msg=audit(1414327998.123:7354): pid=12692 uid=0 auid=0 ses=275 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1414327998.127:7355): pid=12692 uid=0 auid=0 ses=275 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_START msg=audit(1414327998.127:7356): pid=12692 uid=0 auid=0 ses=275 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327998.129:7357): pid=12695 uid=0 auid=0 ses=275 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=12695 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327998.130:7358): pid=12695 uid=0 auid=0 ses=275 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=12695 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRED_REFR msg=audit(1414327998.131:7359): pid=12695 uid=0 auid=0 ses=275 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_END msg=audit(1414327998.156:7360): pid=12692 uid=0 auid=0 ses=275 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRED_DISP msg=audit(1414327998.156:7361): pid=12692 uid=0 auid=0 ses=275 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_END msg=audit(1414327998.156:7362): pid=12692 uid=0 auid=0 ses=275 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1414327998.156:7363): pid=12692 uid=0 auid=0 ses=275 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414327998.157:7364): pid=12692 uid=0 auid=0 ses=275 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=12692 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327998.157:7365): pid=12692 uid=0 auid=0 ses=275 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=12692 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414327998.157:7366): pid=12692 uid=0 auid=0 ses=275 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=12692 suid=0 rport=60054 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414328001.185:7367): pid=12701 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=12701 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414328001.185:7368): pid=12701 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=12701 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414328001.187:7369): pid=12700 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=12701 suid=74 rport=60068 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414328001.187:7370): pid=12700 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=12701 suid=74 rport=60068 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414328001.724:7371): pid=12700 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=60068 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414328001.724:7372): pid=12700 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=e7:e2:3d:94:48:cf:f5:8c:5e:54:98:bd:89:a5:29:a9 rport=60068 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_ACCT msg=audit(1414328001.728:7373): pid=12700 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414328001.729:7374): pid=12700 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=12701 suid=74 rport=60068 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414328001.730:7375): pid=12700 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1414328001.730:7376): pid=12700 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=LOGIN msg=audit(1414328001.730:7377): pid=12700 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=276 res=1 >type=USER_ROLE_CHANGE msg=audit(1414328001.807:7378): pid=12700 uid=0 auid=0 ses=276 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_START msg=audit(1414328001.824:7379): pid=12700 uid=0 auid=0 ses=276 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1414328001.828:7380): pid=12700 uid=0 auid=0 ses=276 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_START msg=audit(1414328001.828:7381): pid=12700 uid=0 auid=0 ses=276 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414328001.830:7382): pid=12703 uid=0 auid=0 ses=276 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=12703 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414328001.830:7383): pid=12703 uid=0 auid=0 ses=276 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=12703 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRED_REFR msg=audit(1414328001.831:7384): pid=12703 uid=0 auid=0 ses=276 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_END msg=audit(1414328001.848:7385): pid=12700 uid=0 auid=0 ses=276 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRED_DISP msg=audit(1414328001.848:7386): pid=12700 uid=0 auid=0 ses=276 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_END msg=audit(1414328001.849:7387): pid=12700 uid=0 auid=0 ses=276 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1414328001.849:7388): pid=12700 uid=0 auid=0 ses=276 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414328001.849:7389): pid=12700 uid=0 auid=0 ses=276 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=12700 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414328001.849:7390): pid=12700 uid=0 auid=0 ses=276 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=12700 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414328001.850:7391): pid=12700 uid=0 auid=0 ses=276 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=12700 suid=0 rport=60068 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=SERVICE_START msg=audit(1414328003.863:7392): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="neutron-l3-agent" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=CRYPTO_KEY_USER msg=audit(1414328004.876:7393): pid=12713 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=12713 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414328004.877:7394): pid=12713 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=12713 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414328004.880:7395): pid=12712 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=12713 suid=74 rport=60077 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414328004.880:7396): pid=12712 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=12713 suid=74 rport=60077 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414328005.417:7397): pid=12712 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=60077 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414328005.417:7398): pid=12712 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=e7:e2:3d:94:48:cf:f5:8c:5e:54:98:bd:89:a5:29:a9 rport=60077 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_ACCT msg=audit(1414328005.421:7399): pid=12712 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414328005.422:7400): pid=12712 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=12713 suid=74 rport=60077 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414328005.423:7401): pid=12712 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1414328005.423:7402): pid=12712 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=LOGIN msg=audit(1414328005.423:7403): pid=12712 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=277 res=1 >type=USER_ROLE_CHANGE msg=audit(1414328005.500:7404): pid=12712 uid=0 auid=0 ses=277 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_START msg=audit(1414328005.516:7405): pid=12712 uid=0 auid=0 ses=277 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1414328005.519:7406): pid=12712 uid=0 auid=0 ses=277 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_START msg=audit(1414328005.520:7407): pid=12712 uid=0 auid=0 ses=277 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414328005.521:7408): pid=12719 uid=0 auid=0 ses=277 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=12719 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414328005.522:7409): pid=12719 uid=0 auid=0 ses=277 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=12719 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRED_REFR msg=audit(1414328005.522:7410): pid=12719 uid=0 auid=0 ses=277 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_END msg=audit(1414328005.542:7411): pid=12712 uid=0 auid=0 ses=277 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRED_DISP msg=audit(1414328005.543:7412): pid=12712 uid=0 auid=0 ses=277 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_END msg=audit(1414328005.543:7413): pid=12712 uid=0 auid=0 ses=277 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1414328005.543:7414): pid=12712 uid=0 auid=0 ses=277 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414328005.544:7415): pid=12712 uid=0 auid=0 ses=277 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=12712 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414328005.544:7416): pid=12712 uid=0 auid=0 ses=277 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=12712 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414328005.544:7417): pid=12712 uid=0 auid=0 ses=277 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=12712 suid=0 rport=60077 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=ADD_GROUP msg=audit(1414328006.520:7418): pid=12722 uid=0 auid=0 ses=261 subj=unconfined_u:system_r:useradd_t:s0-s0:c0.c1023 msg='op=adding group acct="apache" exe="/usr/sbin/useradd" hostname=? addr=? terminal=? res=success' >type=ADD_USER msg=audit(1414328006.521:7419): pid=12722 uid=0 auid=0 ses=261 subj=unconfined_u:system_r:useradd_t:s0-s0:c0.c1023 msg='op=adding user id=48 exe="/usr/sbin/useradd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414328008.575:7420): pid=12742 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=12742 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414328008.576:7421): pid=12742 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=12742 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414328008.580:7422): pid=12741 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=12742 suid=74 rport=60078 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414328008.580:7423): pid=12741 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=12742 suid=74 rport=60078 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414328009.120:7424): pid=12741 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=60078 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414328009.120:7425): pid=12741 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=e7:e2:3d:94:48:cf:f5:8c:5e:54:98:bd:89:a5:29:a9 rport=60078 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_ACCT msg=audit(1414328009.125:7426): pid=12741 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414328009.126:7427): pid=12741 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=12742 suid=74 rport=60078 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414328009.127:7428): pid=12741 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1414328009.127:7429): pid=12741 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=LOGIN msg=audit(1414328009.127:7430): pid=12741 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=278 res=1 >type=USER_ROLE_CHANGE msg=audit(1414328009.203:7431): pid=12741 uid=0 auid=0 ses=278 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_START msg=audit(1414328009.265:7432): pid=12741 uid=0 auid=0 ses=278 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1414328009.270:7433): pid=12741 uid=0 auid=0 ses=278 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_START msg=audit(1414328009.271:7434): pid=12741 uid=0 auid=0 ses=278 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414328009.273:7435): pid=12744 uid=0 auid=0 ses=278 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=12744 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414328009.273:7436): pid=12744 uid=0 auid=0 ses=278 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=12744 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRED_REFR msg=audit(1414328009.274:7437): pid=12744 uid=0 auid=0 ses=278 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_END msg=audit(1414328009.290:7438): pid=12741 uid=0 auid=0 ses=278 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRED_DISP msg=audit(1414328009.290:7439): pid=12741 uid=0 auid=0 ses=278 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_END msg=audit(1414328009.291:7440): pid=12741 uid=0 auid=0 ses=278 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1414328009.291:7441): pid=12741 uid=0 auid=0 ses=278 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414328009.291:7442): pid=12741 uid=0 auid=0 ses=278 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=12741 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414328009.291:7443): pid=12741 uid=0 auid=0 ses=278 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=12741 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414328009.291:7444): pid=12741 uid=0 auid=0 ses=278 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=12741 suid=0 rport=60078 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414328012.324:7445): pid=12752 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=12752 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414328012.324:7446): pid=12752 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=12752 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414328012.327:7447): pid=12751 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=12752 suid=74 rport=60079 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414328012.327:7448): pid=12751 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=12752 suid=74 rport=60079 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414328012.869:7449): pid=12751 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=60079 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414328012.869:7450): pid=12751 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=e7:e2:3d:94:48:cf:f5:8c:5e:54:98:bd:89:a5:29:a9 rport=60079 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_ACCT msg=audit(1414328012.873:7451): pid=12751 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414328012.874:7452): pid=12751 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=12752 suid=74 rport=60079 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414328012.875:7453): pid=12751 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1414328012.876:7454): pid=12751 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=LOGIN msg=audit(1414328012.876:7455): pid=12751 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=279 res=1 >type=USER_ROLE_CHANGE msg=audit(1414328012.950:7456): pid=12751 uid=0 auid=0 ses=279 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_START msg=audit(1414328012.966:7457): pid=12751 uid=0 auid=0 ses=279 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1414328012.970:7458): pid=12751 uid=0 auid=0 ses=279 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_START msg=audit(1414328012.970:7459): pid=12751 uid=0 auid=0 ses=279 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414328012.972:7460): pid=12754 uid=0 auid=0 ses=279 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=12754 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414328012.972:7461): pid=12754 uid=0 auid=0 ses=279 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=12754 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRED_REFR msg=audit(1414328012.973:7462): pid=12754 uid=0 auid=0 ses=279 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_END msg=audit(1414328012.990:7463): pid=12751 uid=0 auid=0 ses=279 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRED_DISP msg=audit(1414328012.991:7464): pid=12751 uid=0 auid=0 ses=279 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_END msg=audit(1414328012.991:7465): pid=12751 uid=0 auid=0 ses=279 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1414328012.992:7466): pid=12751 uid=0 auid=0 ses=279 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414328012.992:7467): pid=12751 uid=0 auid=0 ses=279 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=12751 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414328012.992:7468): pid=12751 uid=0 auid=0 ses=279 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=12751 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414328012.992:7469): pid=12751 uid=0 auid=0 ses=279 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=12751 suid=0 rport=60079 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414328016.032:7470): pid=12770 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=12770 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414328016.033:7471): pid=12770 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=12770 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414328016.034:7472): pid=12769 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=12770 suid=74 rport=60080 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414328016.034:7473): pid=12769 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=12770 suid=74 rport=60080 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414328016.581:7474): pid=12769 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=60080 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414328016.581:7475): pid=12769 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=e7:e2:3d:94:48:cf:f5:8c:5e:54:98:bd:89:a5:29:a9 rport=60080 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_ACCT msg=audit(1414328016.585:7476): pid=12769 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414328016.586:7477): pid=12769 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=12770 suid=74 rport=60080 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414328016.587:7478): pid=12769 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1414328016.587:7479): pid=12769 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=LOGIN msg=audit(1414328016.587:7480): pid=12769 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=280 res=1 >type=USER_ROLE_CHANGE msg=audit(1414328016.667:7481): pid=12769 uid=0 auid=0 ses=280 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_START msg=audit(1414328016.684:7482): pid=12769 uid=0 auid=0 ses=280 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1414328016.688:7483): pid=12769 uid=0 auid=0 ses=280 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_START msg=audit(1414328016.688:7484): pid=12769 uid=0 auid=0 ses=280 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414328016.690:7485): pid=12772 uid=0 auid=0 ses=280 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=12772 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414328016.690:7486): pid=12772 uid=0 auid=0 ses=280 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=12772 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRED_REFR msg=audit(1414328016.691:7487): pid=12772 uid=0 auid=0 ses=280 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_END msg=audit(1414328016.707:7488): pid=12769 uid=0 auid=0 ses=280 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRED_DISP msg=audit(1414328016.707:7489): pid=12769 uid=0 auid=0 ses=280 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_END msg=audit(1414328016.707:7490): pid=12769 uid=0 auid=0 ses=280 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1414328016.708:7491): pid=12769 uid=0 auid=0 ses=280 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414328016.708:7492): pid=12769 uid=0 auid=0 ses=280 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=12769 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414328016.708:7493): pid=12769 uid=0 auid=0 ses=280 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=12769 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414328016.708:7494): pid=12769 uid=0 auid=0 ses=280 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=12769 suid=0 rport=60080 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414328019.729:7495): pid=12778 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=12778 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414328019.730:7496): pid=12778 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=12778 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414328019.731:7497): pid=12777 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=12778 suid=74 rport=60081 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414328019.731:7498): pid=12777 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=12778 suid=74 rport=60081 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414328020.268:7499): pid=12777 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=60081 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414328020.268:7500): pid=12777 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=e7:e2:3d:94:48:cf:f5:8c:5e:54:98:bd:89:a5:29:a9 rport=60081 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_ACCT msg=audit(1414328020.273:7501): pid=12777 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414328020.273:7502): pid=12777 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=12778 suid=74 rport=60081 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414328020.274:7503): pid=12777 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1414328020.274:7504): pid=12777 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=LOGIN msg=audit(1414328020.275:7505): pid=12777 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=281 res=1 >type=USER_ROLE_CHANGE msg=audit(1414328020.346:7506): pid=12777 uid=0 auid=0 ses=281 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_START msg=audit(1414328020.364:7507): pid=12777 uid=0 auid=0 ses=281 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1414328020.369:7508): pid=12777 uid=0 auid=0 ses=281 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_START msg=audit(1414328020.369:7509): pid=12777 uid=0 auid=0 ses=281 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414328020.371:7510): pid=12780 uid=0 auid=0 ses=281 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=12780 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414328020.371:7511): pid=12780 uid=0 auid=0 ses=281 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=12780 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRED_REFR msg=audit(1414328020.372:7512): pid=12780 uid=0 auid=0 ses=281 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_END msg=audit(1414328020.388:7513): pid=12777 uid=0 auid=0 ses=281 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRED_DISP msg=audit(1414328020.389:7514): pid=12777 uid=0 auid=0 ses=281 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_END msg=audit(1414328020.389:7515): pid=12777 uid=0 auid=0 ses=281 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1414328020.389:7516): pid=12777 uid=0 auid=0 ses=281 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414328020.389:7517): pid=12777 uid=0 auid=0 ses=281 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=12777 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414328020.389:7518): pid=12777 uid=0 auid=0 ses=281 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=12777 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414328020.389:7519): pid=12777 uid=0 auid=0 ses=281 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=12777 suid=0 rport=60081 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414328023.412:7520): pid=12788 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=12788 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414328023.413:7521): pid=12788 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=12788 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414328023.414:7522): pid=12787 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=12788 suid=74 rport=60082 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414328023.414:7523): pid=12787 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=12788 suid=74 rport=60082 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414328023.951:7524): pid=12787 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=60082 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414328023.951:7525): pid=12787 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=e7:e2:3d:94:48:cf:f5:8c:5e:54:98:bd:89:a5:29:a9 rport=60082 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_ACCT msg=audit(1414328023.957:7526): pid=12787 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414328023.957:7527): pid=12787 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=12788 suid=74 rport=60082 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414328023.958:7528): pid=12787 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1414328023.959:7529): pid=12787 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=LOGIN msg=audit(1414328023.959:7530): pid=12787 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=282 res=1 >type=USER_ROLE_CHANGE msg=audit(1414328024.034:7531): pid=12787 uid=0 auid=0 ses=282 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_CMD msg=audit(1414328024.050:7532): pid=12790 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D4320766773202D2D6E6F68656164696E6773202D2D756E69743D67202D6F206E616D652C73697A652C667265652C6C765F636F756E742C75756964202D2D736570617261746F72203A202D2D6E6F7375666669782063696E6465722D766F6C756D6573 terminal=? res=success' >type=CRED_ACQ msg=audit(1414328024.051:7533): pid=12790 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1414328024.052:7534): pid=12787 uid=0 auid=0 ses=282 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_START msg=audit(1414328024.052:7535): pid=12790 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_LOGIN msg=audit(1414328024.056:7536): pid=12787 uid=0 auid=0 ses=282 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_START msg=audit(1414328024.056:7537): pid=12787 uid=0 auid=0 ses=282 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414328024.058:7538): pid=12792 uid=0 auid=0 ses=282 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=12792 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414328024.058:7539): pid=12792 uid=0 auid=0 ses=282 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=12792 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRED_REFR msg=audit(1414328024.059:7540): pid=12792 uid=0 auid=0 ses=282 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_END msg=audit(1414328024.083:7541): pid=12787 uid=0 auid=0 ses=282 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRED_DISP msg=audit(1414328024.083:7542): pid=12787 uid=0 auid=0 ses=282 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_END msg=audit(1414328024.084:7543): pid=12787 uid=0 auid=0 ses=282 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1414328024.084:7544): pid=12787 uid=0 auid=0 ses=282 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414328024.084:7545): pid=12787 uid=0 auid=0 ses=282 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=12787 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414328024.084:7546): pid=12787 uid=0 auid=0 ses=282 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=12787 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414328024.084:7547): pid=12787 uid=0 auid=0 ses=282 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=12787 suid=0 rport=60082 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_END msg=audit(1414328024.133:7548): pid=12790 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1414328024.133:7549): pid=12790 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414328027.098:7550): pid=12799 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=12799 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414328027.098:7551): pid=12799 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=12799 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414328027.099:7552): pid=12798 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=12799 suid=74 rport=60083 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414328027.099:7553): pid=12798 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=12799 suid=74 rport=60083 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414328027.638:7554): pid=12798 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=60083 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414328027.638:7555): pid=12798 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=e7:e2:3d:94:48:cf:f5:8c:5e:54:98:bd:89:a5:29:a9 rport=60083 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_ACCT msg=audit(1414328027.642:7556): pid=12798 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414328027.642:7557): pid=12798 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=12799 suid=74 rport=60083 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414328027.643:7558): pid=12798 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1414328027.643:7559): pid=12798 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=LOGIN msg=audit(1414328027.643:7560): pid=12798 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=283 res=1 >type=USER_ROLE_CHANGE msg=audit(1414328027.715:7561): pid=12798 uid=0 auid=0 ses=283 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_START msg=audit(1414328027.732:7562): pid=12798 uid=0 auid=0 ses=283 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1414328027.736:7563): pid=12798 uid=0 auid=0 ses=283 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_START msg=audit(1414328027.736:7564): pid=12798 uid=0 auid=0 ses=283 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414328027.737:7565): pid=12801 uid=0 auid=0 ses=283 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=12801 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414328027.738:7566): pid=12801 uid=0 auid=0 ses=283 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=12801 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRED_REFR msg=audit(1414328027.738:7567): pid=12801 uid=0 auid=0 ses=283 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_END msg=audit(1414328027.757:7568): pid=12798 uid=0 auid=0 ses=283 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRED_DISP msg=audit(1414328027.757:7569): pid=12798 uid=0 auid=0 ses=283 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_END msg=audit(1414328027.757:7570): pid=12798 uid=0 auid=0 ses=283 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1414328027.757:7571): pid=12798 uid=0 auid=0 ses=283 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414328027.758:7572): pid=12798 uid=0 auid=0 ses=283 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=12798 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414328027.758:7573): pid=12798 uid=0 auid=0 ses=283 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=12798 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414328027.758:7574): pid=12798 uid=0 auid=0 ses=283 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=12798 suid=0 rport=60083 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=MAC_CONFIG_CHANGE msg=audit(1414328027.995:7575): bool=httpd_can_network_connect val=1 old_val=0 auid=0 ses=261 >type=SYSCALL msg=audit(1414328027.995:7575): arch=c000003e syscall=1 success=yes exit=2 a0=4 a1=7fff5627b050 a2=2 a3=7fff5627ae10 items=0 ppid=12764 pid=12765 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=261 comm="setsebool" exe="/usr/sbin/setsebool" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null) >type=MAC_POLICY_LOAD msg=audit(1414328028.151:7576): policy loaded auid=0 ses=261 >type=SYSCALL msg=audit(1414328028.151:7576): arch=c000003e syscall=1 success=yes exit=3591907 a0=4 a1=7ffb03184010 a2=36cee3 a3=7fffcc8eccf0 items=0 ppid=12765 pid=12803 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=261 comm="load_policy" exe="/usr/sbin/load_policy" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null) >type=CRYPTO_KEY_USER msg=audit(1414328030.787:7577): pid=12828 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=12828 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414328030.787:7578): pid=12828 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=12828 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414328030.788:7579): pid=12827 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=12828 suid=74 rport=60084 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414328030.788:7580): pid=12827 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=12828 suid=74 rport=60084 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414328031.323:7581): pid=12827 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=60084 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414328031.323:7582): pid=12827 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=e7:e2:3d:94:48:cf:f5:8c:5e:54:98:bd:89:a5:29:a9 rport=60084 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_ACCT msg=audit(1414328031.327:7583): pid=12827 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414328031.327:7584): pid=12827 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=12828 suid=74 rport=60084 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414328031.328:7585): pid=12827 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1414328031.328:7586): pid=12827 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=LOGIN msg=audit(1414328031.328:7587): pid=12827 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=284 res=1 >type=USER_ROLE_CHANGE msg=audit(1414328031.402:7588): pid=12827 uid=0 auid=0 ses=284 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_AVC msg=audit(1414328031.414:7589): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='avc: received policyload notice (seqno=25) exe="/usr/lib/systemd/systemd" sauid=0 hostname=? addr=? terminal=?' >type=USER_AVC msg=audit(1414328031.414:7590): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='avc: received policyload notice (seqno=26) exe="/usr/lib/systemd/systemd" sauid=0 hostname=? addr=? terminal=?' >type=USER_START msg=audit(1414328031.423:7591): pid=12827 uid=0 auid=0 ses=284 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1414328031.426:7592): pid=12827 uid=0 auid=0 ses=284 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_START msg=audit(1414328031.426:7593): pid=12827 uid=0 auid=0 ses=284 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414328031.428:7594): pid=12830 uid=0 auid=0 ses=284 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=12830 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414328031.428:7595): pid=12830 uid=0 auid=0 ses=284 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=12830 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRED_REFR msg=audit(1414328031.429:7596): pid=12830 uid=0 auid=0 ses=284 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_END msg=audit(1414328031.452:7597): pid=12827 uid=0 auid=0 ses=284 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRED_DISP msg=audit(1414328031.452:7598): pid=12827 uid=0 auid=0 ses=284 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_END msg=audit(1414328031.452:7599): pid=12827 uid=0 auid=0 ses=284 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1414328031.453:7600): pid=12827 uid=0 auid=0 ses=284 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414328031.453:7601): pid=12827 uid=0 auid=0 ses=284 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=12827 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414328031.453:7602): pid=12827 uid=0 auid=0 ses=284 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=12827 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414328031.453:7603): pid=12827 uid=0 auid=0 ses=284 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=12827 suid=0 rport=60084 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=SERVICE_START msg=audit(1414328034.404:7604): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="httpd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414328034.466:7605): pid=12958 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=12958 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414328034.466:7606): pid=12958 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=12958 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414328034.467:7607): pid=12957 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=12958 suid=74 rport=60085 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414328034.467:7608): pid=12957 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=12958 suid=74 rport=60085 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414328035.010:7609): pid=12957 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=60085 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414328035.010:7610): pid=12957 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=e7:e2:3d:94:48:cf:f5:8c:5e:54:98:bd:89:a5:29:a9 rport=60085 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_ACCT msg=audit(1414328035.015:7611): pid=12957 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414328035.016:7612): pid=12957 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=12958 suid=74 rport=60085 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414328035.017:7613): pid=12957 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1414328035.017:7614): pid=12957 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=LOGIN msg=audit(1414328035.017:7615): pid=12957 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=285 res=1 >type=USER_ROLE_CHANGE msg=audit(1414328035.091:7616): pid=12957 uid=0 auid=0 ses=285 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_START msg=audit(1414328035.163:7617): pid=12957 uid=0 auid=0 ses=285 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1414328035.168:7618): pid=12957 uid=0 auid=0 ses=285 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_START msg=audit(1414328035.168:7619): pid=12957 uid=0 auid=0 ses=285 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414328035.169:7620): pid=12968 uid=0 auid=0 ses=285 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=12968 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414328035.169:7621): pid=12968 uid=0 auid=0 ses=285 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=12968 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRED_REFR msg=audit(1414328035.169:7622): pid=12968 uid=0 auid=0 ses=285 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_END msg=audit(1414328035.189:7623): pid=12957 uid=0 auid=0 ses=285 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRED_DISP msg=audit(1414328035.189:7624): pid=12957 uid=0 auid=0 ses=285 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_END msg=audit(1414328035.190:7625): pid=12957 uid=0 auid=0 ses=285 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1414328035.190:7626): pid=12957 uid=0 auid=0 ses=285 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414328035.190:7627): pid=12957 uid=0 auid=0 ses=285 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=12957 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414328035.190:7628): pid=12957 uid=0 auid=0 ses=285 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=12957 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414328035.190:7629): pid=12957 uid=0 auid=0 ses=285 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=12957 suid=0 rport=60085 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414328035.214:7630): pid=12974 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=12974 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414328035.214:7631): pid=12974 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=12974 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414328035.215:7632): pid=12973 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=12974 suid=74 rport=60086 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414328035.215:7633): pid=12973 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=12974 suid=74 rport=60086 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414328035.752:7634): pid=12973 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=60086 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414328035.752:7635): pid=12973 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=e7:e2:3d:94:48:cf:f5:8c:5e:54:98:bd:89:a5:29:a9 rport=60086 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_ACCT msg=audit(1414328035.755:7636): pid=12973 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414328035.755:7637): pid=12973 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=12974 suid=74 rport=60086 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414328035.756:7638): pid=12973 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1414328035.757:7639): pid=12973 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=LOGIN msg=audit(1414328035.757:7640): pid=12973 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=286 res=1 >type=USER_ROLE_CHANGE msg=audit(1414328035.820:7641): pid=12973 uid=0 auid=0 ses=286 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_START msg=audit(1414328035.835:7642): pid=12973 uid=0 auid=0 ses=286 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1414328035.840:7643): pid=12973 uid=0 auid=0 ses=286 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_START msg=audit(1414328035.840:7644): pid=12973 uid=0 auid=0 ses=286 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414328035.841:7645): pid=12978 uid=0 auid=0 ses=286 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=12978 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414328035.841:7646): pid=12978 uid=0 auid=0 ses=286 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=12978 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRED_REFR msg=audit(1414328035.842:7647): pid=12978 uid=0 auid=0 ses=286 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_END msg=audit(1414328035.851:7648): pid=12973 uid=0 auid=0 ses=286 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1414328035.851:7649): pid=12973 uid=0 auid=0 ses=286 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_END msg=audit(1414328035.857:7650): pid=12973 uid=0 auid=0 ses=286 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRED_DISP msg=audit(1414328035.857:7651): pid=12973 uid=0 auid=0 ses=286 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414328035.857:7652): pid=12973 uid=0 auid=0 ses=286 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=12973 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414328035.857:7653): pid=12973 uid=0 auid=0 ses=286 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=12973 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414328035.857:7654): pid=12973 uid=0 auid=0 ses=286 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=12973 suid=0 rport=60086 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=NETFILTER_CFG msg=audit(1414328037.938:7655): table=filter family=2 entries=0 >type=NETFILTER_CFG msg=audit(1414328037.938:7655): table=nat family=2 entries=0 >type=NETFILTER_CFG msg=audit(1414328037.938:7655): table=mangle family=2 entries=0 >type=NETFILTER_CFG msg=audit(1414328037.938:7655): table=filter family=10 entries=0 >type=SYSCALL msg=audit(1414328037.938:7655): arch=c000003e syscall=272 success=yes exit=0 a0=40000000 a1=c0 a2=0 a3=7fff997c5730 items=0 ppid=13217 pid=13224 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=260 comm="ip" exe="/usr/sbin/ip" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null) >type=NETFILTER_CFG msg=audit(1414328038.004:7656): table=filter family=2 entries=0 >type=NETFILTER_CFG msg=audit(1414328038.004:7656): table=nat family=2 entries=0 >type=NETFILTER_CFG msg=audit(1414328038.004:7656): table=mangle family=2 entries=0 >type=NETFILTER_CFG msg=audit(1414328038.004:7656): table=filter family=10 entries=0 >type=SYSCALL msg=audit(1414328038.004:7656): arch=c000003e syscall=272 success=yes exit=0 a0=40000000 a1=c0 a2=0 a3=7fffd242f280 items=0 ppid=13217 pid=13231 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=260 comm="ip" exe="/usr/sbin/ip" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null) >type=NETFILTER_CFG msg=audit(1414328038.359:7657): table=filter family=2 entries=0 >type=NETFILTER_CFG msg=audit(1414328038.359:7657): table=nat family=2 entries=0 >type=NETFILTER_CFG msg=audit(1414328038.359:7657): table=mangle family=2 entries=0 >type=NETFILTER_CFG msg=audit(1414328038.359:7657): table=filter family=10 entries=0 >type=SYSCALL msg=audit(1414328038.359:7657): arch=c000003e syscall=272 success=yes exit=0 a0=40000000 a1=c0 a2=0 a3=7fff5a25cbf0 items=0 ppid=13217 pid=13233 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=260 comm="ip" exe="/usr/sbin/ip" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null) >type=CRYPTO_KEY_USER msg=audit(1414328038.879:7658): pid=13252 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=13252 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414328038.879:7659): pid=13252 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=13252 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414328038.881:7660): pid=13251 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=13252 suid=74 rport=60087 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414328038.881:7661): pid=13251 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=13252 suid=74 rport=60087 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414328039.416:7662): pid=13251 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=60087 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414328039.417:7663): pid=13251 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=e7:e2:3d:94:48:cf:f5:8c:5e:54:98:bd:89:a5:29:a9 rport=60087 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_ACCT msg=audit(1414328039.420:7664): pid=13251 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414328039.421:7665): pid=13251 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=13252 suid=74 rport=60087 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414328039.422:7666): pid=13251 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1414328039.422:7667): pid=13251 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=LOGIN msg=audit(1414328039.422:7668): pid=13251 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=287 res=1 >type=USER_ROLE_CHANGE msg=audit(1414328039.490:7669): pid=13251 uid=0 auid=0 ses=287 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_START msg=audit(1414328039.507:7670): pid=13251 uid=0 auid=0 ses=287 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1414328039.511:7671): pid=13251 uid=0 auid=0 ses=287 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_START msg=audit(1414328039.511:7672): pid=13251 uid=0 auid=0 ses=287 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414328039.513:7673): pid=13254 uid=0 auid=0 ses=287 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=13254 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414328039.513:7674): pid=13254 uid=0 auid=0 ses=287 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=13254 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRED_REFR msg=audit(1414328039.514:7675): pid=13254 uid=0 auid=0 ses=287 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_END msg=audit(1414328039.528:7676): pid=13251 uid=0 auid=0 ses=287 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRED_DISP msg=audit(1414328039.528:7677): pid=13251 uid=0 auid=0 ses=287 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_END msg=audit(1414328039.529:7678): pid=13251 uid=0 auid=0 ses=287 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1414328039.529:7679): pid=13251 uid=0 auid=0 ses=287 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414328039.529:7680): pid=13251 uid=0 auid=0 ses=287 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=13251 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414328039.529:7681): pid=13251 uid=0 auid=0 ses=287 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=13251 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414328039.529:7682): pid=13251 uid=0 auid=0 ses=287 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=13251 suid=0 rport=60087 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_ACCT msg=audit(1414328041.646:7683): pid=13282 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="keystone" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1414328041.646:7684): pid=13282 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="keystone" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1414328041.648:7685): pid=13282 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=163 old-ses=4294967295 ses=288 res=1 >type=USER_START msg=audit(1414328041.659:7686): pid=13282 uid=0 auid=163 ses=288 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="keystone" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1414328041.659:7687): pid=13282 uid=0 auid=163 ses=288 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="keystone" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1414328042.325:7688): pid=13282 uid=0 auid=163 ses=288 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="keystone" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1414328042.328:7689): pid=13282 uid=0 auid=163 ses=288 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="keystone" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRYPTO_KEY_USER msg=audit(1414328042.551:7690): pid=13302 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=13302 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414328042.551:7691): pid=13302 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=13302 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414328042.552:7692): pid=13301 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=13302 suid=74 rport=60089 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414328042.552:7693): pid=13301 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=13302 suid=74 rport=60089 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414328043.090:7694): pid=13301 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=60089 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414328043.090:7695): pid=13301 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=e7:e2:3d:94:48:cf:f5:8c:5e:54:98:bd:89:a5:29:a9 rport=60089 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_ACCT msg=audit(1414328043.094:7696): pid=13301 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414328043.094:7697): pid=13301 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=13302 suid=74 rport=60089 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414328043.095:7698): pid=13301 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1414328043.095:7699): pid=13301 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=LOGIN msg=audit(1414328043.095:7700): pid=13301 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=289 res=1 >type=USER_ROLE_CHANGE msg=audit(1414328043.165:7701): pid=13301 uid=0 auid=0 ses=289 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_START msg=audit(1414328043.182:7702): pid=13301 uid=0 auid=0 ses=289 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1414328043.186:7703): pid=13301 uid=0 auid=0 ses=289 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_START msg=audit(1414328043.186:7704): pid=13301 uid=0 auid=0 ses=289 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414328043.188:7705): pid=13304 uid=0 auid=0 ses=289 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=13304 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414328043.188:7706): pid=13304 uid=0 auid=0 ses=289 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=13304 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRED_REFR msg=audit(1414328043.189:7707): pid=13304 uid=0 auid=0 ses=289 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_END msg=audit(1414328043.204:7708): pid=13301 uid=0 auid=0 ses=289 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRED_DISP msg=audit(1414328043.205:7709): pid=13301 uid=0 auid=0 ses=289 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_END msg=audit(1414328043.205:7710): pid=13301 uid=0 auid=0 ses=289 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1414328043.205:7711): pid=13301 uid=0 auid=0 ses=289 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414328043.206:7712): pid=13301 uid=0 auid=0 ses=289 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=13301 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414328043.206:7713): pid=13301 uid=0 auid=0 ses=289 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=13301 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414328043.206:7714): pid=13301 uid=0 auid=0 ses=289 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=13301 suid=0 rport=60089 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414328043.221:7715): pid=13308 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=13308 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414328043.221:7716): pid=13308 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=13308 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414328043.224:7717): pid=13307 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=13308 suid=74 rport=60090 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414328043.224:7718): pid=13307 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=13308 suid=74 rport=60090 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414328043.761:7719): pid=13307 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=60090 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414328043.761:7720): pid=13307 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=e7:e2:3d:94:48:cf:f5:8c:5e:54:98:bd:89:a5:29:a9 rport=60090 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_ACCT msg=audit(1414328043.764:7721): pid=13307 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414328043.765:7722): pid=13307 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=13308 suid=74 rport=60090 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414328043.766:7723): pid=13307 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1414328043.766:7724): pid=13307 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=LOGIN msg=audit(1414328043.766:7725): pid=13307 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=290 res=1 >type=USER_ROLE_CHANGE msg=audit(1414328043.832:7726): pid=13307 uid=0 auid=0 ses=290 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_START msg=audit(1414328043.846:7727): pid=13307 uid=0 auid=0 ses=290 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1414328043.850:7728): pid=13307 uid=0 auid=0 ses=290 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_START msg=audit(1414328043.850:7729): pid=13307 uid=0 auid=0 ses=290 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414328043.852:7730): pid=13310 uid=0 auid=0 ses=290 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=13310 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414328043.852:7731): pid=13310 uid=0 auid=0 ses=290 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=13310 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRED_REFR msg=audit(1414328043.853:7732): pid=13310 uid=0 auid=0 ses=290 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_END msg=audit(1414328043.868:7733): pid=13307 uid=0 auid=0 ses=290 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRED_DISP msg=audit(1414328043.868:7734): pid=13307 uid=0 auid=0 ses=290 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_END msg=audit(1414328043.868:7735): pid=13307 uid=0 auid=0 ses=290 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1414328043.868:7736): pid=13307 uid=0 auid=0 ses=290 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414328043.868:7737): pid=13307 uid=0 auid=0 ses=290 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=13307 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414328043.869:7738): pid=13307 uid=0 auid=0 ses=290 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=13307 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414328043.869:7739): pid=13307 uid=0 auid=0 ses=290 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=13307 suid=0 rport=60090 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414328043.893:7740): pid=13321 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=13321 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414328043.893:7741): pid=13321 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=13321 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414328043.897:7742): pid=13320 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=13321 suid=74 rport=60091 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414328043.897:7743): pid=13320 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=13321 suid=74 rport=60091 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414328044.435:7744): pid=13320 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=60091 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414328044.435:7745): pid=13320 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=e7:e2:3d:94:48:cf:f5:8c:5e:54:98:bd:89:a5:29:a9 rport=60091 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_ACCT msg=audit(1414328044.439:7746): pid=13320 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414328044.440:7747): pid=13320 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=13321 suid=74 rport=60091 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414328044.441:7748): pid=13320 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1414328044.441:7749): pid=13320 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=LOGIN msg=audit(1414328044.441:7750): pid=13320 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=291 res=1 >type=USER_ROLE_CHANGE msg=audit(1414328044.507:7751): pid=13320 uid=0 auid=0 ses=291 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_START msg=audit(1414328044.522:7752): pid=13320 uid=0 auid=0 ses=291 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1414328044.526:7753): pid=13320 uid=0 auid=0 ses=291 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_START msg=audit(1414328044.526:7754): pid=13320 uid=0 auid=0 ses=291 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414328044.528:7755): pid=13329 uid=0 auid=0 ses=291 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=13329 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414328044.528:7756): pid=13329 uid=0 auid=0 ses=291 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=13329 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRED_REFR msg=audit(1414328044.528:7757): pid=13329 uid=0 auid=0 ses=291 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_END msg=audit(1414328044.543:7758): pid=13320 uid=0 auid=0 ses=291 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRED_DISP msg=audit(1414328044.543:7759): pid=13320 uid=0 auid=0 ses=291 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_END msg=audit(1414328044.543:7760): pid=13320 uid=0 auid=0 ses=291 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1414328044.543:7761): pid=13320 uid=0 auid=0 ses=291 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414328044.544:7762): pid=13320 uid=0 auid=0 ses=291 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=13320 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414328044.544:7763): pid=13320 uid=0 auid=0 ses=291 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=13320 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414328044.544:7764): pid=13320 uid=0 auid=0 ses=291 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=13320 suid=0 rport=60091 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=NETFILTER_CFG msg=audit(1414328046.864:7765): table=filter family=2 entries=0 >type=NETFILTER_CFG msg=audit(1414328046.864:7765): table=nat family=2 entries=0 >type=NETFILTER_CFG msg=audit(1414328046.864:7765): table=mangle family=2 entries=0 >type=NETFILTER_CFG msg=audit(1414328046.864:7765): table=filter family=10 entries=0 >type=SYSCALL msg=audit(1414328046.864:7765): arch=c000003e syscall=272 success=yes exit=0 a0=40000000 a1=c0 a2=0 a3=7fff98d2e210 items=0 ppid=13568 pid=13575 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=290 comm="ip" exe="/usr/sbin/ip" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null) >type=NETFILTER_CFG msg=audit(1414328046.935:7766): table=filter family=2 entries=0 >type=NETFILTER_CFG msg=audit(1414328046.935:7766): table=nat family=2 entries=0 >type=NETFILTER_CFG msg=audit(1414328046.935:7766): table=mangle family=2 entries=0 >type=NETFILTER_CFG msg=audit(1414328046.935:7766): table=filter family=10 entries=0 >type=SYSCALL msg=audit(1414328046.935:7766): arch=c000003e syscall=272 success=yes exit=0 a0=40000000 a1=c0 a2=0 a3=7fff96916b70 items=0 ppid=13568 pid=13582 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=290 comm="ip" exe="/usr/sbin/ip" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null) >type=NETFILTER_CFG msg=audit(1414328047.267:7767): table=filter family=2 entries=0 >type=NETFILTER_CFG msg=audit(1414328047.267:7767): table=nat family=2 entries=0 >type=NETFILTER_CFG msg=audit(1414328047.267:7767): table=mangle family=2 entries=0 >type=NETFILTER_CFG msg=audit(1414328047.267:7767): table=filter family=10 entries=0 >type=SYSCALL msg=audit(1414328047.267:7767): arch=c000003e syscall=272 success=yes exit=0 a0=40000000 a1=c0 a2=0 a3=7fff1df41830 items=0 ppid=13568 pid=13584 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=290 comm="ip" exe="/usr/sbin/ip" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null) >type=CRYPTO_KEY_USER msg=audit(1414328047.565:7768): pid=13603 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=13603 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414328047.565:7769): pid=13603 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=13603 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414328047.566:7770): pid=13602 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=13603 suid=74 rport=60092 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414328047.566:7771): pid=13602 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=13603 suid=74 rport=60092 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414328048.106:7772): pid=13602 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=60092 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414328048.106:7773): pid=13602 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=e7:e2:3d:94:48:cf:f5:8c:5e:54:98:bd:89:a5:29:a9 rport=60092 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_ACCT msg=audit(1414328048.111:7774): pid=13602 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414328048.112:7775): pid=13602 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=13603 suid=74 rport=60092 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414328048.113:7776): pid=13602 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1414328048.113:7777): pid=13602 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=LOGIN msg=audit(1414328048.113:7778): pid=13602 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=292 res=1 >type=USER_ROLE_CHANGE msg=audit(1414328048.180:7779): pid=13602 uid=0 auid=0 ses=292 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_START msg=audit(1414328048.195:7780): pid=13602 uid=0 auid=0 ses=292 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1414328048.199:7781): pid=13602 uid=0 auid=0 ses=292 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_START msg=audit(1414328048.199:7782): pid=13602 uid=0 auid=0 ses=292 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414328048.201:7783): pid=13606 uid=0 auid=0 ses=292 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=13606 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414328048.201:7784): pid=13606 uid=0 auid=0 ses=292 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=13606 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRED_REFR msg=audit(1414328048.202:7785): pid=13606 uid=0 auid=0 ses=292 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_END msg=audit(1414328048.212:7786): pid=13602 uid=0 auid=0 ses=292 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1414328048.212:7787): pid=13602 uid=0 auid=0 ses=292 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_END msg=audit(1414328048.217:7788): pid=13602 uid=0 auid=0 ses=292 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRED_DISP msg=audit(1414328048.217:7789): pid=13602 uid=0 auid=0 ses=292 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414328048.218:7790): pid=13602 uid=0 auid=0 ses=292 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=13602 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414328048.218:7791): pid=13602 uid=0 auid=0 ses=292 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=13602 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414328048.218:7792): pid=13602 uid=0 auid=0 ses=292 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=13602 suid=0 rport=60092 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414328051.244:7793): pid=13630 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=13630 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414328051.244:7794): pid=13630 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=13630 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414328051.245:7795): pid=13629 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=13630 suid=74 rport=60093 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414328051.245:7796): pid=13629 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=13630 suid=74 rport=60093 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414328051.789:7797): pid=13629 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=60093 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414328051.789:7798): pid=13629 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=e7:e2:3d:94:48:cf:f5:8c:5e:54:98:bd:89:a5:29:a9 rport=60093 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_ACCT msg=audit(1414328051.793:7799): pid=13629 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414328051.794:7800): pid=13629 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=13630 suid=74 rport=60093 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414328051.796:7801): pid=13629 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1414328051.796:7802): pid=13629 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=LOGIN msg=audit(1414328051.796:7803): pid=13629 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=293 res=1 >type=USER_ROLE_CHANGE msg=audit(1414328051.864:7804): pid=13629 uid=0 auid=0 ses=293 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_START msg=audit(1414328051.880:7805): pid=13629 uid=0 auid=0 ses=293 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1414328051.884:7806): pid=13629 uid=0 auid=0 ses=293 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_START msg=audit(1414328051.884:7807): pid=13629 uid=0 auid=0 ses=293 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414328051.886:7808): pid=13643 uid=0 auid=0 ses=293 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=13643 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414328051.886:7809): pid=13643 uid=0 auid=0 ses=293 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=13643 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRED_REFR msg=audit(1414328051.887:7810): pid=13643 uid=0 auid=0 ses=293 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_END msg=audit(1414328051.907:7811): pid=13629 uid=0 auid=0 ses=293 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRED_DISP msg=audit(1414328051.907:7812): pid=13629 uid=0 auid=0 ses=293 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_END msg=audit(1414328051.908:7813): pid=13629 uid=0 auid=0 ses=293 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1414328051.908:7814): pid=13629 uid=0 auid=0 ses=293 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414328051.908:7815): pid=13629 uid=0 auid=0 ses=293 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=13629 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414328051.908:7816): pid=13629 uid=0 auid=0 ses=293 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=13629 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414328051.908:7817): pid=13629 uid=0 auid=0 ses=293 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=13629 suid=0 rport=60093 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414328054.928:7818): pid=13654 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=13654 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414328054.928:7819): pid=13654 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=13654 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414328054.934:7820): pid=13653 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=13654 suid=74 rport=60094 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414328054.934:7821): pid=13653 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=13654 suid=74 rport=60094 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414328055.472:7822): pid=13653 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=60094 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414328055.472:7823): pid=13653 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=e7:e2:3d:94:48:cf:f5:8c:5e:54:98:bd:89:a5:29:a9 rport=60094 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_ACCT msg=audit(1414328055.476:7824): pid=13653 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414328055.476:7825): pid=13653 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=13654 suid=74 rport=60094 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414328055.477:7826): pid=13653 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1414328055.477:7827): pid=13653 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=LOGIN msg=audit(1414328055.477:7828): pid=13653 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=294 res=1 >type=USER_ROLE_CHANGE msg=audit(1414328055.549:7829): pid=13653 uid=0 auid=0 ses=294 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_START msg=audit(1414328055.565:7830): pid=13653 uid=0 auid=0 ses=294 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1414328055.568:7831): pid=13653 uid=0 auid=0 ses=294 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_START msg=audit(1414328055.569:7832): pid=13653 uid=0 auid=0 ses=294 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414328055.570:7833): pid=13660 uid=0 auid=0 ses=294 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=13660 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414328055.570:7834): pid=13660 uid=0 auid=0 ses=294 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=13660 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRED_REFR msg=audit(1414328055.571:7835): pid=13660 uid=0 auid=0 ses=294 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_END msg=audit(1414328055.638:7836): pid=13653 uid=0 auid=0 ses=294 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRED_DISP msg=audit(1414328055.638:7837): pid=13653 uid=0 auid=0 ses=294 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_END msg=audit(1414328055.639:7838): pid=13653 uid=0 auid=0 ses=294 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1414328055.639:7839): pid=13653 uid=0 auid=0 ses=294 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414328055.639:7840): pid=13653 uid=0 auid=0 ses=294 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=13653 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414328055.639:7841): pid=13653 uid=0 auid=0 ses=294 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=13653 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414328055.639:7842): pid=13653 uid=0 auid=0 ses=294 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=13653 suid=0 rport=60094 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414328058.608:7843): pid=13680 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=13680 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414328058.608:7844): pid=13680 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=13680 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414328058.610:7845): pid=13679 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=13680 suid=74 rport=60096 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414328058.610:7846): pid=13679 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=13680 suid=74 rport=60096 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414328059.154:7847): pid=13679 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=60096 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414328059.154:7848): pid=13679 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=e7:e2:3d:94:48:cf:f5:8c:5e:54:98:bd:89:a5:29:a9 rport=60096 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_ACCT msg=audit(1414328059.158:7849): pid=13679 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414328059.159:7850): pid=13679 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=13680 suid=74 rport=60096 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414328059.160:7851): pid=13679 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1414328059.161:7852): pid=13679 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=LOGIN msg=audit(1414328059.161:7853): pid=13679 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=295 res=1 >type=USER_ROLE_CHANGE msg=audit(1414328059.233:7854): pid=13679 uid=0 auid=0 ses=295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_START msg=audit(1414328059.304:7855): pid=13679 uid=0 auid=0 ses=295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1414328059.308:7856): pid=13679 uid=0 auid=0 ses=295 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_START msg=audit(1414328059.308:7857): pid=13679 uid=0 auid=0 ses=295 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414328059.310:7858): pid=13682 uid=0 auid=0 ses=295 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=13682 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414328059.310:7859): pid=13682 uid=0 auid=0 ses=295 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=13682 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRED_REFR msg=audit(1414328059.311:7860): pid=13682 uid=0 auid=0 ses=295 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_END msg=audit(1414328059.328:7861): pid=13679 uid=0 auid=0 ses=295 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRED_DISP msg=audit(1414328059.328:7862): pid=13679 uid=0 auid=0 ses=295 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_END msg=audit(1414328059.328:7863): pid=13679 uid=0 auid=0 ses=295 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1414328059.328:7864): pid=13679 uid=0 auid=0 ses=295 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414328059.328:7865): pid=13679 uid=0 auid=0 ses=295 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=13679 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414328059.329:7866): pid=13679 uid=0 auid=0 ses=295 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=13679 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414328059.329:7867): pid=13679 uid=0 auid=0 ses=295 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=13679 suid=0 rport=60096 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_CMD msg=audit(1414328059.883:7868): pid=13684 uid=993 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D767363746C202D2D74696D656F75743D3130206C6973742D706F7274732062722D696E74 terminal=? res=success' >type=CRED_ACQ msg=audit(1414328059.883:7869): pid=13684 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1414328059.884:7870): pid=13684 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1414328059.948:7871): pid=13684 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1414328059.948:7872): pid=13684 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1414328059.957:7873): pid=13687 uid=993 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D767363746C202D2D74696D656F75743D3130202D2D666F726D61743D6A736F6E202D2D202D2D636F6C756D6E733D6E616D652C65787465726E616C5F6964732C6F66706F7274206C69737420496E74657266616365 terminal=? res=success' >type=CRED_ACQ msg=audit(1414328059.957:7874): pid=13687 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1414328059.957:7875): pid=13687 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1414328060.020:7876): pid=13687 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1414328060.021:7877): pid=13687 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1414328060.029:7878): pid=13690 uid=993 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D767363746C202D2D74696D656F75743D3130206C6973742D706F7274732062722D696E74 terminal=? res=success' >type=CRED_ACQ msg=audit(1414328060.029:7879): pid=13690 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1414328060.030:7880): pid=13690 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1414328060.095:7881): pid=13690 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1414328060.095:7882): pid=13690 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1414328060.104:7883): pid=13693 uid=993 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D767363746C202D2D74696D656F75743D3130202D2D666F726D61743D6A736F6E202D2D202D2D636F6C756D6E733D6E616D652C746167206C69737420506F7274 terminal=? res=success' >type=CRED_ACQ msg=audit(1414328060.105:7884): pid=13693 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1414328060.105:7885): pid=13693 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1414328060.164:7886): pid=13693 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1414328060.164:7887): pid=13693 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1414328060.173:7888): pid=13696 uid=993 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D6F6663746C2064756D702D666C6F77732062722D696E74207461626C653D3233 terminal=? res=success' >type=CRED_ACQ msg=audit(1414328060.173:7889): pid=13696 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1414328060.173:7890): pid=13696 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1414328060.232:7891): pid=13696 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1414328060.232:7892): pid=13696 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1414328062.174:7893): pid=13701 uid=993 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D6F6663746C2064756D702D666C6F77732062722D696E74207461626C653D3233 terminal=? res=success' >type=CRED_ACQ msg=audit(1414328062.175:7894): pid=13701 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1414328062.175:7895): pid=13701 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1414328062.236:7896): pid=13701 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1414328062.236:7897): pid=13701 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414328062.347:7898): pid=13708 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=13708 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414328062.347:7899): pid=13708 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=13708 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414328062.348:7900): pid=13707 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=13708 suid=74 rport=60097 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414328062.348:7901): pid=13707 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=13708 suid=74 rport=60097 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414328062.890:7902): pid=13707 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=60097 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414328062.890:7903): pid=13707 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=e7:e2:3d:94:48:cf:f5:8c:5e:54:98:bd:89:a5:29:a9 rport=60097 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_ACCT msg=audit(1414328062.893:7904): pid=13707 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414328062.894:7905): pid=13707 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=13708 suid=74 rport=60097 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414328062.895:7906): pid=13707 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1414328062.895:7907): pid=13707 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=LOGIN msg=audit(1414328062.895:7908): pid=13707 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=296 res=1 >type=USER_ROLE_CHANGE msg=audit(1414328062.963:7909): pid=13707 uid=0 auid=0 ses=296 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_START msg=audit(1414328062.978:7910): pid=13707 uid=0 auid=0 ses=296 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1414328062.981:7911): pid=13707 uid=0 auid=0 ses=296 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_START msg=audit(1414328062.982:7912): pid=13707 uid=0 auid=0 ses=296 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414328062.983:7913): pid=13710 uid=0 auid=0 ses=296 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=13710 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414328062.983:7914): pid=13710 uid=0 auid=0 ses=296 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=13710 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRED_REFR msg=audit(1414328062.984:7915): pid=13710 uid=0 auid=0 ses=296 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_END msg=audit(1414328062.997:7916): pid=13707 uid=0 auid=0 ses=296 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRED_DISP msg=audit(1414328062.997:7917): pid=13707 uid=0 auid=0 ses=296 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_END msg=audit(1414328062.998:7918): pid=13707 uid=0 auid=0 ses=296 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1414328062.998:7919): pid=13707 uid=0 auid=0 ses=296 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414328062.998:7920): pid=13707 uid=0 auid=0 ses=296 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=13707 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414328062.998:7921): pid=13707 uid=0 auid=0 ses=296 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=13707 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414328062.998:7922): pid=13707 uid=0 auid=0 ses=296 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=13707 suid=0 rport=60097 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_CMD msg=audit(1414328064.177:7923): pid=13712 uid=993 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D6F6663746C2064756D702D666C6F77732062722D696E74207461626C653D3233 terminal=? res=success' >type=CRED_ACQ msg=audit(1414328064.178:7924): pid=13712 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1414328064.178:7925): pid=13712 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1414328064.240:7926): pid=13712 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1414328064.240:7927): pid=13712 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414328066.024:7928): pid=13719 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=13719 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414328066.024:7929): pid=13719 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=13719 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414328066.025:7930): pid=13718 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=13719 suid=74 rport=60098 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414328066.025:7931): pid=13718 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=13719 suid=74 rport=60098 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_CMD msg=audit(1414328066.177:7932): pid=13720 uid=993 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D6F6663746C2064756D702D666C6F77732062722D696E74207461626C653D3233 terminal=? res=success' >type=CRED_ACQ msg=audit(1414328066.177:7933): pid=13720 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1414328066.177:7934): pid=13720 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1414328066.237:7935): pid=13720 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1414328066.237:7936): pid=13720 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_AUTH msg=audit(1414328066.563:7937): pid=13718 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=60098 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414328066.563:7938): pid=13718 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=e7:e2:3d:94:48:cf:f5:8c:5e:54:98:bd:89:a5:29:a9 rport=60098 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_ACCT msg=audit(1414328066.568:7939): pid=13718 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414328066.568:7940): pid=13718 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=13719 suid=74 rport=60098 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414328066.569:7941): pid=13718 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1414328066.569:7942): pid=13718 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=LOGIN msg=audit(1414328066.569:7943): pid=13718 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=297 res=1 >type=USER_ROLE_CHANGE msg=audit(1414328066.637:7944): pid=13718 uid=0 auid=0 ses=297 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_START msg=audit(1414328066.651:7945): pid=13718 uid=0 auid=0 ses=297 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1414328066.655:7946): pid=13718 uid=0 auid=0 ses=297 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_START msg=audit(1414328066.655:7947): pid=13718 uid=0 auid=0 ses=297 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414328066.657:7948): pid=13724 uid=0 auid=0 ses=297 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=13724 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414328066.657:7949): pid=13724 uid=0 auid=0 ses=297 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=13724 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRED_REFR msg=audit(1414328066.658:7950): pid=13724 uid=0 auid=0 ses=297 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_END msg=audit(1414328066.673:7951): pid=13718 uid=0 auid=0 ses=297 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRED_DISP msg=audit(1414328066.673:7952): pid=13718 uid=0 auid=0 ses=297 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_END msg=audit(1414328066.673:7953): pid=13718 uid=0 auid=0 ses=297 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1414328066.673:7954): pid=13718 uid=0 auid=0 ses=297 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414328066.673:7955): pid=13718 uid=0 auid=0 ses=297 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=13718 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414328066.674:7956): pid=13718 uid=0 auid=0 ses=297 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=13718 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414328066.674:7957): pid=13718 uid=0 auid=0 ses=297 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=13718 suid=0 rport=60098 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_CMD msg=audit(1414328068.181:7958): pid=13726 uid=993 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D6F6663746C2064756D702D666C6F77732062722D696E74207461626C653D3233 terminal=? res=success' >type=CRED_ACQ msg=audit(1414328068.181:7959): pid=13726 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1414328068.182:7960): pid=13726 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1414328068.245:7961): pid=13726 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1414328068.245:7962): pid=13726 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=MAC_CONFIG_CHANGE msg=audit(1414328068.686:7963): bool=rsync_export_all_ro val=1 old_val=0 auid=0 ses=290 >type=SYSCALL msg=audit(1414328068.686:7963): arch=c000003e syscall=1 success=yes exit=2 a0=4 a1=7fffadef29f0 a2=2 a3=7fffadef27b0 items=0 ppid=13674 pid=13675 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=290 comm="setsebool" exe="/usr/sbin/setsebool" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null) >type=MAC_POLICY_LOAD msg=audit(1414328068.836:7964): policy loaded auid=0 ses=290 >type=SYSCALL msg=audit(1414328068.836:7964): arch=c000003e syscall=1 success=yes exit=3591907 a0=4 a1=7f2812b81010 a2=36cee3 a3=7fff45f06620 items=0 ppid=13675 pid=13729 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=290 comm="load_policy" exe="/usr/sbin/load_policy" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null) >type=CRYPTO_KEY_USER msg=audit(1414328069.708:7965): pid=13735 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=13735 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414328069.708:7966): pid=13735 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=13735 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414328069.709:7967): pid=13734 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=13735 suid=74 rport=60099 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414328069.709:7968): pid=13734 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=13735 suid=74 rport=60099 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=ADD_GROUP msg=audit(1414328069.991:7969): pid=13739 uid=0 auid=0 ses=290 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=adding group acct="swift" exe="/usr/sbin/useradd" hostname=? addr=? terminal=? res=success' >type=ADD_USER msg=audit(1414328069.992:7970): pid=13739 uid=0 auid=0 ses=290 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=adding user id=1001 exe="/usr/sbin/useradd" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1414328070.183:7971): pid=13752 uid=993 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D6F6663746C2064756D702D666C6F77732062722D696E74207461626C653D3233 terminal=? res=success' >type=CRED_ACQ msg=audit(1414328070.184:7972): pid=13752 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1414328070.185:7973): pid=13752 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_AUTH msg=audit(1414328070.248:7974): pid=13734 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=60099 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414328070.248:7975): pid=13734 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=e7:e2:3d:94:48:cf:f5:8c:5e:54:98:bd:89:a5:29:a9 rport=60099 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_END msg=audit(1414328070.248:7976): pid=13752 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1414328070.248:7977): pid=13752 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1414328070.252:7978): pid=13734 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414328070.252:7979): pid=13734 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=13735 suid=74 rport=60099 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414328070.253:7980): pid=13734 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1414328070.253:7981): pid=13734 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=LOGIN msg=audit(1414328070.253:7982): pid=13734 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=298 res=1 >type=USER_ROLE_CHANGE msg=audit(1414328070.333:7983): pid=13734 uid=0 auid=0 ses=298 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_AVC msg=audit(1414328070.346:7984): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='avc: received policyload notice (seqno=27) exe="/usr/lib/systemd/systemd" sauid=0 hostname=? addr=? terminal=?' >type=USER_AVC msg=audit(1414328070.346:7985): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='avc: received policyload notice (seqno=28) exe="/usr/lib/systemd/systemd" sauid=0 hostname=? addr=? terminal=?' >type=USER_START msg=audit(1414328070.357:7986): pid=13734 uid=0 auid=0 ses=298 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1414328070.361:7987): pid=13734 uid=0 auid=0 ses=298 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_START msg=audit(1414328070.361:7988): pid=13734 uid=0 auid=0 ses=298 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414328070.363:7989): pid=13756 uid=0 auid=0 ses=298 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=13756 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414328070.363:7990): pid=13756 uid=0 auid=0 ses=298 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=13756 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRED_REFR msg=audit(1414328070.364:7991): pid=13756 uid=0 auid=0 ses=298 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_END msg=audit(1414328070.384:7992): pid=13734 uid=0 auid=0 ses=298 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRED_DISP msg=audit(1414328070.385:7993): pid=13734 uid=0 auid=0 ses=298 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_END msg=audit(1414328070.385:7994): pid=13734 uid=0 auid=0 ses=298 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1414328070.385:7995): pid=13734 uid=0 auid=0 ses=298 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414328070.385:7996): pid=13734 uid=0 auid=0 ses=298 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=13734 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414328070.385:7997): pid=13734 uid=0 auid=0 ses=298 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=13734 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414328070.385:7998): pid=13734 uid=0 auid=0 ses=298 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=13734 suid=0 rport=60099 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_CMD msg=audit(1414328072.184:7999): pid=13763 uid=993 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D6F6663746C2064756D702D666C6F77732062722D696E74207461626C653D3233 terminal=? res=success' >type=CRED_ACQ msg=audit(1414328072.184:8000): pid=13763 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1414328072.185:8001): pid=13763 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1414328072.247:8002): pid=13763 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1414328072.247:8003): pid=13763 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414328073.417:8004): pid=13770 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=13770 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414328073.418:8005): pid=13770 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=13770 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414328073.419:8006): pid=13769 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=13770 suid=74 rport=60100 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414328073.419:8007): pid=13769 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=13770 suid=74 rport=60100 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414328073.960:8008): pid=13769 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=60100 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414328073.960:8009): pid=13769 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=e7:e2:3d:94:48:cf:f5:8c:5e:54:98:bd:89:a5:29:a9 rport=60100 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_ACCT msg=audit(1414328073.963:8010): pid=13769 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414328073.964:8011): pid=13769 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=13770 suid=74 rport=60100 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414328073.965:8012): pid=13769 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1414328073.965:8013): pid=13769 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=LOGIN msg=audit(1414328073.965:8014): pid=13769 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=299 res=1 >type=USER_ROLE_CHANGE msg=audit(1414328074.039:8015): pid=13769 uid=0 auid=0 ses=299 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_START msg=audit(1414328074.054:8016): pid=13769 uid=0 auid=0 ses=299 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1414328074.058:8017): pid=13769 uid=0 auid=0 ses=299 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_START msg=audit(1414328074.058:8018): pid=13769 uid=0 auid=0 ses=299 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414328074.060:8019): pid=13776 uid=0 auid=0 ses=299 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=13776 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414328074.060:8020): pid=13776 uid=0 auid=0 ses=299 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=13776 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRED_REFR msg=audit(1414328074.061:8021): pid=13776 uid=0 auid=0 ses=299 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_END msg=audit(1414328074.075:8022): pid=13769 uid=0 auid=0 ses=299 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRED_DISP msg=audit(1414328074.075:8023): pid=13769 uid=0 auid=0 ses=299 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_END msg=audit(1414328074.076:8024): pid=13769 uid=0 auid=0 ses=299 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1414328074.076:8025): pid=13769 uid=0 auid=0 ses=299 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414328074.076:8026): pid=13769 uid=0 auid=0 ses=299 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=13769 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414328074.076:8027): pid=13769 uid=0 auid=0 ses=299 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=13769 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414328074.076:8028): pid=13769 uid=0 auid=0 ses=299 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=13769 suid=0 rport=60100 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_CMD msg=audit(1414328074.182:8029): pid=13778 uid=993 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D6F6663746C2064756D702D666C6F77732062722D696E74207461626C653D3233 terminal=? res=success' >type=CRED_ACQ msg=audit(1414328074.183:8030): pid=13778 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1414328074.183:8031): pid=13778 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1414328074.242:8032): pid=13778 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1414328074.242:8033): pid=13778 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1414328076.183:8034): pid=13782 uid=993 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D6F6663746C2064756D702D666C6F77732062722D696E74207461626C653D3233 terminal=? res=success' >type=CRED_ACQ msg=audit(1414328076.183:8035): pid=13782 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1414328076.184:8036): pid=13782 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1414328076.246:8037): pid=13782 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1414328076.246:8038): pid=13782 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414328077.097:8039): pid=13789 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=13789 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414328077.097:8040): pid=13789 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=13789 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414328077.098:8041): pid=13788 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=13789 suid=74 rport=60104 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414328077.098:8042): pid=13788 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=13789 suid=74 rport=60104 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414328077.634:8043): pid=13788 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=60104 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414328077.634:8044): pid=13788 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=e7:e2:3d:94:48:cf:f5:8c:5e:54:98:bd:89:a5:29:a9 rport=60104 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_ACCT msg=audit(1414328077.639:8045): pid=13788 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414328077.640:8046): pid=13788 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=13789 suid=74 rport=60104 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414328077.641:8047): pid=13788 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1414328077.641:8048): pid=13788 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=LOGIN msg=audit(1414328077.641:8049): pid=13788 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=300 res=1 >type=USER_ROLE_CHANGE msg=audit(1414328077.714:8050): pid=13788 uid=0 auid=0 ses=300 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_START msg=audit(1414328077.730:8051): pid=13788 uid=0 auid=0 ses=300 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1414328077.734:8052): pid=13788 uid=0 auid=0 ses=300 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_START msg=audit(1414328077.734:8053): pid=13788 uid=0 auid=0 ses=300 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414328077.736:8054): pid=13791 uid=0 auid=0 ses=300 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=13791 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414328077.736:8055): pid=13791 uid=0 auid=0 ses=300 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=13791 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRED_REFR msg=audit(1414328077.737:8056): pid=13791 uid=0 auid=0 ses=300 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_END msg=audit(1414328077.760:8057): pid=13788 uid=0 auid=0 ses=300 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRED_DISP msg=audit(1414328077.760:8058): pid=13788 uid=0 auid=0 ses=300 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_END msg=audit(1414328077.761:8059): pid=13788 uid=0 auid=0 ses=300 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1414328077.761:8060): pid=13788 uid=0 auid=0 ses=300 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414328077.761:8061): pid=13788 uid=0 auid=0 ses=300 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=13788 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414328077.761:8062): pid=13788 uid=0 auid=0 ses=300 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=13788 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414328077.761:8063): pid=13788 uid=0 auid=0 ses=300 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=13788 suid=0 rport=60104 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_CMD msg=audit(1414328078.188:8064): pid=13793 uid=993 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D6F6663746C2064756D702D666C6F77732062722D696E74207461626C653D3233 terminal=? res=success' >type=CRED_ACQ msg=audit(1414328078.188:8065): pid=13793 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1414328078.189:8066): pid=13793 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1414328078.249:8067): pid=13793 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1414328078.249:8068): pid=13793 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1414328080.186:8069): pid=13796 uid=993 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D6F6663746C2064756D702D666C6F77732062722D696E74207461626C653D3233 terminal=? res=success' >type=CRED_ACQ msg=audit(1414328080.187:8070): pid=13796 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1414328080.187:8071): pid=13796 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1414328080.246:8072): pid=13796 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1414328080.246:8073): pid=13796 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414328080.786:8074): pid=13803 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=13803 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414328080.787:8075): pid=13803 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=13803 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414328080.788:8076): pid=13802 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=13803 suid=74 rport=60105 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414328080.788:8077): pid=13802 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=13803 suid=74 rport=60105 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414328081.326:8078): pid=13802 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=60105 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414328081.326:8079): pid=13802 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=e7:e2:3d:94:48:cf:f5:8c:5e:54:98:bd:89:a5:29:a9 rport=60105 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_ACCT msg=audit(1414328081.330:8080): pid=13802 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414328081.331:8081): pid=13802 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=13803 suid=74 rport=60105 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414328081.332:8082): pid=13802 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1414328081.332:8083): pid=13802 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=LOGIN msg=audit(1414328081.332:8084): pid=13802 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=301 res=1 >type=USER_ROLE_CHANGE msg=audit(1414328081.409:8085): pid=13802 uid=0 auid=0 ses=301 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_START msg=audit(1414328081.427:8086): pid=13802 uid=0 auid=0 ses=301 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1414328081.432:8087): pid=13802 uid=0 auid=0 ses=301 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_START msg=audit(1414328081.432:8088): pid=13802 uid=0 auid=0 ses=301 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414328081.434:8089): pid=13805 uid=0 auid=0 ses=301 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=13805 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414328081.434:8090): pid=13805 uid=0 auid=0 ses=301 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=13805 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRED_REFR msg=audit(1414328081.434:8091): pid=13805 uid=0 auid=0 ses=301 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_END msg=audit(1414328081.450:8092): pid=13802 uid=0 auid=0 ses=301 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRED_DISP msg=audit(1414328081.451:8093): pid=13802 uid=0 auid=0 ses=301 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_END msg=audit(1414328081.451:8094): pid=13802 uid=0 auid=0 ses=301 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1414328081.451:8095): pid=13802 uid=0 auid=0 ses=301 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414328081.451:8096): pid=13802 uid=0 auid=0 ses=301 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=13802 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414328081.451:8097): pid=13802 uid=0 auid=0 ses=301 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=13802 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414328081.451:8098): pid=13802 uid=0 auid=0 ses=301 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=13802 suid=0 rport=60105 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_CMD msg=audit(1414328082.191:8099): pid=13812 uid=993 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D6F6663746C2064756D702D666C6F77732062722D696E74207461626C653D3233 terminal=? res=success' >type=CRED_ACQ msg=audit(1414328082.191:8100): pid=13812 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1414328082.192:8101): pid=13812 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1414328082.253:8102): pid=13812 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1414328082.253:8103): pid=13812 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1414328084.051:8104): pid=13867 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D4320766773202D2D6E6F68656164696E6773202D2D756E69743D67202D6F206E616D652C73697A652C667265652C6C765F636F756E742C75756964202D2D736570617261746F72203A202D2D6E6F7375666669782063696E6465722D766F6C756D6573 terminal=? res=success' >type=CRED_ACQ msg=audit(1414328084.051:8105): pid=13867 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1414328084.053:8106): pid=13867 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1414328084.147:8107): pid=13867 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1414328084.147:8108): pid=13867 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1414328084.191:8109): pid=13870 uid=993 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D6F6663746C2064756D702D666C6F77732062722D696E74207461626C653D3233 terminal=? res=success' >type=CRED_ACQ msg=audit(1414328084.191:8110): pid=13870 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1414328084.192:8111): pid=13870 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1414328084.262:8112): pid=13870 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1414328084.262:8113): pid=13870 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414328084.475:8114): pid=13877 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=13877 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414328084.476:8115): pid=13877 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=13877 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414328084.478:8116): pid=13876 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=13877 suid=74 rport=60106 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414328084.479:8117): pid=13876 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=13877 suid=74 rport=60106 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414328085.017:8118): pid=13876 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=60106 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414328085.018:8119): pid=13876 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=e7:e2:3d:94:48:cf:f5:8c:5e:54:98:bd:89:a5:29:a9 rport=60106 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_ACCT msg=audit(1414328085.022:8120): pid=13876 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414328085.023:8121): pid=13876 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=13877 suid=74 rport=60106 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414328085.024:8122): pid=13876 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1414328085.024:8123): pid=13876 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=LOGIN msg=audit(1414328085.024:8124): pid=13876 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=302 res=1 >type=USER_ROLE_CHANGE msg=audit(1414328085.104:8125): pid=13876 uid=0 auid=0 ses=302 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_START msg=audit(1414328085.122:8126): pid=13876 uid=0 auid=0 ses=302 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1414328085.126:8127): pid=13876 uid=0 auid=0 ses=302 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_START msg=audit(1414328085.126:8128): pid=13876 uid=0 auid=0 ses=302 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414328085.128:8129): pid=13879 uid=0 auid=0 ses=302 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=13879 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414328085.128:8130): pid=13879 uid=0 auid=0 ses=302 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=13879 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRED_REFR msg=audit(1414328085.129:8131): pid=13879 uid=0 auid=0 ses=302 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_END msg=audit(1414328085.144:8132): pid=13876 uid=0 auid=0 ses=302 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRED_DISP msg=audit(1414328085.145:8133): pid=13876 uid=0 auid=0 ses=302 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_END msg=audit(1414328085.145:8134): pid=13876 uid=0 auid=0 ses=302 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1414328085.145:8135): pid=13876 uid=0 auid=0 ses=302 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414328085.145:8136): pid=13876 uid=0 auid=0 ses=302 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=13876 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414328085.146:8137): pid=13876 uid=0 auid=0 ses=302 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=13876 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414328085.146:8138): pid=13876 uid=0 auid=0 ses=302 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=13876 suid=0 rport=60106 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_CMD msg=audit(1414328086.192:8139): pid=13881 uid=993 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D6F6663746C2064756D702D666C6F77732062722D696E74207461626C653D3233 terminal=? res=success' >type=CRED_ACQ msg=audit(1414328086.193:8140): pid=13881 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1414328086.193:8141): pid=13881 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1414328086.253:8142): pid=13881 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1414328086.253:8143): pid=13881 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414328088.167:8144): pid=13888 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=13888 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414328088.168:8145): pid=13888 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=13888 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414328088.170:8146): pid=13887 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=13888 suid=74 rport=60107 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414328088.171:8147): pid=13887 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=13888 suid=74 rport=60107 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_CMD msg=audit(1414328088.193:8148): pid=13889 uid=993 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D6F6663746C2064756D702D666C6F77732062722D696E74207461626C653D3233 terminal=? res=success' >type=CRED_ACQ msg=audit(1414328088.193:8149): pid=13889 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1414328088.193:8150): pid=13889 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1414328088.254:8151): pid=13889 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1414328088.254:8152): pid=13889 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_AUTH msg=audit(1414328088.712:8153): pid=13887 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=60107 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414328088.712:8154): pid=13887 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=e7:e2:3d:94:48:cf:f5:8c:5e:54:98:bd:89:a5:29:a9 rport=60107 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_ACCT msg=audit(1414328088.716:8155): pid=13887 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414328088.716:8156): pid=13887 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=13888 suid=74 rport=60107 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414328088.717:8157): pid=13887 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1414328088.717:8158): pid=13887 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=LOGIN msg=audit(1414328088.717:8159): pid=13887 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=303 res=1 >type=USER_ROLE_CHANGE msg=audit(1414328088.792:8160): pid=13887 uid=0 auid=0 ses=303 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_START msg=audit(1414328088.811:8161): pid=13887 uid=0 auid=0 ses=303 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1414328088.814:8162): pid=13887 uid=0 auid=0 ses=303 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_START msg=audit(1414328088.814:8163): pid=13887 uid=0 auid=0 ses=303 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414328088.816:8164): pid=13893 uid=0 auid=0 ses=303 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=13893 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414328088.816:8165): pid=13893 uid=0 auid=0 ses=303 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=13893 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRED_REFR msg=audit(1414328088.817:8166): pid=13893 uid=0 auid=0 ses=303 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_END msg=audit(1414328088.831:8167): pid=13887 uid=0 auid=0 ses=303 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRED_DISP msg=audit(1414328088.831:8168): pid=13887 uid=0 auid=0 ses=303 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_END msg=audit(1414328088.832:8169): pid=13887 uid=0 auid=0 ses=303 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1414328088.832:8170): pid=13887 uid=0 auid=0 ses=303 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414328088.832:8171): pid=13887 uid=0 auid=0 ses=303 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=13887 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414328088.832:8172): pid=13887 uid=0 auid=0 ses=303 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=13887 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414328088.832:8173): pid=13887 uid=0 auid=0 ses=303 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=13887 suid=0 rport=60107 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_CMD msg=audit(1414328090.195:8174): pid=13895 uid=993 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D6F6663746C2064756D702D666C6F77732062722D696E74207461626C653D3233 terminal=? res=success' >type=CRED_ACQ msg=audit(1414328090.195:8175): pid=13895 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1414328090.197:8176): pid=13895 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1414328090.256:8177): pid=13895 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1414328090.256:8178): pid=13895 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414328091.855:8179): pid=13902 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=13902 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414328091.855:8180): pid=13902 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=13902 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414328091.856:8181): pid=13901 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=13902 suid=74 rport=60108 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414328091.856:8182): pid=13901 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=13902 suid=74 rport=60108 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_CMD msg=audit(1414328092.197:8183): pid=13905 uid=993 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D6F6663746C2064756D702D666C6F77732062722D696E74207461626C653D3233 terminal=? res=success' >type=CRED_ACQ msg=audit(1414328092.197:8184): pid=13905 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1414328092.198:8185): pid=13905 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1414328092.259:8186): pid=13905 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1414328092.259:8187): pid=13905 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_AUTH msg=audit(1414328092.394:8188): pid=13901 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=60108 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414328092.394:8189): pid=13901 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=e7:e2:3d:94:48:cf:f5:8c:5e:54:98:bd:89:a5:29:a9 rport=60108 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_ACCT msg=audit(1414328092.398:8190): pid=13901 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414328092.398:8191): pid=13901 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=13902 suid=74 rport=60108 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414328092.399:8192): pid=13901 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1414328092.399:8193): pid=13901 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=LOGIN msg=audit(1414328092.399:8194): pid=13901 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=304 res=1 >type=USER_ROLE_CHANGE msg=audit(1414328092.472:8195): pid=13901 uid=0 auid=0 ses=304 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_START msg=audit(1414328092.487:8196): pid=13901 uid=0 auid=0 ses=304 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1414328092.491:8197): pid=13901 uid=0 auid=0 ses=304 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_START msg=audit(1414328092.491:8198): pid=13901 uid=0 auid=0 ses=304 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414328092.493:8199): pid=13909 uid=0 auid=0 ses=304 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=13909 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414328092.493:8200): pid=13909 uid=0 auid=0 ses=304 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=13909 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRED_REFR msg=audit(1414328092.494:8201): pid=13909 uid=0 auid=0 ses=304 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_END msg=audit(1414328092.518:8202): pid=13901 uid=0 auid=0 ses=304 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRED_DISP msg=audit(1414328092.518:8203): pid=13901 uid=0 auid=0 ses=304 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_END msg=audit(1414328092.519:8204): pid=13901 uid=0 auid=0 ses=304 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1414328092.519:8205): pid=13901 uid=0 auid=0 ses=304 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414328092.519:8206): pid=13901 uid=0 auid=0 ses=304 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=13901 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414328092.519:8207): pid=13901 uid=0 auid=0 ses=304 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=13901 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414328092.519:8208): pid=13901 uid=0 auid=0 ses=304 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=13901 suid=0 rport=60108 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_CMD msg=audit(1414328094.197:8209): pid=13912 uid=993 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D6F6663746C2064756D702D666C6F77732062722D696E74207461626C653D3233 terminal=? res=success' >type=CRED_ACQ msg=audit(1414328094.197:8210): pid=13912 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1414328094.198:8211): pid=13912 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1414328094.256:8212): pid=13912 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1414328094.256:8213): pid=13912 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414328095.542:8214): pid=13919 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=13919 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414328095.543:8215): pid=13919 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=13919 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414328095.544:8216): pid=13918 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=13919 suid=74 rport=60109 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414328095.544:8217): pid=13918 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=13919 suid=74 rport=60109 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414328096.081:8218): pid=13918 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=60109 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414328096.081:8219): pid=13918 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=e7:e2:3d:94:48:cf:f5:8c:5e:54:98:bd:89:a5:29:a9 rport=60109 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_ACCT msg=audit(1414328096.085:8220): pid=13918 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414328096.086:8221): pid=13918 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=13919 suid=74 rport=60109 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414328096.087:8222): pid=13918 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1414328096.087:8223): pid=13918 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=LOGIN msg=audit(1414328096.087:8224): pid=13918 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=305 res=1 >type=USER_ROLE_CHANGE msg=audit(1414328096.166:8225): pid=13918 uid=0 auid=0 ses=305 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_START msg=audit(1414328096.186:8226): pid=13918 uid=0 auid=0 ses=305 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1414328096.191:8227): pid=13918 uid=0 auid=0 ses=305 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_START msg=audit(1414328096.191:8228): pid=13918 uid=0 auid=0 ses=305 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414328096.193:8229): pid=13922 uid=0 auid=0 ses=305 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=13922 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414328096.193:8230): pid=13922 uid=0 auid=0 ses=305 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=13922 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRED_REFR msg=audit(1414328096.194:8231): pid=13922 uid=0 auid=0 ses=305 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_CMD msg=audit(1414328096.199:8232): pid=13921 uid=993 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D6F6663746C2064756D702D666C6F77732062722D696E74207461626C653D3233 terminal=? res=success' >type=CRED_ACQ msg=audit(1414328096.200:8233): pid=13921 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1414328096.200:8234): pid=13921 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1414328096.231:8235): pid=13918 uid=0 auid=0 ses=305 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRED_DISP msg=audit(1414328096.231:8236): pid=13918 uid=0 auid=0 ses=305 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_END msg=audit(1414328096.232:8237): pid=13918 uid=0 auid=0 ses=305 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1414328096.232:8238): pid=13918 uid=0 auid=0 ses=305 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414328096.232:8239): pid=13918 uid=0 auid=0 ses=305 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=13918 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414328096.232:8240): pid=13918 uid=0 auid=0 ses=305 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=13918 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414328096.233:8241): pid=13918 uid=0 auid=0 ses=305 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=13918 suid=0 rport=60109 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_END msg=audit(1414328096.268:8242): pid=13921 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1414328096.268:8243): pid=13921 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1414328098.198:8244): pid=13934 uid=993 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D6F6663746C2064756D702D666C6F77732062722D696E74207461626C653D3233 terminal=? res=success' >type=CRED_ACQ msg=audit(1414328098.198:8245): pid=13934 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1414328098.199:8246): pid=13934 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1414328098.262:8247): pid=13934 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1414328098.262:8248): pid=13934 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414328099.252:8249): pid=13941 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=13941 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414328099.253:8250): pid=13941 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=13941 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414328099.254:8251): pid=13940 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=13941 suid=74 rport=60110 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414328099.256:8252): pid=13940 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=13941 suid=74 rport=60110 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414328099.792:8253): pid=13940 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=60110 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414328099.792:8254): pid=13940 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=e7:e2:3d:94:48:cf:f5:8c:5e:54:98:bd:89:a5:29:a9 rport=60110 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_ACCT msg=audit(1414328099.796:8255): pid=13940 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414328099.796:8256): pid=13940 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=13941 suid=74 rport=60110 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414328099.797:8257): pid=13940 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1414328099.798:8258): pid=13940 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=LOGIN msg=audit(1414328099.798:8259): pid=13940 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=306 res=1 >type=USER_ROLE_CHANGE msg=audit(1414328099.871:8260): pid=13940 uid=0 auid=0 ses=306 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_START msg=audit(1414328099.891:8261): pid=13940 uid=0 auid=0 ses=306 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1414328099.895:8262): pid=13940 uid=0 auid=0 ses=306 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_START msg=audit(1414328099.895:8263): pid=13940 uid=0 auid=0 ses=306 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414328099.897:8264): pid=13943 uid=0 auid=0 ses=306 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=13943 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414328099.897:8265): pid=13943 uid=0 auid=0 ses=306 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=13943 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRED_REFR msg=audit(1414328099.898:8266): pid=13943 uid=0 auid=0 ses=306 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_END msg=audit(1414328099.912:8267): pid=13940 uid=0 auid=0 ses=306 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRED_DISP msg=audit(1414328099.912:8268): pid=13940 uid=0 auid=0 ses=306 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_END msg=audit(1414328099.913:8269): pid=13940 uid=0 auid=0 ses=306 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1414328099.913:8270): pid=13940 uid=0 auid=0 ses=306 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414328099.913:8271): pid=13940 uid=0 auid=0 ses=306 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=13940 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414328099.913:8272): pid=13940 uid=0 auid=0 ses=306 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=13940 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414328099.913:8273): pid=13940 uid=0 auid=0 ses=306 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=13940 suid=0 rport=60110 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_CMD msg=audit(1414328100.201:8274): pid=13945 uid=993 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D6F6663746C2064756D702D666C6F77732062722D696E74207461626C653D3233 terminal=? res=success' >type=CRED_ACQ msg=audit(1414328100.201:8275): pid=13945 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1414328100.202:8276): pid=13945 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1414328100.264:8277): pid=13945 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1414328100.264:8278): pid=13945 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1414328101.339:8279): pid=13948 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="keystone" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1414328101.339:8280): pid=13948 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="keystone" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1414328101.340:8281): pid=13948 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=163 old-ses=4294967295 ses=307 res=1 >type=USER_START msg=audit(1414328101.354:8282): pid=13948 uid=0 auid=163 ses=307 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="keystone" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1414328101.355:8283): pid=13948 uid=0 auid=163 ses=307 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="keystone" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1414328102.009:8284): pid=13948 uid=0 auid=163 ses=307 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="keystone" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1414328102.011:8285): pid=13948 uid=0 auid=163 ses=307 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="keystone" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_CMD msg=audit(1414328102.201:8286): pid=13963 uid=993 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D6F6663746C2064756D702D666C6F77732062722D696E74207461626C653D3233 terminal=? res=success' >type=CRED_ACQ msg=audit(1414328102.201:8287): pid=13963 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1414328102.202:8288): pid=13963 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1414328102.263:8289): pid=13963 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1414328102.263:8290): pid=13963 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414328102.956:8291): pid=13970 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=13970 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414328102.956:8292): pid=13970 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=13970 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414328102.957:8293): pid=13969 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=13970 suid=74 rport=60112 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414328102.957:8294): pid=13969 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=13970 suid=74 rport=60112 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414328103.500:8295): pid=13969 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=60112 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414328103.500:8296): pid=13969 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=e7:e2:3d:94:48:cf:f5:8c:5e:54:98:bd:89:a5:29:a9 rport=60112 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_ACCT msg=audit(1414328103.503:8297): pid=13969 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414328103.504:8298): pid=13969 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=13970 suid=74 rport=60112 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414328103.505:8299): pid=13969 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1414328103.505:8300): pid=13969 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=LOGIN msg=audit(1414328103.505:8301): pid=13969 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=308 res=1 >type=USER_ROLE_CHANGE msg=audit(1414328103.582:8302): pid=13969 uid=0 auid=0 ses=308 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_START msg=audit(1414328103.597:8303): pid=13969 uid=0 auid=0 ses=308 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1414328103.601:8304): pid=13969 uid=0 auid=0 ses=308 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_START msg=audit(1414328103.601:8305): pid=13969 uid=0 auid=0 ses=308 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414328103.603:8306): pid=13972 uid=0 auid=0 ses=308 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=13972 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414328103.603:8307): pid=13972 uid=0 auid=0 ses=308 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=13972 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRED_REFR msg=audit(1414328103.604:8308): pid=13972 uid=0 auid=0 ses=308 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_END msg=audit(1414328103.618:8309): pid=13969 uid=0 auid=0 ses=308 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRED_DISP msg=audit(1414328103.618:8310): pid=13969 uid=0 auid=0 ses=308 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_END msg=audit(1414328103.619:8311): pid=13969 uid=0 auid=0 ses=308 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1414328103.619:8312): pid=13969 uid=0 auid=0 ses=308 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414328103.619:8313): pid=13969 uid=0 auid=0 ses=308 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=13969 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414328103.619:8314): pid=13969 uid=0 auid=0 ses=308 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=13969 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414328103.619:8315): pid=13969 uid=0 auid=0 ses=308 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=13969 suid=0 rport=60112 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_CMD msg=audit(1414328104.204:8316): pid=13974 uid=993 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D6F6663746C2064756D702D666C6F77732062722D696E74207461626C653D3233 terminal=? res=success' >type=CRED_ACQ msg=audit(1414328104.205:8317): pid=13974 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1414328104.205:8318): pid=13974 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1414328104.268:8319): pid=13974 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1414328104.268:8320): pid=13974 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1414328106.205:8321): pid=13977 uid=993 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D6F6663746C2064756D702D666C6F77732062722D696E74207461626C653D3233 terminal=? res=success' >type=CRED_ACQ msg=audit(1414328106.205:8322): pid=13977 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1414328106.205:8323): pid=13977 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1414328106.265:8324): pid=13977 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1414328106.265:8325): pid=13977 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414328106.643:8326): pid=13984 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=13984 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414328106.643:8327): pid=13984 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=13984 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414328106.644:8328): pid=13983 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=13984 suid=74 rport=60113 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414328106.644:8329): pid=13983 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=13984 suid=74 rport=60113 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414328107.183:8330): pid=13983 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=60113 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414328107.184:8331): pid=13983 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=e7:e2:3d:94:48:cf:f5:8c:5e:54:98:bd:89:a5:29:a9 rport=60113 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_ACCT msg=audit(1414328107.188:8332): pid=13983 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414328107.188:8333): pid=13983 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=13984 suid=74 rport=60113 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414328107.189:8334): pid=13983 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1414328107.189:8335): pid=13983 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=LOGIN msg=audit(1414328107.190:8336): pid=13983 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=309 res=1 >type=USER_ROLE_CHANGE msg=audit(1414328107.265:8337): pid=13983 uid=0 auid=0 ses=309 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_START msg=audit(1414328107.281:8338): pid=13983 uid=0 auid=0 ses=309 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1414328107.288:8339): pid=13983 uid=0 auid=0 ses=309 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_START msg=audit(1414328107.288:8340): pid=13983 uid=0 auid=0 ses=309 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414328107.290:8341): pid=13986 uid=0 auid=0 ses=309 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=13986 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414328107.290:8342): pid=13986 uid=0 auid=0 ses=309 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=13986 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRED_REFR msg=audit(1414328107.291:8343): pid=13986 uid=0 auid=0 ses=309 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_END msg=audit(1414328107.316:8344): pid=13983 uid=0 auid=0 ses=309 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRED_DISP msg=audit(1414328107.317:8345): pid=13983 uid=0 auid=0 ses=309 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_END msg=audit(1414328107.317:8346): pid=13983 uid=0 auid=0 ses=309 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1414328107.317:8347): pid=13983 uid=0 auid=0 ses=309 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414328107.317:8348): pid=13983 uid=0 auid=0 ses=309 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=13983 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414328107.317:8349): pid=13983 uid=0 auid=0 ses=309 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=13983 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414328107.318:8350): pid=13983 uid=0 auid=0 ses=309 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=13983 suid=0 rport=60113 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_CMD msg=audit(1414328108.208:8351): pid=13988 uid=993 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D6F6663746C2064756D702D666C6F77732062722D696E74207461626C653D3233 terminal=? res=success' >type=CRED_ACQ msg=audit(1414328108.208:8352): pid=13988 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1414328108.209:8353): pid=13988 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1414328108.271:8354): pid=13988 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1414328108.272:8355): pid=13988 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1414328110.207:8356): pid=14021 uid=993 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D6F6663746C2064756D702D666C6F77732062722D696E74207461626C653D3233 terminal=? res=success' >type=CRED_ACQ msg=audit(1414328110.207:8357): pid=14021 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1414328110.207:8358): pid=14021 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1414328110.273:8359): pid=14021 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1414328110.273:8360): pid=14021 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414328110.338:8361): pid=14028 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=14028 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414328110.339:8362): pid=14028 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=14028 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414328110.340:8363): pid=14027 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=14028 suid=74 rport=60114 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414328110.340:8364): pid=14027 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=14028 suid=74 rport=60114 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414328110.877:8365): pid=14027 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=60114 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414328110.877:8366): pid=14027 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=e7:e2:3d:94:48:cf:f5:8c:5e:54:98:bd:89:a5:29:a9 rport=60114 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_ACCT msg=audit(1414328110.881:8367): pid=14027 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414328110.881:8368): pid=14027 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=14028 suid=74 rport=60114 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414328110.882:8369): pid=14027 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1414328110.882:8370): pid=14027 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=LOGIN msg=audit(1414328110.883:8371): pid=14027 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=310 res=1 >type=USER_ROLE_CHANGE msg=audit(1414328110.957:8372): pid=14027 uid=0 auid=0 ses=310 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_START msg=audit(1414328110.975:8373): pid=14027 uid=0 auid=0 ses=310 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1414328110.978:8374): pid=14027 uid=0 auid=0 ses=310 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_START msg=audit(1414328110.979:8375): pid=14027 uid=0 auid=0 ses=310 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414328110.980:8376): pid=14030 uid=0 auid=0 ses=310 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=14030 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414328110.980:8377): pid=14030 uid=0 auid=0 ses=310 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=14030 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRED_REFR msg=audit(1414328110.981:8378): pid=14030 uid=0 auid=0 ses=310 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_END msg=audit(1414328110.999:8379): pid=14027 uid=0 auid=0 ses=310 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRED_DISP msg=audit(1414328110.999:8380): pid=14027 uid=0 auid=0 ses=310 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_END msg=audit(1414328110.999:8381): pid=14027 uid=0 auid=0 ses=310 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1414328111.000:8382): pid=14027 uid=0 auid=0 ses=310 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414328111.000:8383): pid=14027 uid=0 auid=0 ses=310 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=14027 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414328111.000:8384): pid=14027 uid=0 auid=0 ses=310 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=14027 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414328111.000:8385): pid=14027 uid=0 auid=0 ses=310 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=14027 suid=0 rport=60114 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_CMD msg=audit(1414328112.209:8386): pid=14034 uid=993 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D6F6663746C2064756D702D666C6F77732062722D696E74207461626C653D3233 terminal=? res=success' >type=CRED_ACQ msg=audit(1414328112.209:8387): pid=14034 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1414328112.210:8388): pid=14034 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1414328112.270:8389): pid=14034 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1414328112.270:8390): pid=14034 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414328114.032:8391): pid=14041 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=14041 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414328114.032:8392): pid=14041 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=14041 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414328114.034:8393): pid=14040 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=14041 suid=74 rport=60115 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414328114.034:8394): pid=14040 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=14041 suid=74 rport=60115 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_CMD msg=audit(1414328114.207:8395): pid=14042 uid=993 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D6F6663746C2064756D702D666C6F77732062722D696E74207461626C653D3233 terminal=? res=success' >type=CRED_ACQ msg=audit(1414328114.208:8396): pid=14042 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1414328114.208:8397): pid=14042 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1414328114.268:8398): pid=14042 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1414328114.268:8399): pid=14042 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_AUTH msg=audit(1414328114.570:8400): pid=14040 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=60115 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414328114.570:8401): pid=14040 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=e7:e2:3d:94:48:cf:f5:8c:5e:54:98:bd:89:a5:29:a9 rport=60115 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_ACCT msg=audit(1414328114.574:8402): pid=14040 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414328114.574:8403): pid=14040 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=14041 suid=74 rport=60115 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414328114.576:8404): pid=14040 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1414328114.576:8405): pid=14040 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=LOGIN msg=audit(1414328114.576:8406): pid=14040 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=311 res=1 >type=USER_ROLE_CHANGE msg=audit(1414328114.649:8407): pid=14040 uid=0 auid=0 ses=311 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_START msg=audit(1414328114.665:8408): pid=14040 uid=0 auid=0 ses=311 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1414328114.668:8409): pid=14040 uid=0 auid=0 ses=311 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_START msg=audit(1414328114.669:8410): pid=14040 uid=0 auid=0 ses=311 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414328114.670:8411): pid=14046 uid=0 auid=0 ses=311 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=14046 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414328114.670:8412): pid=14046 uid=0 auid=0 ses=311 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=14046 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRED_REFR msg=audit(1414328114.671:8413): pid=14046 uid=0 auid=0 ses=311 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_END msg=audit(1414328114.686:8414): pid=14040 uid=0 auid=0 ses=311 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRED_DISP msg=audit(1414328114.686:8415): pid=14040 uid=0 auid=0 ses=311 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_END msg=audit(1414328114.687:8416): pid=14040 uid=0 auid=0 ses=311 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1414328114.687:8417): pid=14040 uid=0 auid=0 ses=311 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414328114.687:8418): pid=14040 uid=0 auid=0 ses=311 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=14040 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414328114.687:8419): pid=14040 uid=0 auid=0 ses=311 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=14040 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414328114.687:8420): pid=14040 uid=0 auid=0 ses=311 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=14040 suid=0 rport=60115 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_CMD msg=audit(1414328116.210:8421): pid=14048 uid=993 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D6F6663746C2064756D702D666C6F77732062722D696E74207461626C653D3233 terminal=? res=success' >type=CRED_ACQ msg=audit(1414328116.211:8422): pid=14048 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1414328116.211:8423): pid=14048 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1414328116.271:8424): pid=14048 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1414328116.272:8425): pid=14048 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414328117.709:8426): pid=14055 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=14055 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414328117.709:8427): pid=14055 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=14055 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414328117.712:8428): pid=14054 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=14055 suid=74 rport=60116 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414328117.712:8429): pid=14054 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=14055 suid=74 rport=60116 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_CMD msg=audit(1414328118.210:8430): pid=14056 uid=993 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D6F6663746C2064756D702D666C6F77732062722D696E74207461626C653D3233 terminal=? res=success' >type=CRED_ACQ msg=audit(1414328118.210:8431): pid=14056 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1414328118.211:8432): pid=14056 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_AUTH msg=audit(1414328118.255:8433): pid=14054 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=60116 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414328118.255:8434): pid=14054 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=e7:e2:3d:94:48:cf:f5:8c:5e:54:98:bd:89:a5:29:a9 rport=60116 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_ACCT msg=audit(1414328118.259:8435): pid=14054 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414328118.259:8436): pid=14054 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=14055 suid=74 rport=60116 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414328118.260:8437): pid=14054 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1414328118.261:8438): pid=14054 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=LOGIN msg=audit(1414328118.261:8439): pid=14054 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=312 res=1 >type=USER_END msg=audit(1414328118.275:8440): pid=14056 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1414328118.275:8441): pid=14056 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_ROLE_CHANGE msg=audit(1414328118.335:8442): pid=14054 uid=0 auid=0 ses=312 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_START msg=audit(1414328118.350:8443): pid=14054 uid=0 auid=0 ses=312 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1414328118.354:8444): pid=14054 uid=0 auid=0 ses=312 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_START msg=audit(1414328118.354:8445): pid=14054 uid=0 auid=0 ses=312 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414328118.356:8446): pid=14060 uid=0 auid=0 ses=312 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=14060 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414328118.356:8447): pid=14060 uid=0 auid=0 ses=312 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=14060 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRED_REFR msg=audit(1414328118.357:8448): pid=14060 uid=0 auid=0 ses=312 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_END msg=audit(1414328118.371:8449): pid=14054 uid=0 auid=0 ses=312 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRED_DISP msg=audit(1414328118.371:8450): pid=14054 uid=0 auid=0 ses=312 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_END msg=audit(1414328118.372:8451): pid=14054 uid=0 auid=0 ses=312 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1414328118.372:8452): pid=14054 uid=0 auid=0 ses=312 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414328118.372:8453): pid=14054 uid=0 auid=0 ses=312 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=14054 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414328118.372:8454): pid=14054 uid=0 auid=0 ses=312 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=14054 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414328118.372:8455): pid=14054 uid=0 auid=0 ses=312 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=14054 suid=0 rport=60116 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_CMD msg=audit(1414328120.212:8456): pid=14062 uid=993 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D6F6663746C2064756D702D666C6F77732062722D696E74207461626C653D3233 terminal=? res=success' >type=CRED_ACQ msg=audit(1414328120.213:8457): pid=14062 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1414328120.213:8458): pid=14062 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1414328120.273:8459): pid=14062 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1414328120.273:8460): pid=14062 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414328121.390:8461): pid=14069 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=14069 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414328121.391:8462): pid=14069 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=14069 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414328121.392:8463): pid=14068 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=14069 suid=74 rport=60117 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414328121.392:8464): pid=14068 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=14069 suid=74 rport=60117 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414328121.928:8465): pid=14068 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=60117 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414328121.928:8466): pid=14068 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=e7:e2:3d:94:48:cf:f5:8c:5e:54:98:bd:89:a5:29:a9 rport=60117 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_ACCT msg=audit(1414328121.932:8467): pid=14068 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414328121.932:8468): pid=14068 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=14069 suid=74 rport=60117 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414328121.933:8469): pid=14068 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1414328121.933:8470): pid=14068 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=LOGIN msg=audit(1414328121.934:8471): pid=14068 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=313 res=1 >type=USER_ROLE_CHANGE msg=audit(1414328122.008:8472): pid=14068 uid=0 auid=0 ses=313 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_START msg=audit(1414328122.023:8473): pid=14068 uid=0 auid=0 ses=313 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1414328122.027:8474): pid=14068 uid=0 auid=0 ses=313 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_START msg=audit(1414328122.027:8475): pid=14068 uid=0 auid=0 ses=313 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414328122.029:8476): pid=14071 uid=0 auid=0 ses=313 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=14071 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414328122.029:8477): pid=14071 uid=0 auid=0 ses=313 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=14071 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRED_REFR msg=audit(1414328122.030:8478): pid=14071 uid=0 auid=0 ses=313 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_END msg=audit(1414328122.046:8479): pid=14068 uid=0 auid=0 ses=313 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRED_DISP msg=audit(1414328122.046:8480): pid=14068 uid=0 auid=0 ses=313 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_END msg=audit(1414328122.047:8481): pid=14068 uid=0 auid=0 ses=313 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1414328122.047:8482): pid=14068 uid=0 auid=0 ses=313 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414328122.047:8483): pid=14068 uid=0 auid=0 ses=313 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=14068 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414328122.047:8484): pid=14068 uid=0 auid=0 ses=313 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=14068 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414328122.047:8485): pid=14068 uid=0 auid=0 ses=313 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=14068 suid=0 rport=60117 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_CMD msg=audit(1414328122.214:8486): pid=14082 uid=993 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D6F6663746C2064756D702D666C6F77732062722D696E74207461626C653D3233 terminal=? res=success' >type=CRED_ACQ msg=audit(1414328122.215:8487): pid=14082 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1414328122.215:8488): pid=14082 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1414328122.279:8489): pid=14082 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1414328122.279:8490): pid=14082 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1414328122.323:8491): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="xinetd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1414328124.215:8492): pid=14101 uid=993 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D6F6663746C2064756D702D666C6F77732062722D696E74207461626C653D3233 terminal=? res=success' >type=CRED_ACQ msg=audit(1414328124.215:8493): pid=14101 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1414328124.216:8494): pid=14101 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1414328124.281:8495): pid=14101 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1414328124.281:8496): pid=14101 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414328125.070:8497): pid=14108 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=14108 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414328125.071:8498): pid=14108 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=14108 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414328125.072:8499): pid=14107 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=14108 suid=74 rport=60118 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414328125.072:8500): pid=14107 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=14108 suid=74 rport=60118 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414328125.610:8501): pid=14107 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=60118 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414328125.610:8502): pid=14107 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=e7:e2:3d:94:48:cf:f5:8c:5e:54:98:bd:89:a5:29:a9 rport=60118 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_ACCT msg=audit(1414328125.615:8503): pid=14107 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414328125.615:8504): pid=14107 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=14108 suid=74 rport=60118 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414328125.616:8505): pid=14107 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1414328125.617:8506): pid=14107 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=LOGIN msg=audit(1414328125.617:8507): pid=14107 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=314 res=1 >type=USER_ROLE_CHANGE msg=audit(1414328125.693:8508): pid=14107 uid=0 auid=0 ses=314 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_START msg=audit(1414328125.711:8509): pid=14107 uid=0 auid=0 ses=314 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1414328125.714:8510): pid=14107 uid=0 auid=0 ses=314 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_START msg=audit(1414328125.714:8511): pid=14107 uid=0 auid=0 ses=314 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414328125.716:8512): pid=14110 uid=0 auid=0 ses=314 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=14110 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414328125.716:8513): pid=14110 uid=0 auid=0 ses=314 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=14110 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRED_REFR msg=audit(1414328125.717:8514): pid=14110 uid=0 auid=0 ses=314 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_END msg=audit(1414328125.732:8515): pid=14107 uid=0 auid=0 ses=314 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRED_DISP msg=audit(1414328125.733:8516): pid=14107 uid=0 auid=0 ses=314 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_END msg=audit(1414328125.733:8517): pid=14107 uid=0 auid=0 ses=314 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1414328125.733:8518): pid=14107 uid=0 auid=0 ses=314 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414328125.733:8519): pid=14107 uid=0 auid=0 ses=314 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=14107 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414328125.733:8520): pid=14107 uid=0 auid=0 ses=314 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=14107 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414328125.733:8521): pid=14107 uid=0 auid=0 ses=314 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=14107 suid=0 rport=60118 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414328125.753:8522): pid=14114 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=14114 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414328125.753:8523): pid=14114 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=14114 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414328125.754:8524): pid=14113 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=14114 suid=74 rport=60119 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414328125.754:8525): pid=14113 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=14114 suid=74 rport=60119 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_CMD msg=audit(1414328126.217:8526): pid=14115 uid=993 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D6F6663746C2064756D702D666C6F77732062722D696E74207461626C653D3233 terminal=? res=success' >type=CRED_ACQ msg=audit(1414328126.217:8527): pid=14115 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1414328126.218:8528): pid=14115 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1414328126.277:8529): pid=14115 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1414328126.277:8530): pid=14115 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_AUTH msg=audit(1414328126.288:8531): pid=14113 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=60119 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414328126.288:8532): pid=14113 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=e7:e2:3d:94:48:cf:f5:8c:5e:54:98:bd:89:a5:29:a9 rport=60119 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_ACCT msg=audit(1414328126.292:8533): pid=14113 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414328126.292:8534): pid=14113 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=14114 suid=74 rport=60119 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414328126.293:8535): pid=14113 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1414328126.294:8536): pid=14113 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=LOGIN msg=audit(1414328126.294:8537): pid=14113 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=315 res=1 >type=USER_ROLE_CHANGE msg=audit(1414328126.365:8538): pid=14113 uid=0 auid=0 ses=315 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_START msg=audit(1414328126.381:8539): pid=14113 uid=0 auid=0 ses=315 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1414328126.385:8540): pid=14113 uid=0 auid=0 ses=315 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_START msg=audit(1414328126.385:8541): pid=14113 uid=0 auid=0 ses=315 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414328126.386:8542): pid=14119 uid=0 auid=0 ses=315 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=14119 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414328126.387:8543): pid=14119 uid=0 auid=0 ses=315 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=14119 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRED_REFR msg=audit(1414328126.387:8544): pid=14119 uid=0 auid=0 ses=315 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_END msg=audit(1414328126.403:8545): pid=14113 uid=0 auid=0 ses=315 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRED_DISP msg=audit(1414328126.404:8546): pid=14113 uid=0 auid=0 ses=315 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_END msg=audit(1414328126.404:8547): pid=14113 uid=0 auid=0 ses=315 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1414328126.404:8548): pid=14113 uid=0 auid=0 ses=315 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414328126.404:8549): pid=14113 uid=0 auid=0 ses=315 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=14113 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414328126.404:8550): pid=14113 uid=0 auid=0 ses=315 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=14113 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414328126.405:8551): pid=14113 uid=0 auid=0 ses=315 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=14113 suid=0 rport=60119 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414328126.421:8552): pid=14130 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=14130 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414328126.421:8553): pid=14130 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=14130 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414328126.424:8554): pid=14129 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=14130 suid=74 rport=60120 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414328126.424:8555): pid=14129 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=14130 suid=74 rport=60120 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414328126.958:8556): pid=14129 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=60120 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414328126.958:8557): pid=14129 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=e7:e2:3d:94:48:cf:f5:8c:5e:54:98:bd:89:a5:29:a9 rport=60120 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_ACCT msg=audit(1414328126.963:8558): pid=14129 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414328126.963:8559): pid=14129 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=14130 suid=74 rport=60120 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414328126.964:8560): pid=14129 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1414328126.964:8561): pid=14129 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=LOGIN msg=audit(1414328126.965:8562): pid=14129 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=316 res=1 >type=USER_ROLE_CHANGE msg=audit(1414328127.046:8563): pid=14129 uid=0 auid=0 ses=316 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_START msg=audit(1414328127.072:8564): pid=14129 uid=0 auid=0 ses=316 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1414328127.076:8565): pid=14129 uid=0 auid=0 ses=316 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_START msg=audit(1414328127.076:8566): pid=14129 uid=0 auid=0 ses=316 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414328127.078:8567): pid=14138 uid=0 auid=0 ses=316 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=14138 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414328127.078:8568): pid=14138 uid=0 auid=0 ses=316 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=14138 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRED_REFR msg=audit(1414328127.079:8569): pid=14138 uid=0 auid=0 ses=316 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_END msg=audit(1414328127.094:8570): pid=14129 uid=0 auid=0 ses=316 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRED_DISP msg=audit(1414328127.094:8571): pid=14129 uid=0 auid=0 ses=316 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_END msg=audit(1414328127.094:8572): pid=14129 uid=0 auid=0 ses=316 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1414328127.095:8573): pid=14129 uid=0 auid=0 ses=316 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414328127.095:8574): pid=14129 uid=0 auid=0 ses=316 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=14129 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414328127.095:8575): pid=14129 uid=0 auid=0 ses=316 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=14129 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414328127.095:8576): pid=14129 uid=0 auid=0 ses=316 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=14129 suid=0 rport=60120 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_CMD msg=audit(1414328128.218:8577): pid=14171 uid=993 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D6F6663746C2064756D702D666C6F77732062722D696E74207461626C653D3233 terminal=? res=success' >type=CRED_ACQ msg=audit(1414328128.219:8578): pid=14171 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1414328128.219:8579): pid=14171 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1414328128.279:8580): pid=14171 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1414328128.279:8581): pid=14171 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=NETFILTER_CFG msg=audit(1414328129.351:8582): table=filter family=2 entries=0 >type=NETFILTER_CFG msg=audit(1414328129.351:8582): table=nat family=2 entries=0 >type=NETFILTER_CFG msg=audit(1414328129.351:8582): table=mangle family=2 entries=0 >type=NETFILTER_CFG msg=audit(1414328129.351:8582): table=filter family=10 entries=0 >type=SYSCALL msg=audit(1414328129.351:8582): arch=c000003e syscall=272 success=yes exit=0 a0=40000000 a1=c0 a2=0 a3=7fffe88e6e00 items=0 ppid=14380 pid=14387 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=315 comm="ip" exe="/usr/sbin/ip" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null) >type=NETFILTER_CFG msg=audit(1414328129.420:8583): table=filter family=2 entries=0 >type=NETFILTER_CFG msg=audit(1414328129.420:8583): table=nat family=2 entries=0 >type=NETFILTER_CFG msg=audit(1414328129.420:8583): table=mangle family=2 entries=0 >type=NETFILTER_CFG msg=audit(1414328129.420:8583): table=filter family=10 entries=0 >type=SYSCALL msg=audit(1414328129.420:8583): arch=c000003e syscall=272 success=yes exit=0 a0=40000000 a1=c0 a2=0 a3=7fff00088500 items=0 ppid=14380 pid=14394 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=315 comm="ip" exe="/usr/sbin/ip" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null) >type=NETFILTER_CFG msg=audit(1414328129.743:8584): table=filter family=2 entries=0 >type=NETFILTER_CFG msg=audit(1414328129.743:8584): table=nat family=2 entries=0 >type=NETFILTER_CFG msg=audit(1414328129.743:8584): table=mangle family=2 entries=0 >type=NETFILTER_CFG msg=audit(1414328129.743:8584): table=filter family=10 entries=0 >type=SYSCALL msg=audit(1414328129.743:8584): arch=c000003e syscall=272 success=yes exit=0 a0=40000000 a1=c0 a2=0 a3=7fff2d2887a0 items=0 ppid=14380 pid=14396 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=315 comm="ip" exe="/usr/sbin/ip" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null) >type=CRYPTO_KEY_USER msg=audit(1414328130.116:8585): pid=14416 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=14416 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414328130.116:8586): pid=14416 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=14416 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414328130.117:8587): pid=14415 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=14416 suid=74 rport=60121 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414328130.118:8588): pid=14415 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=14416 suid=74 rport=60121 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_CMD msg=audit(1414328130.220:8589): pid=14417 uid=993 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D6F6663746C2064756D702D666C6F77732062722D696E74207461626C653D3233 terminal=? res=success' >type=CRED_ACQ msg=audit(1414328130.220:8590): pid=14417 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1414328130.220:8591): pid=14417 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1414328130.283:8592): pid=14417 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1414328130.283:8593): pid=14417 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_AUTH msg=audit(1414328130.656:8594): pid=14415 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=60121 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414328130.656:8595): pid=14415 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=e7:e2:3d:94:48:cf:f5:8c:5e:54:98:bd:89:a5:29:a9 rport=60121 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_ACCT msg=audit(1414328130.667:8596): pid=14415 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414328130.667:8597): pid=14415 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=14416 suid=74 rport=60121 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414328130.668:8598): pid=14415 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1414328130.668:8599): pid=14415 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=LOGIN msg=audit(1414328130.668:8600): pid=14415 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=317 res=1 >type=USER_ROLE_CHANGE msg=audit(1414328130.747:8601): pid=14415 uid=0 auid=0 ses=317 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_START msg=audit(1414328130.762:8602): pid=14415 uid=0 auid=0 ses=317 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1414328130.766:8603): pid=14415 uid=0 auid=0 ses=317 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_START msg=audit(1414328130.766:8604): pid=14415 uid=0 auid=0 ses=317 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414328130.768:8605): pid=14421 uid=0 auid=0 ses=317 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=14421 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414328130.768:8606): pid=14421 uid=0 auid=0 ses=317 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=14421 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRED_REFR msg=audit(1414328130.770:8607): pid=14421 uid=0 auid=0 ses=317 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_END msg=audit(1414328130.785:8608): pid=14415 uid=0 auid=0 ses=317 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRED_DISP msg=audit(1414328130.785:8609): pid=14415 uid=0 auid=0 ses=317 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_END msg=audit(1414328130.785:8610): pid=14415 uid=0 auid=0 ses=317 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1414328130.785:8611): pid=14415 uid=0 auid=0 ses=317 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414328130.785:8612): pid=14415 uid=0 auid=0 ses=317 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=14415 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414328130.786:8613): pid=14415 uid=0 auid=0 ses=317 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=14415 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414328130.786:8614): pid=14415 uid=0 auid=0 ses=317 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=14415 suid=0 rport=60121 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_CMD msg=audit(1414328132.224:8615): pid=14443 uid=993 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D6F6663746C2064756D702D666C6F77732062722D696E74207461626C653D3233 terminal=? res=success' >type=CRED_ACQ msg=audit(1414328132.224:8616): pid=14443 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1414328132.225:8617): pid=14443 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1414328132.292:8618): pid=14443 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1414328132.293:8619): pid=14443 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414328133.807:8620): pid=14450 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=14450 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414328133.807:8621): pid=14450 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=14450 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414328133.810:8622): pid=14449 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=14450 suid=74 rport=60122 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414328133.810:8623): pid=14449 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=14450 suid=74 rport=60122 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_CMD msg=audit(1414328134.224:8624): pid=14454 uid=993 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D6F6663746C2064756D702D666C6F77732062722D696E74207461626C653D3233 terminal=? res=success' >type=CRED_ACQ msg=audit(1414328134.224:8625): pid=14454 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1414328134.224:8626): pid=14454 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1414328134.286:8627): pid=14454 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1414328134.286:8628): pid=14454 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_AUTH msg=audit(1414328134.349:8629): pid=14449 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=60122 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414328134.349:8630): pid=14449 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=e7:e2:3d:94:48:cf:f5:8c:5e:54:98:bd:89:a5:29:a9 rport=60122 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_ACCT msg=audit(1414328134.353:8631): pid=14449 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414328134.353:8632): pid=14449 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=14450 suid=74 rport=60122 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414328134.354:8633): pid=14449 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1414328134.355:8634): pid=14449 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=LOGIN msg=audit(1414328134.355:8635): pid=14449 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=318 res=1 >type=USER_ROLE_CHANGE msg=audit(1414328134.428:8636): pid=14449 uid=0 auid=0 ses=318 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_START msg=audit(1414328134.446:8637): pid=14449 uid=0 auid=0 ses=318 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1414328134.451:8638): pid=14449 uid=0 auid=0 ses=318 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_START msg=audit(1414328134.451:8639): pid=14449 uid=0 auid=0 ses=318 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414328134.451:8640): pid=14463 uid=0 auid=0 ses=318 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=14463 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414328134.452:8641): pid=14463 uid=0 auid=0 ses=318 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=14463 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRED_REFR msg=audit(1414328134.452:8642): pid=14463 uid=0 auid=0 ses=318 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_END msg=audit(1414328134.474:8643): pid=14449 uid=0 auid=0 ses=318 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRED_DISP msg=audit(1414328134.474:8644): pid=14449 uid=0 auid=0 ses=318 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_END msg=audit(1414328134.475:8645): pid=14449 uid=0 auid=0 ses=318 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1414328134.475:8646): pid=14449 uid=0 auid=0 ses=318 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414328134.475:8647): pid=14449 uid=0 auid=0 ses=318 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=14449 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414328134.475:8648): pid=14449 uid=0 auid=0 ses=318 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=14449 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414328134.475:8649): pid=14449 uid=0 auid=0 ses=318 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=14449 suid=0 rport=60122 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=NETFILTER_CFG msg=audit(1414328134.697:8650): table=filter family=2 entries=53 >type=SYSCALL msg=audit(1414328134.697:8650): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=1ac60d0 items=0 ppid=14124 pid=14471 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=315 comm="iptables" exe="/usr/sbin/xtables-multi" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null) >type=NETFILTER_CFG msg=audit(1414328134.955:8651): table=filter family=2 entries=54 >type=SYSCALL msg=audit(1414328134.955:8651): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=127d530 items=0 ppid=14124 pid=14504 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=315 comm="iptables" exe="/usr/sbin/xtables-multi" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null) >type=USER_CMD msg=audit(1414328136.225:8652): pid=14534 uid=993 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D6F6663746C2064756D702D666C6F77732062722D696E74207461626C653D3233 terminal=? res=success' >type=CRED_ACQ msg=audit(1414328136.225:8653): pid=14534 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1414328136.226:8654): pid=14534 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1414328136.284:8655): pid=14534 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1414328136.284:8656): pid=14534 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414328137.502:8657): pid=14661 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=14661 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414328137.503:8658): pid=14661 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=14661 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414328137.504:8659): pid=14660 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=14661 suid=74 rport=60126 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414328137.504:8660): pid=14660 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=14661 suid=74 rport=60126 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414328138.046:8661): pid=14660 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=60126 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414328138.046:8662): pid=14660 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=e7:e2:3d:94:48:cf:f5:8c:5e:54:98:bd:89:a5:29:a9 rport=60126 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_ACCT msg=audit(1414328138.052:8663): pid=14660 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414328138.053:8664): pid=14660 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=14661 suid=74 rport=60126 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414328138.054:8665): pid=14660 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1414328138.055:8666): pid=14660 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=LOGIN msg=audit(1414328138.055:8667): pid=14660 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=319 res=1 >type=USER_ROLE_CHANGE msg=audit(1414328138.158:8668): pid=14660 uid=0 auid=0 ses=319 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_START msg=audit(1414328138.176:8669): pid=14660 uid=0 auid=0 ses=319 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1414328138.180:8670): pid=14660 uid=0 auid=0 ses=319 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_START msg=audit(1414328138.180:8671): pid=14660 uid=0 auid=0 ses=319 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414328138.182:8672): pid=14663 uid=0 auid=0 ses=319 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=14663 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414328138.182:8673): pid=14663 uid=0 auid=0 ses=319 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=14663 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRED_REFR msg=audit(1414328138.183:8674): pid=14663 uid=0 auid=0 ses=319 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_END msg=audit(1414328138.198:8675): pid=14660 uid=0 auid=0 ses=319 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRED_DISP msg=audit(1414328138.198:8676): pid=14660 uid=0 auid=0 ses=319 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_END msg=audit(1414328138.199:8677): pid=14660 uid=0 auid=0 ses=319 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1414328138.199:8678): pid=14660 uid=0 auid=0 ses=319 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414328138.199:8679): pid=14660 uid=0 auid=0 ses=319 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=14660 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414328138.199:8680): pid=14660 uid=0 auid=0 ses=319 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=14660 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414328138.199:8681): pid=14660 uid=0 auid=0 ses=319 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=14660 suid=0 rport=60126 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_CMD msg=audit(1414328138.228:8682): pid=14665 uid=993 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D6F6663746C2064756D702D666C6F77732062722D696E74207461626C653D3233 terminal=? res=success' >type=CRED_ACQ msg=audit(1414328138.228:8683): pid=14665 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1414328138.229:8684): pid=14665 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1414328138.289:8685): pid=14665 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1414328138.289:8686): pid=14665 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1414328140.227:8687): pid=14671 uid=993 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D6F6663746C2064756D702D666C6F77732062722D696E74207461626C653D3233 terminal=? res=success' >type=CRED_ACQ msg=audit(1414328140.228:8688): pid=14671 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1414328140.228:8689): pid=14671 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1414328140.285:8690): pid=14671 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1414328140.285:8691): pid=14671 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414328141.226:8692): pid=14680 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=14680 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414328141.226:8693): pid=14680 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=14680 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414328141.227:8694): pid=14679 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=14680 suid=74 rport=60127 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414328141.229:8695): pid=14679 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=14680 suid=74 rport=60127 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414328141.767:8696): pid=14679 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=60127 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414328141.767:8697): pid=14679 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=e7:e2:3d:94:48:cf:f5:8c:5e:54:98:bd:89:a5:29:a9 rport=60127 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_ACCT msg=audit(1414328141.772:8698): pid=14679 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414328141.772:8699): pid=14679 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=14680 suid=74 rport=60127 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414328141.773:8700): pid=14679 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1414328141.773:8701): pid=14679 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=LOGIN msg=audit(1414328141.773:8702): pid=14679 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=320 res=1 >type=USER_ROLE_CHANGE msg=audit(1414328141.852:8703): pid=14679 uid=0 auid=0 ses=320 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_START msg=audit(1414328141.868:8704): pid=14679 uid=0 auid=0 ses=320 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1414328141.871:8705): pid=14679 uid=0 auid=0 ses=320 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_START msg=audit(1414328141.872:8706): pid=14679 uid=0 auid=0 ses=320 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414328141.873:8707): pid=14683 uid=0 auid=0 ses=320 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=14683 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414328141.874:8708): pid=14683 uid=0 auid=0 ses=320 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=14683 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRED_REFR msg=audit(1414328141.874:8709): pid=14683 uid=0 auid=0 ses=320 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_END msg=audit(1414328141.890:8710): pid=14679 uid=0 auid=0 ses=320 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRED_DISP msg=audit(1414328141.890:8711): pid=14679 uid=0 auid=0 ses=320 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_END msg=audit(1414328141.891:8712): pid=14679 uid=0 auid=0 ses=320 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1414328141.891:8713): pid=14679 uid=0 auid=0 ses=320 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414328141.891:8714): pid=14679 uid=0 auid=0 ses=320 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=14679 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414328141.891:8715): pid=14679 uid=0 auid=0 ses=320 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=14679 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414328141.891:8716): pid=14679 uid=0 auid=0 ses=320 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=14679 suid=0 rport=60127 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_CMD msg=audit(1414328142.230:8717): pid=14687 uid=993 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D6F6663746C2064756D702D666C6F77732062722D696E74207461626C653D3233 terminal=? res=success' >type=CRED_ACQ msg=audit(1414328142.231:8718): pid=14687 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1414328142.231:8719): pid=14687 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1414328142.290:8720): pid=14687 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1414328142.290:8721): pid=14687 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1414328144.036:8722): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="openstack-swift-account-reaper" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1414328144.057:8723): pid=14741 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D4320766773202D2D6E6F68656164696E6773202D2D756E69743D67202D6F206E616D652C73697A652C667265652C6C765F636F756E742C75756964202D2D736570617261746F72203A202D2D6E6F7375666669782063696E6465722D766F6C756D6573 terminal=? res=success' >type=CRED_ACQ msg=audit(1414328144.057:8724): pid=14741 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1414328144.059:8725): pid=14741 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1414328144.133:8726): pid=14741 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1414328144.133:8727): pid=14741 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1414328144.231:8728): pid=14763 uid=993 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D6F6663746C2064756D702D666C6F77732062722D696E74207461626C653D3233 terminal=? res=success' >type=CRED_ACQ msg=audit(1414328144.231:8729): pid=14763 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1414328144.232:8730): pid=14763 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1414328144.298:8731): pid=14763 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1414328144.299:8732): pid=14763 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1414328144.382:8733): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="openstack-swift-account-auditor" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414328144.915:8734): pid=14805 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=14805 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414328144.915:8735): pid=14805 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=14805 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414328144.917:8736): pid=14804 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=14805 suid=74 rport=60130 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414328144.917:8737): pid=14804 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=14805 suid=74 rport=60130 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414328145.456:8738): pid=14804 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=60130 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414328145.456:8739): pid=14804 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=e7:e2:3d:94:48:cf:f5:8c:5e:54:98:bd:89:a5:29:a9 rport=60130 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_ACCT msg=audit(1414328145.461:8740): pid=14804 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414328145.461:8741): pid=14804 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=14805 suid=74 rport=60130 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414328145.462:8742): pid=14804 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1414328145.462:8743): pid=14804 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=LOGIN msg=audit(1414328145.462:8744): pid=14804 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=321 res=1 >type=USER_ROLE_CHANGE msg=audit(1414328145.542:8745): pid=14804 uid=0 auid=0 ses=321 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_START msg=audit(1414328145.605:8746): pid=14804 uid=0 auid=0 ses=321 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1414328145.611:8747): pid=14804 uid=0 auid=0 ses=321 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_START msg=audit(1414328145.611:8748): pid=14804 uid=0 auid=0 ses=321 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414328145.613:8749): pid=14807 uid=0 auid=0 ses=321 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=14807 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414328145.613:8750): pid=14807 uid=0 auid=0 ses=321 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=14807 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRED_REFR msg=audit(1414328145.614:8751): pid=14807 uid=0 auid=0 ses=321 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_END msg=audit(1414328145.639:8752): pid=14804 uid=0 auid=0 ses=321 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRED_DISP msg=audit(1414328145.639:8753): pid=14804 uid=0 auid=0 ses=321 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_END msg=audit(1414328145.640:8754): pid=14804 uid=0 auid=0 ses=321 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1414328145.640:8755): pid=14804 uid=0 auid=0 ses=321 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414328145.640:8756): pid=14804 uid=0 auid=0 ses=321 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=14804 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414328145.640:8757): pid=14804 uid=0 auid=0 ses=321 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=14804 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414328145.640:8758): pid=14804 uid=0 auid=0 ses=321 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=14804 suid=0 rport=60130 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_CMD msg=audit(1414328146.231:8759): pid=14813 uid=993 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D6F6663746C2064756D702D666C6F77732062722D696E74207461626C653D3233 terminal=? res=success' >type=CRED_ACQ msg=audit(1414328146.231:8760): pid=14813 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1414328146.233:8761): pid=14813 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1414328146.293:8762): pid=14813 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1414328146.293:8763): pid=14813 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1414328148.231:8764): pid=14818 uid=993 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D6F6663746C2064756D702D666C6F77732062722D696E74207461626C653D3233 terminal=? res=success' >type=CRED_ACQ msg=audit(1414328148.231:8765): pid=14818 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1414328148.231:8766): pid=14818 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1414328148.291:8767): pid=14818 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1414328148.291:8768): pid=14818 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414328148.651:8769): pid=14826 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=14826 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414328148.651:8770): pid=14826 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=14826 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414328148.652:8771): pid=14825 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=14826 suid=74 rport=60132 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414328148.652:8772): pid=14825 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=14826 suid=74 rport=60132 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414328149.191:8773): pid=14825 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=60132 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414328149.191:8774): pid=14825 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=e7:e2:3d:94:48:cf:f5:8c:5e:54:98:bd:89:a5:29:a9 rport=60132 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_ACCT msg=audit(1414328149.196:8775): pid=14825 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414328149.196:8776): pid=14825 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=14826 suid=74 rport=60132 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414328149.197:8777): pid=14825 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1414328149.197:8778): pid=14825 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=LOGIN msg=audit(1414328149.197:8779): pid=14825 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=322 res=1 >type=USER_ROLE_CHANGE msg=audit(1414328149.274:8780): pid=14825 uid=0 auid=0 ses=322 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_START msg=audit(1414328149.289:8781): pid=14825 uid=0 auid=0 ses=322 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1414328149.292:8782): pid=14825 uid=0 auid=0 ses=322 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_START msg=audit(1414328149.292:8783): pid=14825 uid=0 auid=0 ses=322 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414328149.294:8784): pid=14828 uid=0 auid=0 ses=322 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=14828 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414328149.294:8785): pid=14828 uid=0 auid=0 ses=322 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=14828 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRED_REFR msg=audit(1414328149.295:8786): pid=14828 uid=0 auid=0 ses=322 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_END msg=audit(1414328149.315:8787): pid=14825 uid=0 auid=0 ses=322 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRED_DISP msg=audit(1414328149.315:8788): pid=14825 uid=0 auid=0 ses=322 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_END msg=audit(1414328149.316:8789): pid=14825 uid=0 auid=0 ses=322 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1414328149.316:8790): pid=14825 uid=0 auid=0 ses=322 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414328149.316:8791): pid=14825 uid=0 auid=0 ses=322 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=14825 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414328149.316:8792): pid=14825 uid=0 auid=0 ses=322 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=14825 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414328149.316:8793): pid=14825 uid=0 auid=0 ses=322 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=14825 suid=0 rport=60132 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_CMD msg=audit(1414328150.233:8794): pid=14830 uid=993 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D6F6663746C2064756D702D666C6F77732062722D696E74207461626C653D3233 terminal=? res=success' >type=CRED_ACQ msg=audit(1414328150.233:8795): pid=14830 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1414328150.233:8796): pid=14830 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1414328150.296:8797): pid=14830 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1414328150.296:8798): pid=14830 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1414328150.827:8799): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="openstack-swift-container-replicator" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1414328151.079:8800): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="openstack-swift-container-auditor" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1414328152.235:8801): pid=14940 uid=993 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D6F6663746C2064756D702D666C6F77732062722D696E74207461626C653D3233 terminal=? res=success' >type=CRED_ACQ msg=audit(1414328152.235:8802): pid=14940 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1414328152.236:8803): pid=14940 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1414328152.297:8804): pid=14940 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1414328152.298:8805): pid=14940 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414328152.336:8806): pid=14947 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=14947 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414328152.336:8807): pid=14947 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=14947 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414328152.337:8808): pid=14946 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=14947 suid=74 rport=60134 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414328152.337:8809): pid=14946 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=14947 suid=74 rport=60134 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414328152.875:8810): pid=14946 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=60134 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414328152.875:8811): pid=14946 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=e7:e2:3d:94:48:cf:f5:8c:5e:54:98:bd:89:a5:29:a9 rport=60134 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_ACCT msg=audit(1414328152.879:8812): pid=14946 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414328152.880:8813): pid=14946 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=14947 suid=74 rport=60134 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414328152.881:8814): pid=14946 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1414328152.881:8815): pid=14946 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=LOGIN msg=audit(1414328152.881:8816): pid=14946 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=323 res=1 >type=USER_ROLE_CHANGE msg=audit(1414328152.962:8817): pid=14946 uid=0 auid=0 ses=323 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_START msg=audit(1414328153.026:8818): pid=14946 uid=0 auid=0 ses=323 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1414328153.033:8819): pid=14946 uid=0 auid=0 ses=323 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_START msg=audit(1414328153.033:8820): pid=14946 uid=0 auid=0 ses=323 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414328153.035:8821): pid=14952 uid=0 auid=0 ses=323 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=14952 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414328153.035:8822): pid=14952 uid=0 auid=0 ses=323 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=14952 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRED_REFR msg=audit(1414328153.036:8823): pid=14952 uid=0 auid=0 ses=323 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_END msg=audit(1414328153.055:8824): pid=14946 uid=0 auid=0 ses=323 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRED_DISP msg=audit(1414328153.055:8825): pid=14946 uid=0 auid=0 ses=323 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_END msg=audit(1414328153.056:8826): pid=14946 uid=0 auid=0 ses=323 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1414328153.056:8827): pid=14946 uid=0 auid=0 ses=323 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414328153.056:8828): pid=14946 uid=0 auid=0 ses=323 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=14946 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414328153.056:8829): pid=14946 uid=0 auid=0 ses=323 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=14946 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414328153.056:8830): pid=14946 uid=0 auid=0 ses=323 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=14946 suid=0 rport=60134 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_CMD msg=audit(1414328154.235:8831): pid=14954 uid=993 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D6F6663746C2064756D702D666C6F77732062722D696E74207461626C653D3233 terminal=? res=success' >type=CRED_ACQ msg=audit(1414328154.235:8832): pid=14954 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1414328154.236:8833): pid=14954 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1414328154.296:8834): pid=14954 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1414328154.296:8835): pid=14954 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414328156.079:8836): pid=14964 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=14964 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414328156.079:8837): pid=14964 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=14964 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414328156.080:8838): pid=14963 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=14964 suid=74 rport=60137 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414328156.080:8839): pid=14963 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=14964 suid=74 rport=60137 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_CMD msg=audit(1414328156.235:8840): pid=14965 uid=993 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D6F6663746C2064756D702D666C6F77732062722D696E74207461626C653D3233 terminal=? res=success' >type=CRED_ACQ msg=audit(1414328156.235:8841): pid=14965 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1414328156.236:8842): pid=14965 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1414328156.295:8843): pid=14965 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1414328156.295:8844): pid=14965 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_AUTH msg=audit(1414328156.619:8845): pid=14963 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=60137 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414328156.619:8846): pid=14963 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=e7:e2:3d:94:48:cf:f5:8c:5e:54:98:bd:89:a5:29:a9 rport=60137 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_ACCT msg=audit(1414328156.623:8847): pid=14963 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414328156.623:8848): pid=14963 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=14964 suid=74 rport=60137 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414328156.624:8849): pid=14963 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1414328156.624:8850): pid=14963 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=LOGIN msg=audit(1414328156.624:8851): pid=14963 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=324 res=1 >type=USER_ROLE_CHANGE msg=audit(1414328156.705:8852): pid=14963 uid=0 auid=0 ses=324 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_START msg=audit(1414328156.722:8853): pid=14963 uid=0 auid=0 ses=324 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1414328156.726:8854): pid=14963 uid=0 auid=0 ses=324 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_START msg=audit(1414328156.726:8855): pid=14963 uid=0 auid=0 ses=324 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414328156.728:8856): pid=14969 uid=0 auid=0 ses=324 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=14969 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414328156.728:8857): pid=14969 uid=0 auid=0 ses=324 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=14969 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRED_REFR msg=audit(1414328156.729:8858): pid=14969 uid=0 auid=0 ses=324 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_END msg=audit(1414328156.753:8859): pid=14963 uid=0 auid=0 ses=324 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRED_DISP msg=audit(1414328156.753:8860): pid=14963 uid=0 auid=0 ses=324 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_END msg=audit(1414328156.754:8861): pid=14963 uid=0 auid=0 ses=324 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1414328156.754:8862): pid=14963 uid=0 auid=0 ses=324 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414328156.754:8863): pid=14963 uid=0 auid=0 ses=324 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=14963 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414328156.754:8864): pid=14963 uid=0 auid=0 ses=324 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=14963 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414328156.754:8865): pid=14963 uid=0 auid=0 ses=324 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=14963 suid=0 rport=60137 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=SERVICE_START msg=audit(1414328157.203:8866): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="openstack-swift-object-auditor" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1414328157.486:8867): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="openstack-swift-object-updater" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1414328157.814:8868): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="NetworkManager-wait-online" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1414328157.814:8869): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="NetworkManager-wait-online" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1414328157.816:8870): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="openstack-swift-container" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1414328158.083:8871): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="openstack-swift-container" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=USER_CMD msg=audit(1414328158.239:8872): pid=15114 uid=993 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D6F6663746C2064756D702D666C6F77732062722D696E74207461626C653D3233 terminal=? res=success' >type=CRED_ACQ msg=audit(1414328158.239:8873): pid=15114 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1414328158.240:8874): pid=15114 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1414328158.301:8875): pid=15114 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1414328158.301:8876): pid=15114 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414328159.773:8877): pid=15124 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=15124 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414328159.773:8878): pid=15124 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=15124 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414328159.774:8879): pid=15123 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=15124 suid=74 rport=60138 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414328159.774:8880): pid=15123 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=15124 suid=74 rport=60138 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_CMD msg=audit(1414328160.237:8881): pid=15125 uid=993 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D6F6663746C2064756D702D666C6F77732062722D696E74207461626C653D3233 terminal=? res=success' >type=CRED_ACQ msg=audit(1414328160.238:8882): pid=15125 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1414328160.238:8883): pid=15125 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1414328160.301:8884): pid=15125 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1414328160.301:8885): pid=15125 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_AUTH msg=audit(1414328160.313:8886): pid=15123 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=60138 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414328160.313:8887): pid=15123 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=e7:e2:3d:94:48:cf:f5:8c:5e:54:98:bd:89:a5:29:a9 rport=60138 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_ACCT msg=audit(1414328160.317:8888): pid=15123 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414328160.317:8889): pid=15123 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=15124 suid=74 rport=60138 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414328160.318:8890): pid=15123 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1414328160.319:8891): pid=15123 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=LOGIN msg=audit(1414328160.319:8892): pid=15123 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=325 res=1 >type=USER_ROLE_CHANGE msg=audit(1414328160.401:8893): pid=15123 uid=0 auid=0 ses=325 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_START msg=audit(1414328160.469:8894): pid=15123 uid=0 auid=0 ses=325 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1414328160.474:8895): pid=15123 uid=0 auid=0 ses=325 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_START msg=audit(1414328160.474:8896): pid=15123 uid=0 auid=0 ses=325 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414328160.476:8897): pid=15129 uid=0 auid=0 ses=325 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=15129 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414328160.476:8898): pid=15129 uid=0 auid=0 ses=325 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=15129 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRED_REFR msg=audit(1414328160.477:8899): pid=15129 uid=0 auid=0 ses=325 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_END msg=audit(1414328160.494:8900): pid=15123 uid=0 auid=0 ses=325 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRED_DISP msg=audit(1414328160.494:8901): pid=15123 uid=0 auid=0 ses=325 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_END msg=audit(1414328160.494:8902): pid=15123 uid=0 auid=0 ses=325 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1414328160.494:8903): pid=15123 uid=0 auid=0 ses=325 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414328160.495:8904): pid=15123 uid=0 auid=0 ses=325 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=15123 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414328160.495:8905): pid=15123 uid=0 auid=0 ses=325 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=15123 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414328160.495:8906): pid=15123 uid=0 auid=0 ses=325 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=15123 suid=0 rport=60138 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_ACCT msg=audit(1414328161.024:8907): pid=15131 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="keystone" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1414328161.024:8908): pid=15131 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="keystone" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1414328161.026:8909): pid=15131 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=163 old-ses=4294967295 ses=326 res=1 >type=USER_START msg=audit(1414328161.039:8910): pid=15131 uid=0 auid=163 ses=326 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="keystone" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1414328161.040:8911): pid=15131 uid=0 auid=163 ses=326 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="keystone" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1414328161.745:8912): pid=15131 uid=0 auid=163 ses=326 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="keystone" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1414328161.748:8913): pid=15131 uid=0 auid=163 ses=326 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="keystone" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_CMD msg=audit(1414328162.240:8914): pid=15152 uid=993 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D6F6663746C2064756D702D666C6F77732062722D696E74207461626C653D3233 terminal=? res=success' >type=CRED_ACQ msg=audit(1414328162.240:8915): pid=15152 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1414328162.241:8916): pid=15152 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1414328162.307:8917): pid=15152 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1414328162.307:8918): pid=15152 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414328163.522:8919): pid=15159 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=15159 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414328163.523:8920): pid=15159 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=15159 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414328163.524:8921): pid=15158 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=15159 suid=74 rport=60144 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414328163.525:8922): pid=15158 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=15159 suid=74 rport=60144 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414328164.066:8923): pid=15158 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=60144 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414328164.067:8924): pid=15158 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=e7:e2:3d:94:48:cf:f5:8c:5e:54:98:bd:89:a5:29:a9 rport=60144 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_ACCT msg=audit(1414328164.071:8925): pid=15158 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414328164.071:8926): pid=15158 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=15159 suid=74 rport=60144 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414328164.072:8927): pid=15158 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1414328164.073:8928): pid=15158 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=LOGIN msg=audit(1414328164.073:8929): pid=15158 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=327 res=1 >type=USER_ROLE_CHANGE msg=audit(1414328164.156:8930): pid=15158 uid=0 auid=0 ses=327 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_CMD msg=audit(1414328164.241:8931): pid=15173 uid=993 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D6F6663746C2064756D702D666C6F77732062722D696E74207461626C653D3233 terminal=? res=success' >type=CRED_ACQ msg=audit(1414328164.241:8932): pid=15173 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1414328164.242:8933): pid=15173 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1414328164.304:8934): pid=15173 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1414328164.304:8935): pid=15173 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1414328164.366:8936): pid=15158 uid=0 auid=0 ses=327 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1414328164.371:8937): pid=15158 uid=0 auid=0 ses=327 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_START msg=audit(1414328164.371:8938): pid=15158 uid=0 auid=0 ses=327 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414328164.373:8939): pid=15185 uid=0 auid=0 ses=327 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=15185 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414328164.373:8940): pid=15185 uid=0 auid=0 ses=327 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=15185 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRED_REFR msg=audit(1414328164.374:8941): pid=15185 uid=0 auid=0 ses=327 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_END msg=audit(1414328164.393:8942): pid=15158 uid=0 auid=0 ses=327 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRED_DISP msg=audit(1414328164.393:8943): pid=15158 uid=0 auid=0 ses=327 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_END msg=audit(1414328164.394:8944): pid=15158 uid=0 auid=0 ses=327 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1414328164.394:8945): pid=15158 uid=0 auid=0 ses=327 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414328164.394:8946): pid=15158 uid=0 auid=0 ses=327 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=15158 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414328164.394:8947): pid=15158 uid=0 auid=0 ses=327 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=15158 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414328164.394:8948): pid=15158 uid=0 auid=0 ses=327 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=15158 suid=0 rport=60144 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=SERVICE_START msg=audit(1414328164.986:8949): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="openstack-swift-proxy" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1414328165.282:8950): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="openstack-swift-proxy" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=SERVICE_START msg=audit(1414328165.447:8951): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="openstack-swift-account-replicator" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1414328165.711:8952): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="openstack-swift-account" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1414328165.936:8953): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="openstack-swift-account" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=SERVICE_START msg=audit(1414328166.087:8954): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="openstack-swift-object" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1414328166.253:8955): pid=15504 uid=993 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D6F6663746C2064756D702D666C6F77732062722D696E74207461626C653D3233 terminal=? res=success' >type=CRED_ACQ msg=audit(1414328166.254:8956): pid=15504 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1414328166.254:8957): pid=15504 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1414328166.319:8958): pid=15504 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1414328166.319:8959): pid=15504 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1414328166.376:8960): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="openstack-swift-object-replicator" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1414328166.449:8961): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="openstack-swift-object" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=SERVICE_START msg=audit(1414328166.652:8962): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="openstack-swift-container-updater" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414328167.416:8963): pid=15574 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=15574 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414328167.416:8964): pid=15574 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=15574 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414328167.417:8965): pid=15573 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=15574 suid=74 rport=60145 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414328167.417:8966): pid=15573 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=15574 suid=74 rport=60145 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414328167.954:8967): pid=15573 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=60145 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414328167.954:8968): pid=15573 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=e7:e2:3d:94:48:cf:f5:8c:5e:54:98:bd:89:a5:29:a9 rport=60145 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_ACCT msg=audit(1414328167.958:8969): pid=15573 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414328167.958:8970): pid=15573 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=15574 suid=74 rport=60145 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414328167.959:8971): pid=15573 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1414328167.959:8972): pid=15573 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=LOGIN msg=audit(1414328167.959:8973): pid=15573 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=328 res=1 >type=USER_ROLE_CHANGE msg=audit(1414328168.040:8974): pid=15573 uid=0 auid=0 ses=328 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_START msg=audit(1414328168.105:8975): pid=15573 uid=0 auid=0 ses=328 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1414328168.110:8976): pid=15573 uid=0 auid=0 ses=328 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_START msg=audit(1414328168.111:8977): pid=15573 uid=0 auid=0 ses=328 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414328168.113:8978): pid=15576 uid=0 auid=0 ses=328 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=15576 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414328168.113:8979): pid=15576 uid=0 auid=0 ses=328 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=15576 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRED_REFR msg=audit(1414328168.114:8980): pid=15576 uid=0 auid=0 ses=328 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_END msg=audit(1414328168.139:8981): pid=15573 uid=0 auid=0 ses=328 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRED_DISP msg=audit(1414328168.139:8982): pid=15573 uid=0 auid=0 ses=328 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_END msg=audit(1414328168.139:8983): pid=15573 uid=0 auid=0 ses=328 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1414328168.139:8984): pid=15573 uid=0 auid=0 ses=328 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414328168.139:8985): pid=15573 uid=0 auid=0 ses=328 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=15573 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414328168.140:8986): pid=15573 uid=0 auid=0 ses=328 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=15573 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414328168.140:8987): pid=15573 uid=0 auid=0 ses=328 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=15573 suid=0 rport=60145 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414328168.172:8988): pid=15580 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=15580 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414328168.172:8989): pid=15580 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=15580 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414328168.173:8990): pid=15579 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=15580 suid=74 rport=60146 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414328168.173:8991): pid=15579 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=15580 suid=74 rport=60146 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_CMD msg=audit(1414328168.247:8992): pid=15581 uid=993 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D6F6663746C2064756D702D666C6F77732062722D696E74207461626C653D3233 terminal=? res=success' >type=CRED_ACQ msg=audit(1414328168.247:8993): pid=15581 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1414328168.248:8994): pid=15581 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1414328168.307:8995): pid=15581 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1414328168.307:8996): pid=15581 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_AUTH msg=audit(1414328168.709:8997): pid=15579 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=60146 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414328168.709:8998): pid=15579 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=e7:e2:3d:94:48:cf:f5:8c:5e:54:98:bd:89:a5:29:a9 rport=60146 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_ACCT msg=audit(1414328168.713:8999): pid=15579 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414328168.713:9000): pid=15579 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=15580 suid=74 rport=60146 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414328168.714:9001): pid=15579 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1414328168.714:9002): pid=15579 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=LOGIN msg=audit(1414328168.715:9003): pid=15579 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=329 res=1 >type=USER_ROLE_CHANGE msg=audit(1414328168.786:9004): pid=15579 uid=0 auid=0 ses=329 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_START msg=audit(1414328168.801:9005): pid=15579 uid=0 auid=0 ses=329 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1414328168.804:9006): pid=15579 uid=0 auid=0 ses=329 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_START msg=audit(1414328168.804:9007): pid=15579 uid=0 auid=0 ses=329 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414328168.806:9008): pid=15585 uid=0 auid=0 ses=329 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=15585 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414328168.806:9009): pid=15585 uid=0 auid=0 ses=329 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=15585 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRED_REFR msg=audit(1414328168.807:9010): pid=15585 uid=0 auid=0 ses=329 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_END msg=audit(1414328168.823:9011): pid=15579 uid=0 auid=0 ses=329 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRED_DISP msg=audit(1414328168.823:9012): pid=15579 uid=0 auid=0 ses=329 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_END msg=audit(1414328168.824:9013): pid=15579 uid=0 auid=0 ses=329 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1414328168.824:9014): pid=15579 uid=0 auid=0 ses=329 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414328168.824:9015): pid=15579 uid=0 auid=0 ses=329 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=15579 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414328168.824:9016): pid=15579 uid=0 auid=0 ses=329 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=15579 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414328168.824:9017): pid=15579 uid=0 auid=0 ses=329 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=15579 suid=0 rport=60146 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414328168.839:9018): pid=15594 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=15594 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414328168.839:9019): pid=15594 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=15594 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414328168.840:9020): pid=15593 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=15594 suid=74 rport=50962 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414328168.840:9021): pid=15593 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=15594 suid=74 rport=50962 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=USER_AUTH msg=audit(1414328169.508:9022): pid=15593 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=50962 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=USER_AUTH msg=audit(1414328169.508:9023): pid=15593 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=e7:e2:3d:94:48:cf:f5:8c:5e:54:98:bd:89:a5:29:a9 rport=50962 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=USER_ACCT msg=audit(1414328169.874:9024): pid=15593 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414328169.876:9025): pid=15593 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=15594 suid=74 rport=50962 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=USER_AUTH msg=audit(1414328169.878:9026): pid=15593 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1414328170.249:9027): pid=15593 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=USER_CMD msg=audit(1414328170.249:9028): pid=15613 uid=993 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D6F6663746C2064756D702D666C6F77732062722D696E74207461626C653D3233 terminal=? res=success' >type=LOGIN msg=audit(1414328170.249:9029): pid=15593 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=330 res=1 >type=CRED_ACQ msg=audit(1414328170.250:9030): pid=15613 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1414328170.250:9031): pid=15613 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1414328170.314:9032): pid=15613 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1414328170.314:9033): pid=15613 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_ROLE_CHANGE msg=audit(1414328170.691:9034): pid=15593 uid=0 auid=0 ses=330 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=USER_START msg=audit(1414328171.071:9035): pid=15593 uid=0 auid=0 ses=330 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1414328171.435:9036): pid=15593 uid=0 auid=0 ses=330 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=USER_START msg=audit(1414328171.797:9037): pid=15593 uid=0 auid=0 ses=330 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414328171.798:9038): pid=15835 uid=0 auid=0 ses=330 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=15835 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414328171.798:9039): pid=15835 uid=0 auid=0 ses=330 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=15835 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=NETFILTER_CFG msg=audit(1414328171.902:9040): table=filter family=2 entries=0 >type=NETFILTER_CFG msg=audit(1414328171.902:9040): table=nat family=2 entries=0 >type=NETFILTER_CFG msg=audit(1414328171.902:9040): table=mangle family=2 entries=0 >type=NETFILTER_CFG msg=audit(1414328171.902:9040): table=filter family=10 entries=0 >type=SYSCALL msg=audit(1414328171.902:9040): arch=c000003e syscall=272 success=yes exit=0 a0=40000000 a1=c0 a2=0 a3=7fff5bca3ea0 items=0 ppid=15843 pid=15850 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=329 comm="ip" exe="/usr/sbin/ip" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null) >type=CRED_REFR msg=audit(1414328172.161:9041): pid=15835 uid=0 auid=0 ses=330 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414328172.200:9042): pid=15870 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=15870 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414328172.200:9043): pid=15870 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=15870 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414328172.202:9044): pid=15869 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=15870 suid=74 rport=60148 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414328172.202:9045): pid=15869 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=15870 suid=74 rport=60148 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_CMD msg=audit(1414328172.252:9046): pid=15871 uid=993 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D6F6663746C2064756D702D666C6F77732062722D696E74207461626C653D3233 terminal=? res=success' >type=CRED_ACQ msg=audit(1414328172.252:9047): pid=15871 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1414328172.253:9048): pid=15871 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=NETFILTER_CFG msg=audit(1414328171.973:9049): table=filter family=2 entries=0 >type=NETFILTER_CFG msg=audit(1414328171.973:9049): table=nat family=2 entries=0 >type=NETFILTER_CFG msg=audit(1414328171.973:9049): table=mangle family=2 entries=0 >type=NETFILTER_CFG msg=audit(1414328171.973:9049): table=filter family=10 entries=0 >type=SYSCALL msg=audit(1414328171.973:9049): arch=c000003e syscall=272 success=yes exit=0 a0=40000000 a1=c0 a2=0 a3=7fffd381ffa0 items=0 ppid=15843 pid=15857 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=329 comm="ip" exe="/usr/sbin/ip" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null) >type=USER_END msg=audit(1414328172.318:9050): pid=15871 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1414328172.318:9051): pid=15871 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=NETFILTER_CFG msg=audit(1414328172.337:9052): table=filter family=2 entries=0 >type=NETFILTER_CFG msg=audit(1414328172.337:9052): table=nat family=2 entries=0 >type=NETFILTER_CFG msg=audit(1414328172.337:9052): table=mangle family=2 entries=0 >type=NETFILTER_CFG msg=audit(1414328172.337:9052): table=filter family=10 entries=0 >type=SYSCALL msg=audit(1414328172.337:9052): arch=c000003e syscall=272 success=yes exit=0 a0=40000000 a1=c0 a2=0 a3=7fffa9395d10 items=0 ppid=15843 pid=15875 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=329 comm="ip" exe="/usr/sbin/ip" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null) >type=USER_END msg=audit(1414328172.538:9053): pid=15593 uid=0 auid=0 ses=330 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=USER_AUTH msg=audit(1414328172.744:9054): pid=15869 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=60148 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414328172.744:9055): pid=15869 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=e7:e2:3d:94:48:cf:f5:8c:5e:54:98:bd:89:a5:29:a9 rport=60148 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_ACCT msg=audit(1414328172.749:9056): pid=15869 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414328172.749:9057): pid=15869 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=15870 suid=74 rport=60148 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414328172.750:9058): pid=15869 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1414328172.751:9059): pid=15869 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=LOGIN msg=audit(1414328172.751:9060): pid=15869 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=331 res=1 >type=USER_ROLE_CHANGE msg=audit(1414328172.829:9061): pid=15869 uid=0 auid=0 ses=331 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_START msg=audit(1414328172.846:9062): pid=15869 uid=0 auid=0 ses=331 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1414328172.850:9063): pid=15869 uid=0 auid=0 ses=331 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_START msg=audit(1414328172.850:9064): pid=15869 uid=0 auid=0 ses=331 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414328172.852:9065): pid=15899 uid=0 auid=0 ses=331 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=15899 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414328172.852:9066): pid=15899 uid=0 auid=0 ses=331 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=15899 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRED_REFR msg=audit(1414328172.853:9067): pid=15899 uid=0 auid=0 ses=331 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_END msg=audit(1414328172.863:9068): pid=15869 uid=0 auid=0 ses=331 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1414328172.863:9069): pid=15869 uid=0 auid=0 ses=331 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_END msg=audit(1414328172.870:9070): pid=15869 uid=0 auid=0 ses=331 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRED_DISP msg=audit(1414328172.870:9071): pid=15869 uid=0 auid=0 ses=331 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414328172.871:9072): pid=15869 uid=0 auid=0 ses=331 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=15869 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414328172.871:9073): pid=15869 uid=0 auid=0 ses=331 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=15869 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414328172.871:9074): pid=15869 uid=0 auid=0 ses=331 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=15869 suid=0 rport=60148 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRED_DISP msg=audit(1414328172.905:9075): pid=15593 uid=0 auid=0 ses=330 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=USER_END msg=audit(1414328173.266:9076): pid=15593 uid=0 auid=0 ses=330 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1414328173.630:9077): pid=15593 uid=0 auid=0 ses=330 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414328173.630:9078): pid=15593 uid=0 auid=0 ses=330 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=15593 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414328173.630:9079): pid=15593 uid=0 auid=0 ses=330 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=15593 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414328173.630:9080): pid=15593 uid=0 auid=0 ses=330 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=15593 suid=0 rport=50962 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=USER_CMD msg=audit(1414328174.253:9081): pid=15941 uid=993 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D6F6663746C2064756D702D666C6F77732062722D696E74207461626C653D3233 terminal=? res=success' >type=CRED_ACQ msg=audit(1414328174.254:9082): pid=15941 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1414328174.254:9083): pid=15941 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1414328174.319:9084): pid=15941 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1414328174.319:9085): pid=15941 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=NETFILTER_CFG msg=audit(1414328175.251:9086): table=filter family=2 entries=0 >type=NETFILTER_CFG msg=audit(1414328175.251:9086): table=nat family=2 entries=0 >type=NETFILTER_CFG msg=audit(1414328175.251:9086): table=mangle family=2 entries=0 >type=NETFILTER_CFG msg=audit(1414328175.251:9086): table=filter family=10 entries=0 >type=SYSCALL msg=audit(1414328175.251:9086): arch=c000003e syscall=272 success=yes exit=0 a0=40000000 a1=c0 a2=0 a3=7fffcde0b440 items=0 ppid=16154 pid=16161 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=330 comm="ip" exe="/usr/sbin/ip" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null) >type=NETFILTER_CFG msg=audit(1414328175.302:9087): table=filter family=2 entries=0 >type=NETFILTER_CFG msg=audit(1414328175.302:9087): table=nat family=2 entries=0 >type=NETFILTER_CFG msg=audit(1414328175.302:9087): table=mangle family=2 entries=0 >type=NETFILTER_CFG msg=audit(1414328175.302:9087): table=filter family=10 entries=0 >type=SYSCALL msg=audit(1414328175.302:9087): arch=c000003e syscall=272 success=yes exit=0 a0=40000000 a1=c0 a2=0 a3=7fff79bbceb0 items=0 ppid=16154 pid=16165 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=330 comm="ip" exe="/usr/sbin/ip" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null) >type=NETFILTER_CFG msg=audit(1414328175.632:9088): table=filter family=2 entries=0 >type=NETFILTER_CFG msg=audit(1414328175.632:9088): table=nat family=2 entries=0 >type=NETFILTER_CFG msg=audit(1414328175.632:9088): table=mangle family=2 entries=0 >type=NETFILTER_CFG msg=audit(1414328175.632:9088): table=filter family=10 entries=0 >type=SYSCALL msg=audit(1414328175.632:9088): arch=c000003e syscall=272 success=yes exit=0 a0=40000000 a1=c0 a2=0 a3=7fff47470f10 items=0 ppid=16154 pid=16167 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=330 comm="ip" exe="/usr/sbin/ip" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null) >type=CRYPTO_KEY_USER msg=audit(1414328175.888:9089): pid=16183 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=16183 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414328175.888:9090): pid=16183 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=16183 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414328175.890:9091): pid=16182 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=16183 suid=74 rport=50964 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414328175.890:9092): pid=16182 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=16183 suid=74 rport=50964 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=USER_CMD msg=audit(1414328176.253:9093): pid=16187 uid=993 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D6F6663746C2064756D702D666C6F77732062722D696E74207461626C653D3233 terminal=? res=success' >type=CRED_ACQ msg=audit(1414328176.253:9094): pid=16187 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1414328176.254:9095): pid=16187 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1414328176.313:9096): pid=16187 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1414328176.313:9097): pid=16187 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_AUTH msg=audit(1414328176.427:9098): pid=16182 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=50964 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=USER_AUTH msg=audit(1414328176.427:9099): pid=16182 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=e7:e2:3d:94:48:cf:f5:8c:5e:54:98:bd:89:a5:29:a9 rport=50964 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=USER_ACCT msg=audit(1414328176.792:9100): pid=16182 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414328176.793:9101): pid=16182 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=16183 suid=74 rport=50964 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=USER_AUTH msg=audit(1414328176.794:9102): pid=16182 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1414328177.155:9103): pid=16182 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=LOGIN msg=audit(1414328177.156:9104): pid=16182 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=332 res=1 >type=USER_ROLE_CHANGE msg=audit(1414328177.593:9105): pid=16182 uid=0 auid=0 ses=332 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=USER_START msg=audit(1414328177.974:9106): pid=16182 uid=0 auid=0 ses=332 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=USER_CMD msg=audit(1414328178.257:9107): pid=16207 uid=993 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D6F6663746C2064756D702D666C6F77732062722D696E74207461626C653D3233 terminal=? res=success' >type=CRED_ACQ msg=audit(1414328178.257:9108): pid=16207 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1414328178.258:9109): pid=16207 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1414328178.322:9110): pid=16207 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1414328178.322:9111): pid=16207 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_LOGIN msg=audit(1414328178.341:9112): pid=16182 uid=0 auid=0 ses=332 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=USER_START msg=audit(1414328178.702:9113): pid=16182 uid=0 auid=0 ses=332 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414328178.704:9114): pid=16210 uid=0 auid=0 ses=332 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=16210 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414328178.704:9115): pid=16210 uid=0 auid=0 ses=332 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=16210 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRED_REFR msg=audit(1414328179.066:9116): pid=16210 uid=0 auid=0 ses=332 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=USER_END msg=audit(1414328179.441:9117): pid=16182 uid=0 auid=0 ses=332 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=CRED_DISP msg=audit(1414328179.804:9118): pid=16182 uid=0 auid=0 ses=332 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=USER_END msg=audit(1414328180.167:9119): pid=16182 uid=0 auid=0 ses=332 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=USER_CMD msg=audit(1414328180.255:9120): pid=16213 uid=993 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D6F6663746C2064756D702D666C6F77732062722D696E74207461626C653D3233 terminal=? res=success' >type=CRED_ACQ msg=audit(1414328180.255:9121): pid=16213 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1414328180.255:9122): pid=16213 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1414328180.314:9123): pid=16213 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1414328180.314:9124): pid=16213 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_LOGOUT msg=audit(1414328180.531:9125): pid=16182 uid=0 auid=0 ses=332 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414328180.531:9126): pid=16182 uid=0 auid=0 ses=332 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=16182 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414328180.531:9127): pid=16182 uid=0 auid=0 ses=332 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=16182 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414328180.531:9128): pid=16182 uid=0 auid=0 ses=332 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=16182 suid=0 rport=50964 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414328182.115:9129): pid=16221 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=16221 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414328182.115:9130): pid=16221 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=16221 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414328182.118:9131): pid=16220 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=16221 suid=74 rport=60150 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414328182.118:9132): pid=16220 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=16221 suid=74 rport=60150 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_CMD msg=audit(1414328182.257:9133): pid=16224 uid=993 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D6F6663746C2064756D702D666C6F77732062722D696E74207461626C653D3233 terminal=? res=success' >type=CRED_ACQ msg=audit(1414328182.258:9134): pid=16224 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1414328182.258:9135): pid=16224 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1414328182.320:9136): pid=16224 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1414328182.320:9137): pid=16224 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_AUTH msg=audit(1414328182.658:9138): pid=16220 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=60150 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414328182.658:9139): pid=16220 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=e7:e2:3d:94:48:cf:f5:8c:5e:54:98:bd:89:a5:29:a9 rport=60150 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_ACCT msg=audit(1414328182.662:9140): pid=16220 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414328182.663:9141): pid=16220 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=16221 suid=74 rport=60150 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414328182.664:9142): pid=16220 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1414328182.664:9143): pid=16220 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=LOGIN msg=audit(1414328182.664:9144): pid=16220 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=333 res=1 >type=USER_ROLE_CHANGE msg=audit(1414328182.745:9145): pid=16220 uid=0 auid=0 ses=333 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_START msg=audit(1414328182.762:9146): pid=16220 uid=0 auid=0 ses=333 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1414328182.765:9147): pid=16220 uid=0 auid=0 ses=333 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_START msg=audit(1414328182.765:9148): pid=16220 uid=0 auid=0 ses=333 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414328182.767:9149): pid=16228 uid=0 auid=0 ses=333 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=16228 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414328182.767:9150): pid=16228 uid=0 auid=0 ses=333 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=16228 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRED_REFR msg=audit(1414328182.768:9151): pid=16228 uid=0 auid=0 ses=333 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_END msg=audit(1414328182.785:9152): pid=16220 uid=0 auid=0 ses=333 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRED_DISP msg=audit(1414328182.785:9153): pid=16220 uid=0 auid=0 ses=333 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_END msg=audit(1414328182.786:9154): pid=16220 uid=0 auid=0 ses=333 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1414328182.786:9155): pid=16220 uid=0 auid=0 ses=333 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414328182.786:9156): pid=16220 uid=0 auid=0 ses=333 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=16220 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414328182.786:9157): pid=16220 uid=0 auid=0 ses=333 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=16220 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414328182.786:9158): pid=16220 uid=0 auid=0 ses=333 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=16220 suid=0 rport=60150 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414328182.805:9159): pid=16234 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=16234 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414328182.805:9160): pid=16234 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=16234 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414328182.807:9161): pid=16233 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=16234 suid=74 rport=50966 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414328182.807:9162): pid=16233 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=16234 suid=74 rport=50966 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=USER_AUTH msg=audit(1414328183.342:9163): pid=16233 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=50966 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=USER_AUTH msg=audit(1414328183.342:9164): pid=16233 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=e7:e2:3d:94:48:cf:f5:8c:5e:54:98:bd:89:a5:29:a9 rport=50966 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=USER_ACCT msg=audit(1414328183.707:9165): pid=16233 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414328183.708:9166): pid=16233 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=16234 suid=74 rport=50966 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=USER_AUTH msg=audit(1414328183.711:9167): pid=16233 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1414328184.074:9168): pid=16233 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=LOGIN msg=audit(1414328184.074:9169): pid=16233 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=334 res=1 >type=USER_CMD msg=audit(1414328184.260:9170): pid=16236 uid=993 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D6F6663746C2064756D702D666C6F77732062722D696E74207461626C653D3233 terminal=? res=success' >type=CRED_ACQ msg=audit(1414328184.260:9171): pid=16236 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1414328184.261:9172): pid=16236 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1414328184.325:9173): pid=16236 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1414328184.325:9174): pid=16236 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_ROLE_CHANGE msg=audit(1414328184.515:9175): pid=16233 uid=0 auid=0 ses=334 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=USER_START msg=audit(1414328184.894:9176): pid=16233 uid=0 auid=0 ses=334 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1414328185.261:9177): pid=16233 uid=0 auid=0 ses=334 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=USER_START msg=audit(1414328185.624:9178): pid=16233 uid=0 auid=0 ses=334 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414328185.625:9179): pid=16239 uid=0 auid=0 ses=334 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=16239 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414328185.626:9180): pid=16239 uid=0 auid=0 ses=334 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=16239 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRED_REFR msg=audit(1414328185.987:9181): pid=16239 uid=0 auid=0 ses=334 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414328186.027:9182): pid=16242 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=16242 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414328186.027:9183): pid=16242 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=16242 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414328186.028:9184): pid=16241 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=16242 suid=74 rport=60152 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414328186.028:9185): pid=16241 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=16242 suid=74 rport=60152 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_CMD msg=audit(1414328186.261:9186): pid=16243 uid=993 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D6F6663746C2064756D702D666C6F77732062722D696E74207461626C653D3233 terminal=? res=success' >type=CRED_ACQ msg=audit(1414328186.261:9187): pid=16243 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1414328186.261:9188): pid=16243 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1414328186.322:9189): pid=16243 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1414328186.322:9190): pid=16243 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1414328186.375:9191): pid=16233 uid=0 auid=0 ses=334 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=USER_AUTH msg=audit(1414328186.571:9192): pid=16241 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=60152 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414328186.571:9193): pid=16241 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=e7:e2:3d:94:48:cf:f5:8c:5e:54:98:bd:89:a5:29:a9 rport=60152 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_ACCT msg=audit(1414328186.576:9194): pid=16241 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414328186.576:9195): pid=16241 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=16242 suid=74 rport=60152 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414328186.577:9196): pid=16241 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1414328186.578:9197): pid=16241 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=LOGIN msg=audit(1414328186.578:9198): pid=16241 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=335 res=1 >type=USER_ROLE_CHANGE msg=audit(1414328186.666:9199): pid=16241 uid=0 auid=0 ses=335 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_START msg=audit(1414328186.683:9200): pid=16241 uid=0 auid=0 ses=335 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1414328186.687:9201): pid=16241 uid=0 auid=0 ses=335 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_START msg=audit(1414328186.687:9202): pid=16241 uid=0 auid=0 ses=335 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414328186.689:9203): pid=16247 uid=0 auid=0 ses=335 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=16247 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414328186.689:9204): pid=16247 uid=0 auid=0 ses=335 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=16247 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRED_REFR msg=audit(1414328186.690:9205): pid=16247 uid=0 auid=0 ses=335 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRED_DISP msg=audit(1414328186.739:9206): pid=16233 uid=0 auid=0 ses=334 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=USER_END msg=audit(1414328186.772:9207): pid=16241 uid=0 auid=0 ses=335 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRED_DISP msg=audit(1414328186.773:9208): pid=16241 uid=0 auid=0 ses=335 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_END msg=audit(1414328186.773:9209): pid=16241 uid=0 auid=0 ses=335 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1414328186.773:9210): pid=16241 uid=0 auid=0 ses=335 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414328186.773:9211): pid=16241 uid=0 auid=0 ses=335 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=16241 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414328186.773:9212): pid=16241 uid=0 auid=0 ses=335 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=16241 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414328186.774:9213): pid=16241 uid=0 auid=0 ses=335 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=16241 suid=0 rport=60152 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414328186.780:9214): pid=16262 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=16262 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414328186.780:9215): pid=16262 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=16262 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414328186.781:9216): pid=16260 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=16262 suid=74 rport=50968 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414328186.781:9217): pid=16260 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=16262 suid=74 rport=50968 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=USER_END msg=audit(1414328187.102:9218): pid=16233 uid=0 auid=0 ses=334 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=USER_AUTH msg=audit(1414328187.317:9219): pid=16260 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=50968 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=USER_AUTH msg=audit(1414328187.317:9220): pid=16260 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=e7:e2:3d:94:48:cf:f5:8c:5e:54:98:bd:89:a5:29:a9 rport=50968 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=USER_LOGOUT msg=audit(1414328187.464:9221): pid=16233 uid=0 auid=0 ses=334 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414328187.464:9222): pid=16233 uid=0 auid=0 ses=334 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=16233 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414328187.464:9223): pid=16233 uid=0 auid=0 ses=334 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=16233 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414328187.465:9224): pid=16233 uid=0 auid=0 ses=334 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=16233 suid=0 rport=50966 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=USER_ACCT msg=audit(1414328187.683:9225): pid=16260 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414328187.684:9226): pid=16260 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=16262 suid=74 rport=50968 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=USER_AUTH msg=audit(1414328187.685:9227): pid=16260 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1414328188.047:9228): pid=16260 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=LOGIN msg=audit(1414328188.047:9229): pid=16260 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=336 res=1 >type=USER_CMD msg=audit(1414328188.262:9230): pid=16268 uid=993 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D6F6663746C2064756D702D666C6F77732062722D696E74207461626C653D3233 terminal=? res=success' >type=CRED_ACQ msg=audit(1414328188.263:9231): pid=16268 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1414328188.263:9232): pid=16268 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1414328188.328:9233): pid=16268 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1414328188.329:9234): pid=16268 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_ROLE_CHANGE msg=audit(1414328188.491:9235): pid=16260 uid=0 auid=0 ses=336 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=USER_START msg=audit(1414328188.871:9236): pid=16260 uid=0 auid=0 ses=336 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1414328189.237:9237): pid=16260 uid=0 auid=0 ses=336 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=USER_START msg=audit(1414328189.598:9238): pid=16260 uid=0 auid=0 ses=336 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414328189.600:9239): pid=16271 uid=0 auid=0 ses=336 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=16271 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414328189.600:9240): pid=16271 uid=0 auid=0 ses=336 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=16271 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRED_REFR msg=audit(1414328189.962:9241): pid=16271 uid=0 auid=0 ses=336 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414328190.055:9242): pid=16285 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=16285 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414328190.055:9243): pid=16285 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=16285 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414328190.056:9244): pid=16284 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=16285 suid=74 rport=60154 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414328190.056:9245): pid=16284 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=16285 suid=74 rport=60154 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_CMD msg=audit(1414328190.276:9246): pid=16286 uid=993 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D6F6663746C2064756D702D666C6F77732062722D696E74207461626C653D3233 terminal=? res=success' >type=CRED_ACQ msg=audit(1414328190.276:9247): pid=16286 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1414328190.277:9248): pid=16286 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1414328190.341:9249): pid=16286 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1414328190.342:9250): pid=16286 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1414328190.406:9251): pid=16260 uid=0 auid=0 ses=336 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=USER_AUTH msg=audit(1414328190.593:9252): pid=16284 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=60154 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414328190.594:9253): pid=16284 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=e7:e2:3d:94:48:cf:f5:8c:5e:54:98:bd:89:a5:29:a9 rport=60154 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_ACCT msg=audit(1414328190.598:9254): pid=16284 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414328190.598:9255): pid=16284 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=16285 suid=74 rport=60154 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=USER_AUTH msg=audit(1414328190.599:9256): pid=16284 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1414328190.599:9257): pid=16284 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=LOGIN msg=audit(1414328190.599:9258): pid=16284 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=337 res=1 >type=USER_ROLE_CHANGE msg=audit(1414328190.675:9259): pid=16284 uid=0 auid=0 ses=337 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_START msg=audit(1414328190.694:9260): pid=16284 uid=0 auid=0 ses=337 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1414328190.698:9261): pid=16284 uid=0 auid=0 ses=337 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_START msg=audit(1414328190.698:9262): pid=16284 uid=0 auid=0 ses=337 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414328190.700:9263): pid=16290 uid=0 auid=0 ses=337 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=16290 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414328190.700:9264): pid=16290 uid=0 auid=0 ses=337 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=16290 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRED_REFR msg=audit(1414328190.701:9265): pid=16290 uid=0 auid=0 ses=337 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_END msg=audit(1414328190.760:9266): pid=16284 uid=0 auid=0 ses=337 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRED_DISP msg=audit(1414328190.760:9267): pid=16284 uid=0 auid=0 ses=337 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_END msg=audit(1414328190.761:9268): pid=16284 uid=0 auid=0 ses=337 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1414328190.761:9269): pid=16284 uid=0 auid=0 ses=337 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.35.167.201 addr=10.35.167.201 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414328190.761:9270): pid=16284 uid=0 auid=0 ses=337 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=16284 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414328190.761:9271): pid=16284 uid=0 auid=0 ses=337 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=16284 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414328190.761:9272): pid=16284 uid=0 auid=0 ses=337 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=16284 suid=0 rport=60154 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.35.167.201 terminal=? res=success' >type=CRED_DISP msg=audit(1414328190.769:9273): pid=16260 uid=0 auid=0 ses=336 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414328190.774:9274): pid=16295 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=16295 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414328190.774:9275): pid=16295 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=16295 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414328190.775:9276): pid=16294 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=16295 suid=74 rport=50970 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1414328190.775:9277): pid=16294 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=16295 suid=74 rport=50970 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=USER_END msg=audit(1414328191.131:9278): pid=16260 uid=0 auid=0 ses=336 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=USER_AUTH msg=audit(1414328191.313:9279): pid=16294 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=50970 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=USER_AUTH msg=audit(1414328191.313:9280): pid=16294 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=e7:e2:3d:94:48:cf:f5:8c:5e:54:98:bd:89:a5:29:a9 rport=50970 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=USER_LOGOUT msg=audit(1414328191.493:9281): pid=16260 uid=0 auid=0 ses=336 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414328191.493:9282): pid=16260 uid=0 auid=0 ses=336 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=16260 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414328191.493:9283): pid=16260 uid=0 auid=0 ses=336 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=16260 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414328191.493:9284): pid=16260 uid=0 auid=0 ses=336 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=16260 suid=0 rport=50968 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=USER_ACCT msg=audit(1414328191.678:9285): pid=16294 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414328191.679:9286): pid=16294 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=16295 suid=74 rport=50970 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=USER_AUTH msg=audit(1414328191.680:9287): pid=16294 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1414328192.043:9288): pid=16294 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=LOGIN msg=audit(1414328192.043:9289): pid=16294 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=338 res=1 >type=USER_CMD msg=audit(1414328192.266:9290): pid=16300 uid=993 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D6F6663746C2064756D702D666C6F77732062722D696E74207461626C653D3233 terminal=? res=success' >type=CRED_ACQ msg=audit(1414328192.266:9291): pid=16300 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1414328192.267:9292): pid=16300 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1414328192.328:9293): pid=16300 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1414328192.328:9294): pid=16300 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_ROLE_CHANGE msg=audit(1414328192.480:9295): pid=16294 uid=0 auid=0 ses=338 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=USER_START msg=audit(1414328192.859:9296): pid=16294 uid=0 auid=0 ses=338 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1414328193.226:9297): pid=16294 uid=0 auid=0 ses=338 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=USER_START msg=audit(1414328193.587:9298): pid=16294 uid=0 auid=0 ses=338 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414328193.589:9299): pid=16303 uid=0 auid=0 ses=338 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=16303 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414328193.589:9300): pid=16303 uid=0 auid=0 ses=338 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=16303 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRED_REFR msg=audit(1414328193.951:9301): pid=16303 uid=0 auid=0 ses=338 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=USER_CMD msg=audit(1414328194.265:9302): pid=16305 uid=993 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D6F6663746C2064756D702D666C6F77732062722D696E74207461626C653D3233 terminal=? res=success' >type=CRED_ACQ msg=audit(1414328194.265:9303): pid=16305 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1414328194.266:9304): pid=16305 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1414328194.306:9305): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1414328194.306:9306): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_END msg=audit(1414328194.328:9307): pid=16305 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1414328194.328:9308): pid=16305 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1414328194.387:9309): pid=16294 uid=0 auid=0 ses=338 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1414328194.453:9310): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_START msg=audit(1414328194.453:9311): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414328194.454:9312): pid=16308 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=16308 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.34.60.204 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414328194.454:9313): pid=16308 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=16308 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.34.60.204 terminal=? res=success' >type=CRED_REFR msg=audit(1414328194.454:9314): pid=16308 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=CRED_DISP msg=audit(1414328194.748:9315): pid=16294 uid=0 auid=0 ses=338 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=USER_END msg=audit(1414328195.110:9316): pid=16294 uid=0 auid=0 ses=338 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=USER_END msg=audit(1414328195.289:9317): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1414328195.289:9318): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1414328195.471:9319): pid=16294 uid=0 auid=0 ses=338 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=test8411 addr=fe80::f816:3eff:feaf:45d7 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414328195.471:9320): pid=16294 uid=0 auid=0 ses=338 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=16294 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414328195.471:9321): pid=16294 uid=0 auid=0 ses=338 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=16294 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414328195.471:9322): pid=16294 uid=0 auid=0 ses=338 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=16294 suid=0 rport=50970 laddr=192.168.2.159 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.159 terminal=? res=success' >type=USER_LOGIN msg=audit(1414328195.876:9323): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_START msg=audit(1414328195.876:9324): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414328195.877:9325): pid=16313 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=16313 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.34.60.204 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414328195.877:9326): pid=16313 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=16313 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.34.60.204 terminal=? res=success' >type=CRED_REFR msg=audit(1414328195.878:9327): pid=16313 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_CMD msg=audit(1414328196.267:9328): pid=16317 uid=993 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D6F6663746C2064756D702D666C6F77732062722D696E74207461626C653D3233 terminal=? res=success' >type=CRED_ACQ msg=audit(1414328196.267:9329): pid=16317 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1414328196.267:9330): pid=16317 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1414328196.332:9331): pid=16317 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1414328196.332:9332): pid=16317 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1414328198.269:9333): pid=16324 uid=993 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D6F6663746C2064756D702D666C6F77732062722D696E74207461626C653D3233 terminal=? res=success' >type=CRED_ACQ msg=audit(1414328198.269:9334): pid=16324 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1414328198.269:9335): pid=16324 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1414328198.336:9336): pid=16324 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1414328198.336:9337): pid=16324 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1414328200.269:9338): pid=16327 uid=993 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D6F6663746C2064756D702D666C6F77732062722D696E74207461626C653D3233 terminal=? res=success' >type=CRED_ACQ msg=audit(1414328200.269:9339): pid=16327 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1414328200.269:9340): pid=16327 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1414328200.331:9341): pid=16327 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1414328200.332:9342): pid=16327 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1414328202.271:9343): pid=16333 uid=993 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D6F6663746C2064756D702D666C6F77732062722D696E74207461626C653D3233 terminal=? res=success' >type=CRED_ACQ msg=audit(1414328202.271:9344): pid=16333 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1414328202.271:9345): pid=16333 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1414328202.335:9346): pid=16333 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1414328202.335:9347): pid=16333 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1414328203.788:9348): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1414328203.788:9349): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1414328203.933:9350): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_START msg=audit(1414328203.933:9351): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414328203.933:9352): pid=16336 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=16336 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.34.60.204 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414328203.933:9353): pid=16336 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=16336 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.34.60.204 terminal=? res=success' >type=CRED_REFR msg=audit(1414328203.933:9354): pid=16336 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_CMD msg=audit(1414328204.050:9355): pid=16342 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D4320766773202D2D6E6F68656164696E6773202D2D756E69743D67202D6F206E616D652C73697A652C667265652C6C765F636F756E742C75756964202D2D736570617261746F72203A202D2D6E6F7375666669782063696E6465722D766F6C756D6573 terminal=? res=success' >type=CRED_ACQ msg=audit(1414328204.051:9356): pid=16342 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1414328204.052:9357): pid=16342 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1414328204.131:9358): pid=16342 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1414328204.131:9359): pid=16342 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1414328204.273:9360): pid=16345 uid=993 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D6F6663746C2064756D702D666C6F77732062722D696E74207461626C653D3233 terminal=? res=success' >type=CRED_ACQ msg=audit(1414328204.274:9361): pid=16345 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1414328204.275:9362): pid=16345 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1414328204.344:9363): pid=16345 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1414328204.344:9364): pid=16345 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1414328206.273:9365): pid=16348 uid=993 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D6F6663746C2064756D702D666C6F77732062722D696E74207461626C653D3233 terminal=? res=success' >type=CRED_ACQ msg=audit(1414328206.274:9366): pid=16348 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1414328206.274:9367): pid=16348 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1414328206.343:9368): pid=16348 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1414328206.344:9369): pid=16348 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1414328208.275:9370): pid=16351 uid=993 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D6F6663746C2064756D702D666C6F77732062722D696E74207461626C653D3233 terminal=? res=success' >type=CRED_ACQ msg=audit(1414328208.276:9371): pid=16351 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1414328208.276:9372): pid=16351 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1414328208.340:9373): pid=16351 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1414328208.340:9374): pid=16351 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1414328210.275:9375): pid=16356 uid=993 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D6F6663746C2064756D702D666C6F77732062722D696E74207461626C653D3233 terminal=? res=success' >type=CRED_ACQ msg=audit(1414328210.275:9376): pid=16356 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1414328210.276:9377): pid=16356 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1414328210.339:9378): pid=16356 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1414328210.339:9379): pid=16356 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1414328212.277:9380): pid=16363 uid=993 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D6F6663746C2064756D702D666C6F77732062722D696E74207461626C653D3233 terminal=? res=success' >type=CRED_ACQ msg=audit(1414328212.278:9381): pid=16363 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1414328212.278:9382): pid=16363 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1414328212.344:9383): pid=16363 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1414328212.345:9384): pid=16363 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1414328214.278:9385): pid=16366 uid=993 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D6F6663746C2064756D702D666C6F77732062722D696E74207461626C653D3233 terminal=? res=success' >type=CRED_ACQ msg=audit(1414328214.279:9386): pid=16366 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1414328214.279:9387): pid=16366 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1414328214.341:9388): pid=16366 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1414328214.341:9389): pid=16366 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1414328216.279:9390): pid=16369 uid=993 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D6F6663746C2064756D702D666C6F77732062722D696E74207461626C653D3233 terminal=? res=success' >type=CRED_ACQ msg=audit(1414328216.279:9391): pid=16369 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1414328216.279:9392): pid=16369 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1414328216.340:9393): pid=16369 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1414328216.341:9394): pid=16369 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1414328218.281:9395): pid=16378 uid=993 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D6F6663746C2064756D702D666C6F77732062722D696E74207461626C653D3233 terminal=? res=success' >type=CRED_ACQ msg=audit(1414328218.281:9396): pid=16378 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1414328218.281:9397): pid=16378 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1414328218.350:9398): pid=16378 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1414328218.350:9399): pid=16378 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1414328220.283:9400): pid=16381 uid=993 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D6F6663746C2064756D702D666C6F77732062722D696E74207461626C653D3233 terminal=? res=success' >type=CRED_ACQ msg=audit(1414328220.283:9401): pid=16381 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1414328220.283:9402): pid=16381 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1414328220.351:9403): pid=16381 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1414328220.351:9404): pid=16381 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1414328221.760:9405): pid=16384 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="keystone" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1414328221.761:9406): pid=16384 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="keystone" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1414328221.762:9407): pid=16384 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=163 old-ses=4294967295 ses=339 res=1 >type=USER_START msg=audit(1414328221.776:9408): pid=16384 uid=0 auid=163 ses=339 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="keystone" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1414328221.777:9409): pid=16384 uid=0 auid=163 ses=339 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="keystone" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_CMD msg=audit(1414328222.283:9410): pid=16396 uid=993 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D6F6663746C2064756D702D666C6F77732062722D696E74207461626C653D3233 terminal=? res=success' >type=CRED_ACQ msg=audit(1414328222.284:9411): pid=16396 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1414328222.284:9412): pid=16396 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1414328222.349:9413): pid=16396 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1414328222.349:9414): pid=16396 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1414328222.455:9415): pid=16384 uid=0 auid=163 ses=339 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="keystone" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1414328222.458:9416): pid=16384 uid=0 auid=163 ses=339 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="keystone" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_CMD msg=audit(1414328224.286:9417): pid=16406 uid=993 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D6F6663746C2064756D702D666C6F77732062722D696E74207461626C653D3233 terminal=? res=success' >type=CRED_ACQ msg=audit(1414328224.286:9418): pid=16406 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1414328224.286:9419): pid=16406 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1414328224.345:9420): pid=16406 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1414328224.345:9421): pid=16406 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1414328224.355:9422): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1414328224.355:9423): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1414328224.513:9424): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_START msg=audit(1414328224.513:9425): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414328224.514:9426): pid=16409 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=16409 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.34.60.204 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414328224.514:9427): pid=16409 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=16409 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.34.60.204 terminal=? res=success' >type=CRED_REFR msg=audit(1414328224.515:9428): pid=16409 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_END msg=audit(1414328224.764:9429): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1414328224.764:9430): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1414328224.923:9431): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_START msg=audit(1414328224.923:9432): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414328224.923:9433): pid=16413 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=16413 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.34.60.204 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414328224.923:9434): pid=16413 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=16413 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.34.60.204 terminal=? res=success' >type=CRED_REFR msg=audit(1414328224.924:9435): pid=16413 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_CMD msg=audit(1414328226.287:9436): pid=16417 uid=993 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D6F6663746C2064756D702D666C6F77732062722D696E74207461626C653D3233 terminal=? res=success' >type=CRED_ACQ msg=audit(1414328226.287:9437): pid=16417 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1414328226.287:9438): pid=16417 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1414328226.347:9439): pid=16417 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1414328226.347:9440): pid=16417 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1414328228.287:9441): pid=16420 uid=993 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D6F6663746C2064756D702D666C6F77732062722D696E74207461626C653D3233 terminal=? res=success' >type=CRED_ACQ msg=audit(1414328228.287:9442): pid=16420 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1414328228.287:9443): pid=16420 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1414328228.350:9444): pid=16420 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1414328228.350:9445): pid=16420 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1414328230.288:9446): pid=16424 uid=993 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D6F6663746C2064756D702D666C6F77732062722D696E74207461626C653D3233 terminal=? res=success' >type=CRED_ACQ msg=audit(1414328230.288:9447): pid=16424 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1414328230.289:9448): pid=16424 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1414328230.346:9449): pid=16424 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1414328230.347:9450): pid=16424 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1414328232.290:9451): pid=16429 uid=993 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D6F6663746C2064756D702D666C6F77732062722D696E74207461626C653D3233 terminal=? res=success' >type=CRED_ACQ msg=audit(1414328232.290:9452): pid=16429 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1414328232.291:9453): pid=16429 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1414328232.352:9454): pid=16429 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1414328232.352:9455): pid=16429 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1414328234.291:9456): pid=16432 uid=993 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D6F6663746C2064756D702D666C6F77732062722D696E74207461626C653D3233 terminal=? res=success' >type=CRED_ACQ msg=audit(1414328234.291:9457): pid=16432 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1414328234.292:9458): pid=16432 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1414328234.350:9459): pid=16432 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1414328234.350:9460): pid=16432 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1414328236.293:9461): pid=16435 uid=993 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D6F6663746C2064756D702D666C6F77732062722D696E74207461626C653D3233 terminal=? res=success' >type=CRED_ACQ msg=audit(1414328236.293:9462): pid=16435 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1414328236.294:9463): pid=16435 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1414328236.360:9464): pid=16435 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1414328236.360:9465): pid=16435 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1414328238.295:9466): pid=16438 uid=993 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D6F6663746C2064756D702D666C6F77732062722D696E74207461626C653D3233 terminal=? res=success' >type=CRED_ACQ msg=audit(1414328238.295:9467): pid=16438 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1414328238.295:9468): pid=16438 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1414328238.360:9469): pid=16438 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1414328238.360:9470): pid=16438 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1414328240.295:9471): pid=16441 uid=993 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D6F6663746C2064756D702D666C6F77732062722D696E74207461626C653D3233 terminal=? res=success' >type=CRED_ACQ msg=audit(1414328240.296:9472): pid=16441 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1414328240.296:9473): pid=16441 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1414328240.354:9474): pid=16441 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1414328240.354:9475): pid=16441 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1414328242.297:9476): pid=16446 uid=993 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D6F6663746C2064756D702D666C6F77732062722D696E74207461626C653D3233 terminal=? res=success' >type=CRED_ACQ msg=audit(1414328242.298:9477): pid=16446 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1414328242.298:9478): pid=16446 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1414328242.356:9479): pid=16446 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1414328242.356:9480): pid=16446 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1414328244.299:9481): pid=16449 uid=993 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D6F6663746C2064756D702D666C6F77732062722D696E74207461626C653D3233 terminal=? res=success' >type=CRED_ACQ msg=audit(1414328244.299:9482): pid=16449 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1414328244.300:9483): pid=16449 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1414328244.359:9484): pid=16449 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1414328244.359:9485): pid=16449 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1414328246.300:9486): pid=16452 uid=993 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D6F6663746C2064756D702D666C6F77732062722D696E74207461626C653D3233 terminal=? res=success' >type=CRED_ACQ msg=audit(1414328246.300:9487): pid=16452 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1414328246.300:9488): pid=16452 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1414328246.363:9489): pid=16452 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1414328246.363:9490): pid=16452 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1414328248.302:9491): pid=16467 uid=993 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D6F6663746C2064756D702D666C6F77732062722D696E74207461626C653D3233 terminal=? res=success' >type=CRED_ACQ msg=audit(1414328248.302:9492): pid=16467 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1414328248.302:9493): pid=16467 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1414328248.366:9494): pid=16467 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1414328248.366:9495): pid=16467 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1414328250.303:9496): pid=16477 uid=993 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D6F6663746C2064756D702D666C6F77732062722D696E74207461626C653D3233 terminal=? res=success' >type=CRED_ACQ msg=audit(1414328250.303:9497): pid=16477 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1414328250.304:9498): pid=16477 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1414328250.373:9499): pid=16477 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1414328250.374:9500): pid=16477 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1414328252.305:9501): pid=16482 uid=993 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D6F6663746C2064756D702D666C6F77732062722D696E74207461626C653D3233 terminal=? res=success' >type=CRED_ACQ msg=audit(1414328252.305:9502): pid=16482 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1414328252.305:9503): pid=16482 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1414328252.369:9504): pid=16482 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1414328252.369:9505): pid=16482 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1414328253.318:9506): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1414328253.318:9507): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1414328253.477:9508): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_START msg=audit(1414328253.477:9509): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414328253.478:9510): pid=16493 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=16493 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.34.60.204 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414328253.478:9511): pid=16493 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=16493 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.34.60.204 terminal=? res=success' >type=CRED_REFR msg=audit(1414328253.479:9512): pid=16493 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_CMD msg=audit(1414328254.307:9513): pid=16497 uid=993 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D6F6663746C2064756D702D666C6F77732062722D696E74207461626C653D3233 terminal=? res=success' >type=CRED_ACQ msg=audit(1414328254.307:9514): pid=16497 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1414328254.307:9515): pid=16497 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1414328254.370:9516): pid=16497 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1414328254.370:9517): pid=16497 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1414328256.308:9518): pid=16500 uid=993 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D6F6663746C2064756D702D666C6F77732062722D696E74207461626C653D3233 terminal=? res=success' >type=CRED_ACQ msg=audit(1414328256.308:9519): pid=16500 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1414328256.308:9520): pid=16500 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1414328256.372:9521): pid=16500 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1414328256.373:9522): pid=16500 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1414328256.468:9523): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1414328256.468:9524): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1414328256.611:9525): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_START msg=audit(1414328256.611:9526): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414328256.611:9527): pid=16503 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=16503 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.34.60.204 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414328256.612:9528): pid=16503 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=16503 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.34.60.204 terminal=? res=success' >type=CRED_REFR msg=audit(1414328256.612:9529): pid=16503 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_CMD msg=audit(1414328258.310:9530): pid=16510 uid=993 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D6F6663746C2064756D702D666C6F77732062722D696E74207461626C653D3233 terminal=? res=success' >type=CRED_ACQ msg=audit(1414328258.310:9531): pid=16510 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1414328258.310:9532): pid=16510 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1414328258.375:9533): pid=16510 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1414328258.375:9534): pid=16510 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1414328260.310:9535): pid=16515 uid=993 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D6F6663746C2064756D702D666C6F77732062722D696E74207461626C653D3233 terminal=? res=success' >type=CRED_ACQ msg=audit(1414328260.310:9536): pid=16515 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1414328260.310:9537): pid=16515 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1414328260.372:9538): pid=16515 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1414328260.372:9539): pid=16515 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1414328260.549:9540): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1414328260.549:9541): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1414328260.694:9542): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_START msg=audit(1414328260.694:9543): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414328260.694:9544): pid=16518 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=16518 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.34.60.204 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414328260.695:9545): pid=16518 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=16518 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.34.60.204 terminal=? res=success' >type=CRED_REFR msg=audit(1414328260.695:9546): pid=16518 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_CMD msg=audit(1414328262.313:9547): pid=16532 uid=993 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D6F6663746C2064756D702D666C6F77732062722D696E74207461626C653D3233 terminal=? res=success' >type=CRED_ACQ msg=audit(1414328262.313:9548): pid=16532 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1414328262.314:9549): pid=16532 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1414328262.381:9550): pid=16532 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1414328262.381:9551): pid=16532 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1414328262.497:9552): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1414328262.497:9553): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1414328262.642:9554): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_START msg=audit(1414328262.642:9555): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414328262.642:9556): pid=16535 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=16535 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.34.60.204 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414328262.643:9557): pid=16535 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=16535 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.34.60.204 terminal=? res=success' >type=CRED_REFR msg=audit(1414328262.643:9558): pid=16535 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_END msg=audit(1414328262.889:9559): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1414328262.889:9560): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1414328263.048:9561): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_START msg=audit(1414328263.048:9562): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414328263.049:9563): pid=16539 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=16539 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.34.60.204 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414328263.049:9564): pid=16539 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=16539 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.34.60.204 terminal=? res=success' >type=CRED_REFR msg=audit(1414328263.049:9565): pid=16539 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_CMD msg=audit(1414328264.062:9566): pid=16553 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D4320766773202D2D6E6F68656164696E6773202D2D756E69743D67202D6F206E616D652C73697A652C667265652C6C765F636F756E742C75756964202D2D736570617261746F72203A202D2D6E6F7375666669782063696E6465722D766F6C756D6573 terminal=? res=success' >type=CRED_ACQ msg=audit(1414328264.062:9567): pid=16553 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1414328264.064:9568): pid=16553 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1414328264.141:9569): pid=16553 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1414328264.141:9570): pid=16553 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1414328264.317:9571): pid=16556 uid=993 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D6F6663746C2064756D702D666C6F77732062722D696E74207461626C653D3233 terminal=? res=success' >type=CRED_ACQ msg=audit(1414328264.317:9572): pid=16556 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1414328264.318:9573): pid=16556 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1414328264.379:9574): pid=16556 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1414328264.379:9575): pid=16556 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1414328266.319:9576): pid=16584 uid=993 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D6F6663746C2064756D702D666C6F77732062722D696E74207461626C653D3233 terminal=? res=success' >type=CRED_ACQ msg=audit(1414328266.319:9577): pid=16584 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1414328266.319:9578): pid=16584 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1414328266.380:9579): pid=16584 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1414328266.380:9580): pid=16584 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1414328268.317:9581): pid=16607 uid=993 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D6F6663746C2064756D702D666C6F77732062722D696E74207461626C653D3233 terminal=? res=success' >type=CRED_ACQ msg=audit(1414328268.317:9582): pid=16607 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1414328268.317:9583): pid=16607 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1414328268.379:9584): pid=16607 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1414328268.379:9585): pid=16607 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1414328270.317:9586): pid=16615 uid=993 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D6F6663746C2064756D702D666C6F77732062722D696E74207461626C653D3233 terminal=? res=success' >type=CRED_ACQ msg=audit(1414328270.317:9587): pid=16615 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1414328270.318:9588): pid=16615 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1414328270.383:9589): pid=16615 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1414328270.383:9590): pid=16615 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1414328272.318:9591): pid=16625 uid=993 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D6F6663746C2064756D702D666C6F77732062722D696E74207461626C653D3233 terminal=? res=success' >type=CRED_ACQ msg=audit(1414328272.319:9592): pid=16625 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1414328272.319:9593): pid=16625 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1414328272.382:9594): pid=16625 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1414328272.382:9595): pid=16625 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1414328274.319:9596): pid=16633 uid=993 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D6F6663746C2064756D702D666C6F77732062722D696E74207461626C653D3233 terminal=? res=success' >type=CRED_ACQ msg=audit(1414328274.319:9597): pid=16633 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1414328274.319:9598): pid=16633 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1414328274.383:9599): pid=16633 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1414328274.383:9600): pid=16633 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1414328276.320:9601): pid=16641 uid=993 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D6F6663746C2064756D702D666C6F77732062722D696E74207461626C653D3233 terminal=? res=success' >type=CRED_ACQ msg=audit(1414328276.320:9602): pid=16641 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1414328276.321:9603): pid=16641 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1414328276.383:9604): pid=16641 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1414328276.383:9605): pid=16641 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1414328278.321:9606): pid=16650 uid=993 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D6F6663746C2064756D702D666C6F77732062722D696E74207461626C653D3233 terminal=? res=success' >type=CRED_ACQ msg=audit(1414328278.321:9607): pid=16650 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1414328278.322:9608): pid=16650 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1414328278.383:9609): pid=16650 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1414328278.383:9610): pid=16650 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1414328280.324:9611): pid=16653 uid=993 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D6F6663746C2064756D702D666C6F77732062722D696E74207461626C653D3233 terminal=? res=success' >type=CRED_ACQ msg=audit(1414328280.324:9612): pid=16653 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1414328280.324:9613): pid=16653 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1414328280.391:9614): pid=16653 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1414328280.391:9615): pid=16653 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1414328281.470:9616): pid=16656 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="keystone" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1414328281.470:9617): pid=16656 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="keystone" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1414328281.471:9618): pid=16656 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=163 old-ses=4294967295 ses=340 res=1 >type=USER_START msg=audit(1414328281.484:9619): pid=16656 uid=0 auid=163 ses=340 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="keystone" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1414328281.485:9620): pid=16656 uid=0 auid=163 ses=340 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="keystone" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1414328282.134:9621): pid=16656 uid=0 auid=163 ses=340 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="keystone" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1414328282.137:9622): pid=16656 uid=0 auid=163 ses=340 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="keystone" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_CMD msg=audit(1414328282.326:9623): pid=16671 uid=993 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D6F6663746C2064756D702D666C6F77732062722D696E74207461626C653D3233 terminal=? res=success' >type=CRED_ACQ msg=audit(1414328282.326:9624): pid=16671 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1414328282.326:9625): pid=16671 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1414328282.391:9626): pid=16671 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1414328282.392:9627): pid=16671 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1414328284.326:9628): pid=16674 uid=993 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D6F6663746C2064756D702D666C6F77732062722D696E74207461626C653D3233 terminal=? res=success' >type=CRED_ACQ msg=audit(1414328284.327:9629): pid=16674 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1414328284.327:9630): pid=16674 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1414328284.397:9631): pid=16674 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1414328284.397:9632): pid=16674 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1414328286.328:9633): pid=16677 uid=993 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D6F6663746C2064756D702D666C6F77732062722D696E74207461626C653D3233 terminal=? res=success' >type=CRED_ACQ msg=audit(1414328286.328:9634): pid=16677 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1414328286.329:9635): pid=16677 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1414328286.393:9636): pid=16677 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1414328286.393:9637): pid=16677 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1414328288.330:9638): pid=16685 uid=993 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D6F6663746C2064756D702D666C6F77732062722D696E74207461626C653D3233 terminal=? res=success' >type=CRED_ACQ msg=audit(1414328288.330:9639): pid=16685 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1414328288.330:9640): pid=16685 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1414328288.390:9641): pid=16685 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1414328288.390:9642): pid=16685 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1414328290.330:9643): pid=16688 uid=993 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D6F6663746C2064756D702D666C6F77732062722D696E74207461626C653D3233 terminal=? res=success' >type=CRED_ACQ msg=audit(1414328290.331:9644): pid=16688 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1414328290.331:9645): pid=16688 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1414328290.394:9646): pid=16688 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1414328290.395:9647): pid=16688 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1414328292.332:9648): pid=16698 uid=993 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D6F6663746C2064756D702D666C6F77732062722D696E74207461626C653D3233 terminal=? res=success' >type=CRED_ACQ msg=audit(1414328292.333:9649): pid=16698 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1414328292.333:9650): pid=16698 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1414328292.394:9651): pid=16698 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1414328292.394:9652): pid=16698 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1414328294.333:9653): pid=16711 uid=993 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D6F6663746C2064756D702D666C6F77732062722D696E74207461626C653D3233 terminal=? res=success' >type=CRED_ACQ msg=audit(1414328294.333:9654): pid=16711 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1414328294.333:9655): pid=16711 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1414328294.395:9656): pid=16711 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1414328294.395:9657): pid=16711 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1414328296.334:9658): pid=16750 uid=993 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D6F6663746C2064756D702D666C6F77732062722D696E74207461626C653D3233 terminal=? res=success' >type=CRED_ACQ msg=audit(1414328296.335:9659): pid=16750 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1414328296.335:9660): pid=16750 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1414328296.396:9661): pid=16750 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1414328296.396:9662): pid=16750 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1414328298.337:9663): pid=16788 uid=993 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D6F6663746C2064756D702D666C6F77732062722D696E74207461626C653D3233 terminal=? res=success' >type=CRED_ACQ msg=audit(1414328298.337:9664): pid=16788 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1414328298.337:9665): pid=16788 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1414328298.403:9666): pid=16788 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1414328298.403:9667): pid=16788 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1414328300.337:9668): pid=16816 uid=993 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D6F6663746C2064756D702D666C6F77732062722D696E74207461626C653D3233 terminal=? res=success' >type=CRED_ACQ msg=audit(1414328300.338:9669): pid=16816 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1414328300.338:9670): pid=16816 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1414328300.402:9671): pid=16816 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1414328300.402:9672): pid=16816 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1414328300.869:9673): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1414328300.869:9674): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1414328301.016:9675): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_START msg=audit(1414328301.016:9676): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414328301.017:9677): pid=16819 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=16819 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.34.60.204 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414328301.017:9678): pid=16819 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=16819 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.34.60.204 terminal=? res=success' >type=CRED_REFR msg=audit(1414328301.018:9679): pid=16819 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_CMD msg=audit(1414328302.338:9680): pid=16840 uid=993 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D6F6663746C2064756D702D666C6F77732062722D696E74207461626C653D3233 terminal=? res=success' >type=CRED_ACQ msg=audit(1414328302.339:9681): pid=16840 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1414328302.339:9682): pid=16840 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1414328302.401:9683): pid=16840 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1414328302.401:9684): pid=16840 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1414328304.339:9685): pid=16848 uid=993 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D6F6663746C2064756D702D666C6F77732062722D696E74207461626C653D3233 terminal=? res=success' >type=CRED_ACQ msg=audit(1414328304.339:9686): pid=16848 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1414328304.339:9687): pid=16848 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1414328304.400:9688): pid=16848 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1414328304.400:9689): pid=16848 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1414328306.341:9690): pid=16851 uid=993 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D6F6663746C2064756D702D666C6F77732062722D696E74207461626C653D3233 terminal=? res=success' >type=CRED_ACQ msg=audit(1414328306.341:9691): pid=16851 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1414328306.341:9692): pid=16851 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1414328306.403:9693): pid=16851 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1414328306.403:9694): pid=16851 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1414328308.342:9695): pid=16860 uid=993 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D6F6663746C2064756D702D666C6F77732062722D696E74207461626C653D3233 terminal=? res=success' >type=CRED_ACQ msg=audit(1414328308.343:9696): pid=16860 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1414328308.343:9697): pid=16860 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1414328308.406:9698): pid=16860 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1414328308.406:9699): pid=16860 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1414328310.344:9700): pid=16924 uid=993 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D6F6663746C2064756D702D666C6F77732062722D696E74207461626C653D3233 terminal=? res=success' >type=CRED_ACQ msg=audit(1414328310.344:9701): pid=16924 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1414328310.345:9702): pid=16924 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1414328310.405:9703): pid=16924 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1414328310.405:9704): pid=16924 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1414328312.346:9705): pid=16929 uid=993 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D6F6663746C2064756D702D666C6F77732062722D696E74207461626C653D3233 terminal=? res=success' >type=CRED_ACQ msg=audit(1414328312.346:9706): pid=16929 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1414328312.347:9707): pid=16929 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1414328312.408:9708): pid=16929 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1414328312.408:9709): pid=16929 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1414328314.347:9710): pid=16932 uid=993 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D6F6663746C2064756D702D666C6F77732062722D696E74207461626C653D3233 terminal=? res=success' >type=CRED_ACQ msg=audit(1414328314.348:9711): pid=16932 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1414328314.348:9712): pid=16932 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1414328314.410:9713): pid=16932 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1414328314.410:9714): pid=16932 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1414328316.349:9715): pid=16951 uid=993 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D6F6663746C2064756D702D666C6F77732062722D696E74207461626C653D3233 terminal=? res=success' >type=CRED_ACQ msg=audit(1414328316.350:9716): pid=16951 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1414328316.350:9717): pid=16951 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1414328316.413:9718): pid=16951 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1414328316.413:9719): pid=16951 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1414328318.350:9720): pid=16969 uid=993 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D6F6663746C2064756D702D666C6F77732062722D696E74207461626C653D3233 terminal=? res=success' >type=CRED_ACQ msg=audit(1414328318.351:9721): pid=16969 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1414328318.351:9722): pid=16969 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1414328318.412:9723): pid=16969 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1414328318.412:9724): pid=16969 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1414328320.351:9725): pid=16987 uid=993 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D6F6663746C2064756D702D666C6F77732062722D696E74207461626C653D3233 terminal=? res=success' >type=CRED_ACQ msg=audit(1414328320.352:9726): pid=16987 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1414328320.352:9727): pid=16987 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1414328320.410:9728): pid=16987 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1414328320.410:9729): pid=16987 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1414328322.353:9730): pid=17002 uid=993 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D6F6663746C2064756D702D666C6F77732062722D696E74207461626C653D3233 terminal=? res=success' >type=CRED_ACQ msg=audit(1414328322.353:9731): pid=17002 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1414328322.354:9732): pid=17002 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1414328322.414:9733): pid=17002 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1414328322.414:9734): pid=17002 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1414328324.067:9735): pid=17005 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D4320766773202D2D6E6F68656164696E6773202D2D756E69743D67202D6F206E616D652C73697A652C667265652C6C765F636F756E742C75756964202D2D736570617261746F72203A202D2D6E6F7375666669782063696E6465722D766F6C756D6573 terminal=? res=success' >type=CRED_ACQ msg=audit(1414328324.067:9736): pid=17005 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1414328324.069:9737): pid=17005 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1414328324.149:9738): pid=17005 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1414328324.149:9739): pid=17005 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1414328324.356:9740): pid=17008 uid=993 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D6F6663746C2064756D702D666C6F77732062722D696E74207461626C653D3233 terminal=? res=success' >type=CRED_ACQ msg=audit(1414328324.356:9741): pid=17008 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1414328324.357:9742): pid=17008 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1414328324.420:9743): pid=17008 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1414328324.420:9744): pid=17008 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1414328326.356:9745): pid=17011 uid=993 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D6F6663746C2064756D702D666C6F77732062722D696E74207461626C653D3233 terminal=? res=success' >type=CRED_ACQ msg=audit(1414328326.356:9746): pid=17011 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1414328326.357:9747): pid=17011 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1414328326.417:9748): pid=17011 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1414328326.417:9749): pid=17011 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1414328328.358:9750): pid=17024 uid=993 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D6F6663746C2064756D702D666C6F77732062722D696E74207461626C653D3233 terminal=? res=success' >type=CRED_ACQ msg=audit(1414328328.358:9751): pid=17024 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1414328328.358:9752): pid=17024 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1414328328.419:9753): pid=17024 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1414328328.419:9754): pid=17024 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1414328330.359:9755): pid=17042 uid=993 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D6F6663746C2064756D702D666C6F77732062722D696E74207461626C653D3233 terminal=? res=success' >type=CRED_ACQ msg=audit(1414328330.359:9756): pid=17042 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1414328330.359:9757): pid=17042 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1414328330.453:9758): pid=17042 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1414328330.453:9759): pid=17042 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1414328332.360:9760): pid=17123 uid=993 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D6F6663746C2064756D702D666C6F77732062722D696E74207461626C653D3233 terminal=? res=success' >type=CRED_ACQ msg=audit(1414328332.365:9761): pid=17123 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1414328332.365:9762): pid=17123 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1414328332.439:9763): pid=17123 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1414328332.439:9764): pid=17123 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1414328334.361:9765): pid=17126 uid=993 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D6F6663746C2064756D702D666C6F77732062722D696E74207461626C653D3233 terminal=? res=success' >type=CRED_ACQ msg=audit(1414328334.361:9766): pid=17126 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1414328334.362:9767): pid=17126 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1414328334.431:9768): pid=17126 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1414328334.431:9769): pid=17126 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1414328336.365:9770): pid=17129 uid=993 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D6F6663746C2064756D702D666C6F77732062722D696E74207461626C653D3233 terminal=? res=success' >type=CRED_ACQ msg=audit(1414328336.366:9771): pid=17129 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1414328336.366:9772): pid=17129 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1414328336.445:9773): pid=17129 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1414328336.445:9774): pid=17129 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1414328338.365:9775): pid=17135 uid=993 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D6F6663746C2064756D702D666C6F77732062722D696E74207461626C653D3233 terminal=? res=success' >type=CRED_ACQ msg=audit(1414328338.365:9776): pid=17135 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1414328338.366:9777): pid=17135 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1414328338.436:9778): pid=17135 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1414328338.436:9779): pid=17135 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1414328340.366:9780): pid=17138 uid=993 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D6F6663746C2064756D702D666C6F77732062722D696E74207461626C653D3233 terminal=? res=success' >type=CRED_ACQ msg=audit(1414328340.366:9781): pid=17138 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1414328340.366:9782): pid=17138 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1414328340.428:9783): pid=17138 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1414328340.428:9784): pid=17138 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1414328341.145:9785): pid=17141 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="keystone" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1414328341.145:9786): pid=17141 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="keystone" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1414328341.146:9787): pid=17141 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=163 old-ses=4294967295 ses=341 res=1 >type=USER_START msg=audit(1414328341.157:9788): pid=17141 uid=0 auid=163 ses=341 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="keystone" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1414328341.158:9789): pid=17141 uid=0 auid=163 ses=341 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="keystone" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1414328341.820:9790): pid=17141 uid=0 auid=163 ses=341 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="keystone" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1414328341.822:9791): pid=17141 uid=0 auid=163 ses=341 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="keystone" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_CMD msg=audit(1414328342.368:9792): pid=17156 uid=993 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D6F6663746C2064756D702D666C6F77732062722D696E74207461626C653D3233 terminal=? res=success' >type=CRED_ACQ msg=audit(1414328342.369:9793): pid=17156 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1414328342.369:9794): pid=17156 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1414328342.435:9795): pid=17156 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1414328342.435:9796): pid=17156 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1414328344.368:9797): pid=17159 uid=993 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D6F6663746C2064756D702D666C6F77732062722D696E74207461626C653D3233 terminal=? res=success' >type=CRED_ACQ msg=audit(1414328344.368:9798): pid=17159 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1414328344.368:9799): pid=17159 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1414328344.428:9800): pid=17159 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1414328344.429:9801): pid=17159 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1414328346.369:9802): pid=17162 uid=993 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D6F6663746C2064756D702D666C6F77732062722D696E74207461626C653D3233 terminal=? res=success' >type=CRED_ACQ msg=audit(1414328346.369:9803): pid=17162 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1414328346.370:9804): pid=17162 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1414328346.437:9805): pid=17162 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1414328346.437:9806): pid=17162 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1414328348.371:9807): pid=17165 uid=993 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D6F6663746C2064756D702D666C6F77732062722D696E74207461626C653D3233 terminal=? res=success' >type=CRED_ACQ msg=audit(1414328348.371:9808): pid=17165 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1414328348.372:9809): pid=17165 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1414328348.442:9810): pid=17165 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1414328348.442:9811): pid=17165 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1414328350.372:9812): pid=17168 uid=993 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D6F6663746C2064756D702D666C6F77732062722D696E74207461626C653D3233 terminal=? res=success' >type=CRED_ACQ msg=audit(1414328350.372:9813): pid=17168 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1414328350.372:9814): pid=17168 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1414328350.434:9815): pid=17168 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1414328350.434:9816): pid=17168 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1414328352.374:9817): pid=17173 uid=993 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D6F6663746C2064756D702D666C6F77732062722D696E74207461626C653D3233 terminal=? res=success' >type=CRED_ACQ msg=audit(1414328352.374:9818): pid=17173 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1414328352.374:9819): pid=17173 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1414328352.437:9820): pid=17173 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1414328352.437:9821): pid=17173 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1414328354.376:9822): pid=17176 uid=993 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D6F6663746C2064756D702D666C6F77732062722D696E74207461626C653D3233 terminal=? res=success' >type=CRED_ACQ msg=audit(1414328354.376:9823): pid=17176 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1414328354.376:9824): pid=17176 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1414328354.439:9825): pid=17176 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1414328354.439:9826): pid=17176 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1414328356.376:9827): pid=17179 uid=993 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D6F6663746C2064756D702D666C6F77732062722D696E74207461626C653D3233 terminal=? res=success' >type=CRED_ACQ msg=audit(1414328356.376:9828): pid=17179 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1414328356.377:9829): pid=17179 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1414328356.443:9830): pid=17179 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1414328356.443:9831): pid=17179 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1414328358.379:9832): pid=17182 uid=993 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D6F6663746C2064756D702D666C6F77732062722D696E74207461626C653D3233 terminal=? res=success' >type=CRED_ACQ msg=audit(1414328358.379:9833): pid=17182 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1414328358.379:9834): pid=17182 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1414328358.439:9835): pid=17182 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1414328358.439:9836): pid=17182 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1414328360.378:9837): pid=17185 uid=993 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D6F6663746C2064756D702D666C6F77732062722D696E74207461626C653D3233 terminal=? res=success' >type=CRED_ACQ msg=audit(1414328360.379:9838): pid=17185 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1414328360.379:9839): pid=17185 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1414328360.447:9840): pid=17185 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1414328360.447:9841): pid=17185 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1414328362.380:9842): pid=17190 uid=993 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D6F6663746C2064756D702D666C6F77732062722D696E74207461626C653D3233 terminal=? res=success' >type=CRED_ACQ msg=audit(1414328362.380:9843): pid=17190 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1414328362.380:9844): pid=17190 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1414328362.443:9845): pid=17190 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1414328362.443:9846): pid=17190 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1414328364.382:9847): pid=17193 uid=993 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D6F6663746C2064756D702D666C6F77732062722D696E74207461626C653D3233 terminal=? res=success' >type=CRED_ACQ msg=audit(1414328364.382:9848): pid=17193 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1414328364.383:9849): pid=17193 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1414328364.448:9850): pid=17193 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1414328364.448:9851): pid=17193 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1414328366.383:9852): pid=17196 uid=993 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D6F6663746C2064756D702D666C6F77732062722D696E74207461626C653D3233 terminal=? res=success' >type=CRED_ACQ msg=audit(1414328366.383:9853): pid=17196 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1414328366.383:9854): pid=17196 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1414328366.446:9855): pid=17196 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1414328366.446:9856): pid=17196 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1414328368.383:9857): pid=17205 uid=993 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D6F6663746C2064756D702D666C6F77732062722D696E74207461626C653D3233 terminal=? res=success' >type=CRED_ACQ msg=audit(1414328368.383:9858): pid=17205 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1414328368.384:9859): pid=17205 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1414328368.448:9860): pid=17205 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1414328368.448:9861): pid=17205 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1414328370.385:9862): pid=17208 uid=993 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D6F6663746C2064756D702D666C6F77732062722D696E74207461626C653D3233 terminal=? res=success' >type=CRED_ACQ msg=audit(1414328370.385:9863): pid=17208 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1414328370.385:9864): pid=17208 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1414328370.453:9865): pid=17208 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1414328370.453:9866): pid=17208 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1414328372.385:9867): pid=17213 uid=993 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D6F6663746C2064756D702D666C6F77732062722D696E74207461626C653D3233 terminal=? res=success' >type=CRED_ACQ msg=audit(1414328372.385:9868): pid=17213 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1414328372.386:9869): pid=17213 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1414328372.448:9870): pid=17213 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1414328372.448:9871): pid=17213 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1414328374.386:9872): pid=17216 uid=993 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D6F6663746C2064756D702D666C6F77732062722D696E74207461626C653D3233 terminal=? res=success' >type=CRED_ACQ msg=audit(1414328374.386:9873): pid=17216 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1414328374.386:9874): pid=17216 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1414328374.444:9875): pid=17216 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1414328374.444:9876): pid=17216 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1414328376.389:9877): pid=17219 uid=993 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D6F6663746C2064756D702D666C6F77732062722D696E74207461626C653D3233 terminal=? res=success' >type=CRED_ACQ msg=audit(1414328376.389:9878): pid=17219 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1414328376.390:9879): pid=17219 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1414328376.464:9880): pid=17219 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1414328376.464:9881): pid=17219 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1414328378.389:9882): pid=17228 uid=993 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D6F6663746C2064756D702D666C6F77732062722D696E74207461626C653D3233 terminal=? res=success' >type=CRED_ACQ msg=audit(1414328378.390:9883): pid=17228 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1414328378.390:9884): pid=17228 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1414328378.454:9885): pid=17228 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1414328378.454:9886): pid=17228 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1414328380.391:9887): pid=17231 uid=993 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D6F6663746C2064756D702D666C6F77732062722D696E74207461626C653D3233 terminal=? res=success' >type=CRED_ACQ msg=audit(1414328380.391:9888): pid=17231 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1414328380.391:9889): pid=17231 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1414328380.452:9890): pid=17231 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1414328380.452:9891): pid=17231 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1414328382.394:9892): pid=17236 uid=993 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D6F6663746C2064756D702D666C6F77732062722D696E74207461626C653D3233 terminal=? res=success' >type=CRED_ACQ msg=audit(1414328382.394:9893): pid=17236 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1414328382.395:9894): pid=17236 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1414328382.456:9895): pid=17236 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1414328382.456:9896): pid=17236 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1414328384.067:9897): pid=17239 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D4320766773202D2D6E6F68656164696E6773202D2D756E69743D67202D6F206E616D652C73697A652C667265652C6C765F636F756E742C75756964202D2D736570617261746F72203A202D2D6E6F7375666669782063696E6465722D766F6C756D6573 terminal=? res=success' >type=CRED_ACQ msg=audit(1414328384.067:9898): pid=17239 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1414328384.067:9899): pid=17239 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1414328384.138:9900): pid=17239 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1414328384.138:9901): pid=17239 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1414328384.396:9902): pid=17242 uid=993 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D6F6663746C2064756D702D666C6F77732062722D696E74207461626C653D3233 terminal=? res=success' >type=CRED_ACQ msg=audit(1414328384.396:9903): pid=17242 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1414328384.396:9904): pid=17242 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1414328384.458:9905): pid=17242 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1414328384.458:9906): pid=17242 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1414328386.396:9907): pid=17250 uid=993 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D6F6663746C2064756D702D666C6F77732062722D696E74207461626C653D3233 terminal=? res=success' >type=CRED_ACQ msg=audit(1414328386.396:9908): pid=17250 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1414328386.396:9909): pid=17250 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1414328386.461:9910): pid=17250 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1414328386.461:9911): pid=17250 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1414328388.398:9912): pid=17308 uid=993 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D6F6663746C2064756D702D666C6F77732062722D696E74207461626C653D3233 terminal=? res=success' >type=CRED_ACQ msg=audit(1414328388.398:9913): pid=17308 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1414328388.398:9914): pid=17308 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1414328388.465:9915): pid=17308 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1414328388.465:9916): pid=17308 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1414328390.400:9917): pid=18083 uid=993 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D6F6663746C2064756D702D666C6F77732062722D696E74207461626C653D3233 terminal=? res=success' >type=CRED_ACQ msg=audit(1414328390.400:9918): pid=18083 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1414328390.401:9919): pid=18083 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1414328390.462:9920): pid=18083 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1414328390.462:9921): pid=18083 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1414328392.400:9922): pid=18136 uid=993 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D6F6663746C2064756D702D666C6F77732062722D696E74207461626C653D3233 terminal=? res=success' >type=CRED_ACQ msg=audit(1414328392.400:9923): pid=18136 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1414328392.400:9924): pid=18136 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1414328392.461:9925): pid=18136 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1414328392.461:9926): pid=18136 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1414328394.401:9927): pid=18175 uid=993 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D6F6663746C2064756D702D666C6F77732062722D696E74207461626C653D3233 terminal=? res=success' >type=CRED_ACQ msg=audit(1414328394.401:9928): pid=18175 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1414328394.401:9929): pid=18175 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1414328394.462:9930): pid=18175 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1414328394.462:9931): pid=18175 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1414328396.403:9932): pid=18222 uid=993 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D6F6663746C2064756D702D666C6F77732062722D696E74207461626C653D3233 terminal=? res=success' >type=CRED_ACQ msg=audit(1414328396.403:9933): pid=18222 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1414328396.403:9934): pid=18222 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1414328396.467:9935): pid=18222 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1414328396.467:9936): pid=18222 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1414328398.405:9937): pid=18255 uid=993 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D6F6663746C2064756D702D666C6F77732062722D696E74207461626C653D3233 terminal=? res=success' >type=CRED_ACQ msg=audit(1414328398.405:9938): pid=18255 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1414328398.405:9939): pid=18255 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1414328398.469:9940): pid=18255 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1414328398.469:9941): pid=18255 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1414328400.407:9942): pid=18271 uid=993 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D6F6663746C2064756D702D666C6F77732062722D696E74207461626C653D3233 terminal=? res=success' >type=CRED_ACQ msg=audit(1414328400.407:9943): pid=18271 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1414328400.407:9944): pid=18271 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1414328400.466:9945): pid=18271 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1414328400.466:9946): pid=18271 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1414328401.831:9947): pid=18277 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="keystone" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1414328401.831:9948): pid=18277 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="keystone" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1414328401.831:9949): pid=18277 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=163 old-ses=4294967295 ses=342 res=1 >type=USER_START msg=audit(1414328401.842:9950): pid=18277 uid=0 auid=163 ses=342 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="keystone" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1414328401.842:9951): pid=18277 uid=0 auid=163 ses=342 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="keystone" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_CMD msg=audit(1414328402.408:9952): pid=18291 uid=993 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D6F6663746C2064756D702D666C6F77732062722D696E74207461626C653D3233 terminal=? res=success' >type=CRED_ACQ msg=audit(1414328402.409:9953): pid=18291 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1414328402.409:9954): pid=18291 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1414328402.476:9955): pid=18291 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1414328402.476:9956): pid=18291 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1414328402.503:9957): pid=18277 uid=0 auid=163 ses=342 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="keystone" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1414328402.505:9958): pid=18277 uid=0 auid=163 ses=342 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="keystone" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_CMD msg=audit(1414328404.410:9959): pid=18313 uid=993 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D6F6663746C2064756D702D666C6F77732062722D696E74207461626C653D3233 terminal=? res=success' >type=CRED_ACQ msg=audit(1414328404.410:9960): pid=18313 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1414328404.410:9961): pid=18313 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1414328404.471:9962): pid=18313 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1414328404.472:9963): pid=18313 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1414328406.413:9964): pid=18316 uid=993 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D6F6663746C2064756D702D666C6F77732062722D696E74207461626C653D3233 terminal=? res=success' >type=CRED_ACQ msg=audit(1414328406.414:9965): pid=18316 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1414328406.414:9966): pid=18316 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1414328406.484:9967): pid=18316 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1414328406.484:9968): pid=18316 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1414328408.413:9969): pid=18319 uid=993 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D6F6663746C2064756D702D666C6F77732062722D696E74207461626C653D3233 terminal=? res=success' >type=CRED_ACQ msg=audit(1414328408.413:9970): pid=18319 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1414328408.414:9971): pid=18319 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1414328408.475:9972): pid=18319 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1414328408.475:9973): pid=18319 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1414328410.415:9974): pid=18322 uid=993 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D6F6663746C2064756D702D666C6F77732062722D696E74207461626C653D3233 terminal=? res=success' >type=CRED_ACQ msg=audit(1414328410.415:9975): pid=18322 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1414328410.415:9976): pid=18322 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1414328410.477:9977): pid=18322 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1414328410.477:9978): pid=18322 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1414328412.417:9979): pid=18327 uid=993 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D6F6663746C2064756D702D666C6F77732062722D696E74207461626C653D3233 terminal=? res=success' >type=CRED_ACQ msg=audit(1414328412.417:9980): pid=18327 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1414328412.417:9981): pid=18327 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1414328412.481:9982): pid=18327 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1414328412.481:9983): pid=18327 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1414328414.419:9984): pid=18330 uid=993 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D6F6663746C2064756D702D666C6F77732062722D696E74207461626C653D3233 terminal=? res=success' >type=CRED_ACQ msg=audit(1414328414.420:9985): pid=18330 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1414328414.420:9986): pid=18330 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1414328414.481:9987): pid=18330 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1414328414.482:9988): pid=18330 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1414328416.426:9989): pid=18336 uid=993 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D6F6663746C2064756D702D666C6F77732062722D696E74207461626C653D3233 terminal=? res=success' >type=CRED_ACQ msg=audit(1414328416.426:9990): pid=18336 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1414328416.426:9991): pid=18336 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1414328416.488:9992): pid=18336 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1414328416.488:9993): pid=18336 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1414328418.428:9994): pid=18344 uid=993 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D6F6663746C2064756D702D666C6F77732062722D696E74207461626C653D3233 terminal=? res=success' >type=CRED_ACQ msg=audit(1414328418.429:9995): pid=18344 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1414328418.429:9996): pid=18344 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1414328418.490:9997): pid=18344 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1414328418.490:9998): pid=18344 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1414328420.428:9999): pid=18347 uid=993 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D6F6663746C2064756D702D666C6F77732062722D696E74207461626C653D3233 terminal=? res=success' >type=CRED_ACQ msg=audit(1414328420.428:10000): pid=18347 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1414328420.428:10001): pid=18347 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1414328420.485:10002): pid=18347 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1414328420.486:10003): pid=18347 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1414328422.430:10004): pid=18352 uid=993 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D6F6663746C2064756D702D666C6F77732062722D696E74207461626C653D3233 terminal=? res=success' >type=CRED_ACQ msg=audit(1414328422.430:10005): pid=18352 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1414328422.430:10006): pid=18352 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1414328422.490:10007): pid=18352 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1414328422.490:10008): pid=18352 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1414328424.430:10009): pid=18355 uid=993 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D6F6663746C2064756D702D666C6F77732062722D696E74207461626C653D3233 terminal=? res=success' >type=CRED_ACQ msg=audit(1414328424.430:10010): pid=18355 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1414328424.430:10011): pid=18355 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1414328424.491:10012): pid=18355 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1414328424.492:10013): pid=18355 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1414328426.434:10014): pid=18358 uid=993 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D6F6663746C2064756D702D666C6F77732062722D696E74207461626C653D3233 terminal=? res=success' >type=CRED_ACQ msg=audit(1414328426.434:10015): pid=18358 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1414328426.434:10016): pid=18358 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1414328426.495:10017): pid=18358 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1414328426.495:10018): pid=18358 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1414328428.432:10019): pid=18364 uid=993 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D6F6663746C2064756D702D666C6F77732062722D696E74207461626C653D3233 terminal=? res=success' >type=CRED_ACQ msg=audit(1414328428.432:10020): pid=18364 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1414328428.433:10021): pid=18364 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1414328428.494:10022): pid=18364 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1414328428.494:10023): pid=18364 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1414328430.434:10024): pid=18406 uid=993 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D6F6663746C2064756D702D666C6F77732062722D696E74207461626C653D3233 terminal=? res=success' >type=CRED_ACQ msg=audit(1414328430.435:10025): pid=18406 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1414328430.435:10026): pid=18406 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1414328430.497:10027): pid=18406 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1414328430.498:10028): pid=18406 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1414328432.435:10029): pid=18421 uid=993 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D6F6663746C2064756D702D666C6F77732062722D696E74207461626C653D3233 terminal=? res=success' >type=CRED_ACQ msg=audit(1414328432.435:10030): pid=18421 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1414328432.436:10031): pid=18421 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1414328432.496:10032): pid=18421 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1414328432.496:10033): pid=18421 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1414328432.567:10034): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1414328432.567:10035): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1414328432.690:10036): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_START msg=audit(1414328432.690:10037): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414328432.691:10038): pid=18424 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=18424 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.34.60.204 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414328432.691:10039): pid=18424 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=18424 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.34.60.204 terminal=? res=success' >type=CRED_REFR msg=audit(1414328432.691:10040): pid=18424 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_END msg=audit(1414328433.020:10041): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1414328433.020:10042): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1414328433.165:10043): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_START msg=audit(1414328433.165:10044): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414328433.165:10045): pid=18428 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=18428 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.34.60.204 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414328433.165:10046): pid=18428 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=18428 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.34.60.204 terminal=? res=success' >type=CRED_REFR msg=audit(1414328433.166:10047): pid=18428 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_END msg=audit(1414328433.495:10048): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1414328433.495:10049): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1414328433.640:10050): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_START msg=audit(1414328433.640:10051): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414328433.641:10052): pid=18432 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=18432 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.34.60.204 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414328433.641:10053): pid=18432 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=18432 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.34.60.204 terminal=? res=success' >type=CRED_REFR msg=audit(1414328433.641:10054): pid=18432 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_END msg=audit(1414328434.004:10055): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1414328434.004:10056): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1414328434.150:10057): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_START msg=audit(1414328434.150:10058): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414328434.150:10059): pid=18436 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=18436 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.34.60.204 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414328434.150:10060): pid=18436 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=18436 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.34.60.204 terminal=? res=success' >type=CRED_REFR msg=audit(1414328434.151:10061): pid=18436 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_CMD msg=audit(1414328434.437:10062): pid=18440 uid=993 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D6F6663746C2064756D702D666C6F77732062722D696E74207461626C653D3233 terminal=? res=success' >type=CRED_ACQ msg=audit(1414328434.437:10063): pid=18440 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1414328434.437:10064): pid=18440 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1414328434.497:10065): pid=18440 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1414328434.497:10066): pid=18440 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1414328434.511:10067): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1414328434.511:10068): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1414328434.657:10069): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_START msg=audit(1414328434.657:10070): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414328434.657:10071): pid=18443 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=18443 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.34.60.204 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414328434.657:10072): pid=18443 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=18443 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.34.60.204 terminal=? res=success' >type=CRED_REFR msg=audit(1414328434.657:10073): pid=18443 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_END msg=audit(1414328434.991:10074): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1414328434.991:10075): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1414328435.135:10076): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_START msg=audit(1414328435.135:10077): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414328435.135:10078): pid=18447 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=18447 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.34.60.204 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414328435.135:10079): pid=18447 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=18447 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.34.60.204 terminal=? res=success' >type=CRED_REFR msg=audit(1414328435.136:10080): pid=18447 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_END msg=audit(1414328435.427:10081): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1414328435.427:10082): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1414328435.587:10083): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_START msg=audit(1414328435.587:10084): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414328435.587:10085): pid=18451 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=18451 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.34.60.204 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414328435.587:10086): pid=18451 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=18451 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.34.60.204 terminal=? res=success' >type=CRED_REFR msg=audit(1414328435.587:10087): pid=18451 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_END msg=audit(1414328435.887:10088): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1414328435.887:10089): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1414328436.046:10090): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_START msg=audit(1414328436.046:10091): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414328436.046:10092): pid=18455 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=18455 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.34.60.204 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414328436.046:10093): pid=18455 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=18455 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.34.60.204 terminal=? res=success' >type=CRED_REFR msg=audit(1414328436.046:10094): pid=18455 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_END msg=audit(1414328436.384:10095): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1414328436.384:10096): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_CMD msg=audit(1414328436.439:10097): pid=18459 uid=993 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D6F6663746C2064756D702D666C6F77732062722D696E74207461626C653D3233 terminal=? res=success' >type=CRED_ACQ msg=audit(1414328436.439:10098): pid=18459 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1414328436.439:10099): pid=18459 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1414328436.501:10100): pid=18459 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1414328436.502:10101): pid=18459 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_LOGIN msg=audit(1414328436.530:10102): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_START msg=audit(1414328436.530:10103): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414328436.530:10104): pid=18462 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=18462 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.34.60.204 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414328436.530:10105): pid=18462 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=18462 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.34.60.204 terminal=? res=success' >type=CRED_REFR msg=audit(1414328436.531:10106): pid=18462 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_END msg=audit(1414328436.861:10107): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1414328436.861:10108): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1414328437.006:10109): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_START msg=audit(1414328437.006:10110): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414328437.007:10111): pid=18466 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=18466 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.34.60.204 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414328437.007:10112): pid=18466 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=18466 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.34.60.204 terminal=? res=success' >type=CRED_REFR msg=audit(1414328437.007:10113): pid=18466 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_END msg=audit(1414328437.339:10114): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1414328437.339:10115): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1414328437.482:10116): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_START msg=audit(1414328437.482:10117): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414328437.483:10118): pid=18470 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=18470 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.34.60.204 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414328437.483:10119): pid=18470 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=18470 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.34.60.204 terminal=? res=success' >type=CRED_REFR msg=audit(1414328437.483:10120): pid=18470 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_END msg=audit(1414328437.861:10121): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1414328437.861:10122): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1414328438.006:10123): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_START msg=audit(1414328438.006:10124): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414328438.006:10125): pid=18474 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=18474 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.34.60.204 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414328438.006:10126): pid=18474 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=18474 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.34.60.204 terminal=? res=success' >type=CRED_REFR msg=audit(1414328438.007:10127): pid=18474 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_END msg=audit(1414328438.345:10128): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1414328438.345:10129): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_CMD msg=audit(1414328438.441:10130): pid=18478 uid=993 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D6F6663746C2064756D702D666C6F77732062722D696E74207461626C653D3233 terminal=? res=success' >type=CRED_ACQ msg=audit(1414328438.441:10131): pid=18478 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1414328438.441:10132): pid=18478 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1414328438.501:10133): pid=18478 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1414328438.501:10134): pid=18478 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_LOGIN msg=audit(1414328438.841:10135): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_START msg=audit(1414328438.841:10136): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414328438.842:10137): pid=18481 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=18481 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.34.60.204 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414328438.842:10138): pid=18481 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=18481 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.34.60.204 terminal=? res=success' >type=CRED_REFR msg=audit(1414328438.842:10139): pid=18481 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_END msg=audit(1414328439.191:10140): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1414328439.191:10141): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1414328439.336:10142): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_START msg=audit(1414328439.336:10143): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414328439.337:10144): pid=18485 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=18485 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.34.60.204 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414328439.337:10145): pid=18485 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=18485 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.34.60.204 terminal=? res=success' >type=CRED_REFR msg=audit(1414328439.338:10146): pid=18485 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_END msg=audit(1414328439.648:10147): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1414328439.648:10148): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1414328439.808:10149): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_START msg=audit(1414328439.808:10150): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414328439.808:10151): pid=18489 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=18489 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.34.60.204 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414328439.808:10152): pid=18489 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=18489 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.34.60.204 terminal=? res=success' >type=CRED_REFR msg=audit(1414328439.809:10153): pid=18489 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_END msg=audit(1414328440.151:10154): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1414328440.151:10155): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1414328440.294:10156): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_START msg=audit(1414328440.294:10157): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414328440.295:10158): pid=18493 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=18493 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.34.60.204 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414328440.295:10159): pid=18493 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=18493 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.34.60.204 terminal=? res=success' >type=CRED_REFR msg=audit(1414328440.296:10160): pid=18493 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_CMD msg=audit(1414328440.442:10161): pid=18497 uid=993 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D6F6663746C2064756D702D666C6F77732062722D696E74207461626C653D3233 terminal=? res=success' >type=CRED_ACQ msg=audit(1414328440.442:10162): pid=18497 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1414328440.442:10163): pid=18497 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1414328440.501:10164): pid=18497 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1414328440.501:10165): pid=18497 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1414328440.636:10166): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1414328440.636:10167): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1414328440.779:10168): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_START msg=audit(1414328440.779:10169): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414328440.779:10170): pid=18500 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=18500 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.34.60.204 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414328440.779:10171): pid=18500 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=18500 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.34.60.204 terminal=? res=success' >type=CRED_REFR msg=audit(1414328440.780:10172): pid=18500 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_END msg=audit(1414328441.071:10173): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1414328441.071:10174): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1414328441.230:10175): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_START msg=audit(1414328441.230:10176): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414328441.230:10177): pid=18504 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=18504 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.34.60.204 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414328441.230:10178): pid=18504 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=18504 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.34.60.204 terminal=? res=success' >type=CRED_REFR msg=audit(1414328441.231:10179): pid=18504 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_END msg=audit(1414328441.561:10180): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1414328441.561:10181): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1414328441.705:10182): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_START msg=audit(1414328441.705:10183): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414328441.705:10184): pid=18508 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=18508 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.34.60.204 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414328441.705:10185): pid=18508 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=18508 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.34.60.204 terminal=? res=success' >type=CRED_REFR msg=audit(1414328441.705:10186): pid=18508 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_END msg=audit(1414328441.995:10187): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1414328441.995:10188): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1414328442.154:10189): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_START msg=audit(1414328442.154:10190): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414328442.154:10191): pid=18514 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=18514 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.34.60.204 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414328442.154:10192): pid=18514 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=18514 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.34.60.204 terminal=? res=success' >type=CRED_REFR msg=audit(1414328442.154:10193): pid=18514 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_CMD msg=audit(1414328442.443:10194): pid=18518 uid=993 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D6F6663746C2064756D702D666C6F77732062722D696E74207461626C653D3233 terminal=? res=success' >type=CRED_ACQ msg=audit(1414328442.443:10195): pid=18518 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1414328442.444:10196): pid=18518 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1414328442.481:10197): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1414328442.481:10198): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_END msg=audit(1414328442.503:10199): pid=18518 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1414328442.503:10200): pid=18518 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_LOGIN msg=audit(1414328442.627:10201): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_START msg=audit(1414328442.627:10202): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414328442.627:10203): pid=18521 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=18521 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.34.60.204 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414328442.627:10204): pid=18521 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=18521 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.34.60.204 terminal=? res=success' >type=CRED_REFR msg=audit(1414328442.627:10205): pid=18521 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_END msg=audit(1414328442.917:10206): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1414328442.917:10207): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1414328443.077:10208): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_START msg=audit(1414328443.077:10209): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414328443.077:10210): pid=18525 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=18525 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.34.60.204 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414328443.077:10211): pid=18525 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=18525 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.34.60.204 terminal=? res=success' >type=CRED_REFR msg=audit(1414328443.078:10212): pid=18525 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_END msg=audit(1414328443.406:10213): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1414328443.406:10214): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1414328443.551:10215): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_START msg=audit(1414328443.551:10216): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414328443.552:10217): pid=18529 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=18529 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.34.60.204 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414328443.552:10218): pid=18529 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=18529 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.34.60.204 terminal=? res=success' >type=CRED_REFR msg=audit(1414328443.552:10219): pid=18529 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_END msg=audit(1414328443.842:10220): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1414328443.842:10221): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1414328444.001:10222): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_START msg=audit(1414328444.001:10223): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414328444.001:10224): pid=18533 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=18533 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.34.60.204 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414328444.002:10225): pid=18533 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=18533 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.34.60.204 terminal=? res=success' >type=CRED_REFR msg=audit(1414328444.002:10226): pid=18533 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_CMD msg=audit(1414328444.071:10227): pid=18537 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D4320766773202D2D6E6F68656164696E6773202D2D756E69743D67202D6F206E616D652C73697A652C667265652C6C765F636F756E742C75756964202D2D736570617261746F72203A202D2D6E6F7375666669782063696E6465722D766F6C756D6573 terminal=? res=success' >type=CRED_ACQ msg=audit(1414328444.071:10228): pid=18537 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1414328444.072:10229): pid=18537 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1414328444.145:10230): pid=18537 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1414328444.146:10231): pid=18537 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1414328444.293:10232): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1414328444.293:10233): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_CMD msg=audit(1414328444.445:10234): pid=18540 uid=993 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D6F6663746C2064756D702D666C6F77732062722D696E74207461626C653D3233 terminal=? res=success' >type=CRED_ACQ msg=audit(1414328444.445:10235): pid=18540 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1414328444.446:10236): pid=18540 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_LOGIN msg=audit(1414328444.452:10237): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_START msg=audit(1414328444.452:10238): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414328444.453:10239): pid=18542 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=18542 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.34.60.204 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414328444.453:10240): pid=18542 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=18542 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.34.60.204 terminal=? res=success' >type=CRED_REFR msg=audit(1414328444.453:10241): pid=18542 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_END msg=audit(1414328444.508:10242): pid=18540 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1414328444.508:10243): pid=18540 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1414328444.802:10244): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="neutron-l3-agent" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1414328444.880:10245): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="neutron-dhcp-agent" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1414328444.880:10246): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="neutron-dhcp-agent" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1414328444.883:10247): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="neutron-dhcp-agent" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1414328444.896:10248): pid=11638 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1414328444.896:10249): pid=11638 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=AVC msg=audit(1414328444.941:10250): avc: denied { signal } for pid=6672 comm="keystone-all" scontext=system_u:system_r:keystone_t:s0 tcontext=system_u:system_r:keystone_t:s0 tclass=process >type=SYSCALL msg=audit(1414328444.941:10250): arch=c000003e syscall=62 success=yes exit=0 a0=1a17 a1=f a2=0 a3=7ffffce33cf0 items=0 ppid=1 pid=6672 auid=4294967295 uid=163 gid=163 euid=163 suid=163 fsuid=163 egid=163 sgid=163 fsgid=163 tty=(none) ses=4294967295 comm="keystone-all" exe="/usr/bin/python2.7" subj=system_u:system_r:keystone_t:s0 key=(null) >type=SERVICE_START msg=audit(1414328445.074:10251): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="openstack-nova-novncproxy" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1414328445.074:10252): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="openstack-nova-novncproxy" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1414328445.077:10253): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="openstack-nova-novncproxy" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1414328445.093:10254): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="openstack-glance-registry" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1414328445.093:10255): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="openstack-glance-registry" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1414328445.121:10256): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="openstack-cinder-volume" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1414328445.121:10257): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="openstack-cinder-volume" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1414328445.121:10258): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="openstack-swift-account-auditor" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1414328445.121:10259): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="openstack-swift-account-auditor" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1414328445.122:10260): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="openstack-swift-account-auditor" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1414328445.123:10261): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="openstack-cinder-volume" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1414328445.171:10262): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="openstack-swift-account-reaper" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1414328445.171:10263): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="openstack-swift-account-reaper" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1414328445.172:10264): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="openstack-swift-account-reaper" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1414328445.194:10265): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="openstack-swift-account-replicator" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1414328445.194:10266): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="openstack-swift-account-replicator" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1414328445.195:10267): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="openstack-swift-account-replicator" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1414328445.248:10268): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="openstack-keystone" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1414328445.248:10269): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="openstack-keystone" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1414328445.249:10270): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="openstack-cinder-api" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1414328445.249:10271): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="openstack-cinder-api" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1414328445.249:10272): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="openstack-cinder-scheduler" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1414328445.249:10273): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="openstack-cinder-scheduler" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1414328445.249:10274): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="openstack-nova-conductor" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1414328445.249:10275): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="openstack-nova-conductor" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1414328445.250:10276): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="openstack-nova-compute" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1414328445.250:10277): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="openstack-nova-compute" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1414328445.252:10278): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="openstack-cinder-scheduler" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1414328445.254:10279): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="openstack-cinder-api" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1414328445.260:10280): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="openstack-swift-account" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1414328445.276:10281): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="openstack-cinder-backup" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1414328445.276:10282): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="openstack-cinder-backup" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1414328445.290:10283): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="openstack-cinder-backup" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1414328445.296:10284): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="openstack-swift-container-replicator" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1414328445.296:10285): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="openstack-swift-container-replicator" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1414328445.297:10286): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="openstack-swift-container-replicator" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1414328445.310:10287): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="openstack-swift-container-updater" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1414328445.310:10288): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="openstack-swift-container-updater" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1414328445.322:10289): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="openstack-swift-container-updater" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1414328445.334:10290): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="openstack-swift-container-auditor" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1414328445.334:10291): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="openstack-swift-container-auditor" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1414328445.346:10292): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="openstack-swift-container-auditor" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1414328445.349:10293): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="openstack-swift-container" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1414328445.450:10294): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="openstack-glance-api" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1414328445.450:10295): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="openstack-glance-api" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1414328445.451:10296): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="openstack-nova-consoleauth" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1414328445.451:10297): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="openstack-nova-consoleauth" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1414328445.451:10298): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="openstack-swift-object-auditor" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1414328445.451:10299): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="openstack-swift-object-auditor" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1414328445.452:10300): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="openstack-swift-object-auditor" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1414328445.457:10301): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="openstack-nova-cert" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1414328445.457:10302): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="openstack-nova-cert" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1414328445.489:10303): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="openstack-swift-object" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1414328445.506:10304): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="openstack-nova-scheduler" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1414328445.506:10305): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="openstack-nova-scheduler" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1414328445.506:10306): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="openstack-swift-object-updater" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1414328445.506:10307): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="openstack-swift-object-updater" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1414328445.506:10308): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="openstack-swift-object-replicator" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1414328445.506:10309): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="openstack-swift-object-replicator" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1414328445.507:10310): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="openstack-swift-object-replicator" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1414328445.508:10311): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="openstack-swift-object-updater" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1414328445.540:10312): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="openstack-nova-api" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1414328445.540:10313): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="openstack-nova-api" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1414328445.554:10314): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="openstack-swift-proxy" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1414328446.122:10315): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="neutron-metadata-agent" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1414328446.122:10316): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="neutron-metadata-agent" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1414328446.125:10317): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="neutron-metadata-agent" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1414328446.614:10318): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="neutron-openvswitch-agent" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=SERVICE_START msg=audit(1414328446.935:10319): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="neutron-server" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1414328446.935:10320): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="neutron-server" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1414328448.535:10321): pid=18797 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D4320766773202D2D6E6F68656164696E6773202D6F206E616D652063696E6465722D766F6C756D6573 terminal=? res=success' >type=CRED_ACQ msg=audit(1414328448.581:10322): pid=18797 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1414328448.582:10323): pid=18797 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1414328448.960:10324): pid=18811 uid=993 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D767363746C202D2D74696D656F75743D3130206C6973742D6272 terminal=? res=success' >type=CRED_ACQ msg=audit(1414328448.961:10325): pid=18811 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1414328448.961:10326): pid=18811 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1414328449.042:10327): pid=18797 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1414328449.042:10328): pid=18797 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1414328449.046:10329): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="openstack-nova-conductor" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1414328449.116:10330): pid=18817 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D4320707673202D2D6E6F68656164696E6773202D2D756E69743D67202D6F2076675F6E616D652C6E616D652C73697A652C66726565202D2D736570617261746F72203A202D2D6E6F737566666978 terminal=? res=success' >type=CRED_ACQ msg=audit(1414328449.117:10331): pid=18817 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1414328449.117:10332): pid=18817 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1414328449.121:10333): pid=18818 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D4320766773202D2D6E6F68656164696E6773202D6F206E616D652063696E6465722D766F6C756D6573 terminal=? res=success' >type=CRED_ACQ msg=audit(1414328449.121:10334): pid=18818 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1414328449.121:10335): pid=18818 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1414328449.151:10336): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="openstack-nova-consoleauth" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1414328449.305:10337): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="openstack-nova-scheduler" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1414328449.314:10338): pid=18811 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1414328449.314:10339): pid=18811 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1414328449.337:10340): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="openstack-keystone" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1414328449.395:10341): pid=18826 uid=993 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D767363746C202D2D74696D656F75743D3130206C6973742D706F7274732062722D696E74 terminal=? res=success' >type=CRED_ACQ msg=audit(1414328449.395:10342): pid=18826 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1414328449.395:10343): pid=18826 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1414328449.519:10344): pid=18818 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1414328449.519:10345): pid=18818 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1414328449.598:10346): pid=18817 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1414328449.598:10347): pid=18817 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1414328449.604:10348): pid=18838 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D4320707673202D2D6E6F68656164696E6773202D2D756E69743D67202D6F2076675F6E616D652C6E616D652C73697A652C66726565202D2D736570617261746F72203A202D2D6E6F737566666978 terminal=? res=success' >type=CRED_ACQ msg=audit(1414328449.604:10349): pid=18838 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1414328449.616:10350): pid=18838 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1414328449.663:10351): pid=18841 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D4320766773202D2D6E6F68656164696E6773202D2D756E69743D67202D6F206E616D652C73697A652C667265652C6C765F636F756E742C75756964202D2D736570617261746F72203A202D2D6E6F7375666669782063696E6465722D766F6C756D6573 terminal=? res=success' >type=CRED_ACQ msg=audit(1414328449.663:10352): pid=18841 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1414328449.683:10353): pid=18841 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1414328449.763:10354): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="openstack-glance-registry" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1414328449.798:10355): pid=18826 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1414328449.798:10356): pid=18826 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1414328449.848:10357): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="openstack-nova-cert" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1414328449.879:10358): pid=18851 uid=993 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D767363746C202D2D74696D656F75743D31302067657420496E746572666163652070617463682D74756E2065787465726E616C5F696473 terminal=? res=success' >type=CRED_ACQ msg=audit(1414328449.879:10359): pid=18851 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1414328449.880:10360): pid=18851 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1414328449.931:10361): pid=18841 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1414328449.931:10362): pid=18841 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1414328450.033:10363): pid=18838 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1414328450.033:10364): pid=18838 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1414328450.085:10365): pid=18856 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D4320766773202D2D6E6F68656164696E6773202D2D756E69743D67202D6F206E616D652C73697A652C667265652C6C765F636F756E742C75756964202D2D736570617261746F72203A202D2D6E6F7375666669782063696E6465722D766F6C756D6573 terminal=? res=success' >type=CRED_ACQ msg=audit(1414328450.085:10366): pid=18856 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1414328450.085:10367): pid=18856 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1414328450.097:10368): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="openstack-glance-api" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1414328450.156:10369): pid=18851 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1414328450.156:10370): pid=18851 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1414328450.225:10371): pid=18863 uid=993 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D767363746C202D2D74696D656F75743D31302067657420496E746572666163652070617463682D74756E206F66706F7274 terminal=? res=success' >type=CRED_ACQ msg=audit(1414328450.225:10372): pid=18863 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1414328450.225:10373): pid=18863 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1414328450.428:10374): pid=18856 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1414328450.428:10375): pid=18856 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1414328450.490:10376): pid=18863 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1414328450.490:10377): pid=18863 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1414328450.550:10378): pid=18879 uid=993 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D767363746C202D2D74696D656F75743D3130206C6973742D706F7274732062722D6578 terminal=? res=success' >type=CRED_ACQ msg=audit(1414328450.550:10379): pid=18879 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1414328450.550:10380): pid=18879 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1414328450.893:10381): pid=18879 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1414328450.893:10382): pid=18879 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1414328450.939:10383): pid=18885 uid=993 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D767363746C202D2D74696D656F75743D3130206C6973742D706F7274732062722D696E74 terminal=? res=success' >type=CRED_ACQ msg=audit(1414328450.940:10384): pid=18885 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1414328450.940:10385): pid=18885 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1414328451.013:10386): pid=18887 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D4320766773202D2D6E6F68656164696E6773202D2D756E69743D67202D6F206E616D652C73697A652C667265652C6C765F636F756E742C75756964202D2D736570617261746F72203A202D2D6E6F7375666669782063696E6465722D766F6C756D6573 terminal=? res=success' >type=CRED_ACQ msg=audit(1414328451.013:10387): pid=18887 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1414328451.013:10388): pid=18887 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1414328451.106:10389): pid=18885 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1414328451.106:10390): pid=18885 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1414328451.116:10391): pid=18892 uid=993 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D767363746C202D2D74696D656F75743D31302067657420496E746572666163652070617463682D74756E2065787465726E616C5F696473 terminal=? res=success' >type=CRED_ACQ msg=audit(1414328451.117:10392): pid=18892 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1414328451.117:10393): pid=18892 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1414328451.229:10394): pid=18892 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1414328451.229:10395): pid=18892 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1414328451.264:10396): pid=18887 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1414328451.264:10397): pid=18887 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1414328451.265:10398): pid=18897 uid=993 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D767363746C202D2D74696D656F75743D31302067657420496E746572666163652070617463682D74756E206F66706F7274 terminal=? res=success' >type=CRED_ACQ msg=audit(1414328451.265:10399): pid=18897 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1414328451.266:10400): pid=18897 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1414328451.443:10401): pid=18897 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1414328451.443:10402): pid=18897 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1414328451.455:10403): pid=18907 uid=993 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D767363746C202D2D74696D656F75743D3130206C6973742D706F7274732062722D6578 terminal=? res=success' >type=CRED_ACQ msg=audit(1414328451.457:10404): pid=18907 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1414328451.457:10405): pid=18907 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1414328451.520:10406): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="neutron-server" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1414328451.566:10407): pid=18907 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1414328451.566:10408): pid=18907 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1414328451.628:10409): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="neutron-ovs-cleanup" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1414328451.628:10410): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="neutron-ovs-cleanup" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1414328451.737:10411): pid=18922 uid=162 auid=4294967295 ses=4294967295 subj=system_u:system_r:nova_api_t:s0 msg='cwd="/" cmd=6E6F76612D726F6F7477726170202F6574632F6E6F76612F726F6F74777261702E636F6E662069707461626C65732D73617665202D63 terminal=? res=success' >type=CRED_ACQ msg=audit(1414328451.737:10412): pid=18922 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:nova_api_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1414328451.738:10413): pid=18922 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:nova_api_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1414328451.802:10414): pid=18922 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:nova_api_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1414328451.802:10415): pid=18922 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:nova_api_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1414328451.818:10416): pid=18930 uid=162 auid=4294967295 ses=4294967295 subj=system_u:system_r:nova_api_t:s0 msg='cwd="/" cmd=6E6F76612D726F6F7477726170202F6574632F6E6F76612F726F6F74777261702E636F6E662069707461626C65732D726573746F7265202D63 terminal=? res=success' >type=CRED_ACQ msg=audit(1414328451.818:10417): pid=18930 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:nova_api_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1414328451.818:10418): pid=18930 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:nova_api_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=NETFILTER_CFG msg=audit(1414328451.871:10419): table=mangle family=2 entries=10 >type=SYSCALL msg=audit(1414328451.871:10419): arch=c000003e syscall=54 success=yes exit=0 a0=3 a1=0 a2=40 a3=a2ea70 items=0 ppid=18931 pid=18932 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=NETFILTER_CFG msg=audit(1414328451.871:10420): table=nat family=2 entries=26 >type=SYSCALL msg=audit(1414328451.871:10420): arch=c000003e syscall=54 success=yes exit=0 a0=3 a1=0 a2=40 a3=a30360 items=0 ppid=18931 pid=18932 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=NETFILTER_CFG msg=audit(1414328451.873:10421): table=filter family=2 entries=55 >type=SYSCALL msg=audit(1414328451.873:10421): arch=c000003e syscall=54 success=yes exit=0 a0=3 a1=0 a2=40 a3=a38b90 items=0 ppid=18931 pid=18932 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=USER_END msg=audit(1414328451.878:10422): pid=18930 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:nova_api_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1414328451.878:10423): pid=18930 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:nova_api_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1414328451.902:10424): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="openstack-nova-api" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1414328452.130:10425): pid=18937 uid=993 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D767363746C202D2D74696D656F75743D3130206C6973742D6272 terminal=? res=success' >type=CRED_ACQ msg=audit(1414328452.131:10426): pid=18937 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1414328452.131:10427): pid=18937 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1414328452.190:10428): pid=18937 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1414328452.190:10429): pid=18937 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1414328452.198:10430): pid=18942 uid=993 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D767363746C202D2D74696D656F75743D3130206C6973742D706F7274732062722D696E74 terminal=? res=success' >type=CRED_ACQ msg=audit(1414328452.198:10431): pid=18942 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1414328452.198:10432): pid=18942 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1414328452.258:10433): pid=18942 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1414328452.258:10434): pid=18942 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1414328452.267:10435): pid=18945 uid=993 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D767363746C202D2D74696D656F75743D31302067657420496E746572666163652070617463682D74756E2065787465726E616C5F696473 terminal=? res=success' >type=CRED_ACQ msg=audit(1414328452.267:10436): pid=18945 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1414328452.267:10437): pid=18945 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1414328452.342:10438): pid=18945 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1414328452.342:10439): pid=18945 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1414328452.350:10440): pid=18948 uid=993 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D767363746C202D2D74696D656F75743D31302067657420496E746572666163652070617463682D74756E206F66706F7274 terminal=? res=success' >type=CRED_ACQ msg=audit(1414328452.351:10441): pid=18948 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1414328452.351:10442): pid=18948 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1414328452.411:10443): pid=18948 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1414328452.411:10444): pid=18948 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1414328452.419:10445): pid=18951 uid=993 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D767363746C202D2D74696D656F75743D3130206C6973742D706F7274732062722D6578 terminal=? res=success' >type=CRED_ACQ msg=audit(1414328452.419:10446): pid=18951 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1414328452.420:10447): pid=18951 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1414328452.478:10448): pid=18951 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1414328452.478:10449): pid=18951 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1414328452.487:10450): pid=18954 uid=993 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D767363746C202D2D74696D656F75743D3130206C6973742D706F7274732062722D696E74 terminal=? res=success' >type=CRED_ACQ msg=audit(1414328452.487:10451): pid=18954 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1414328452.488:10452): pid=18954 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1414328452.547:10453): pid=18954 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1414328452.547:10454): pid=18954 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1414328452.555:10455): pid=18957 uid=993 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D767363746C202D2D74696D656F75743D31302067657420496E746572666163652070617463682D74756E2065787465726E616C5F696473 terminal=? res=success' >type=CRED_ACQ msg=audit(1414328452.555:10456): pid=18957 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1414328452.556:10457): pid=18957 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1414328452.614:10458): pid=18957 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1414328452.614:10459): pid=18957 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1414328452.623:10460): pid=18960 uid=993 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D767363746C202D2D74696D656F75743D31302067657420496E746572666163652070617463682D74756E206F66706F7274 terminal=? res=success' >type=CRED_ACQ msg=audit(1414328452.623:10461): pid=18960 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1414328452.623:10462): pid=18960 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1414328452.681:10463): pid=18960 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1414328452.681:10464): pid=18960 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1414328452.689:10465): pid=18963 uid=993 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D767363746C202D2D74696D656F75743D3130206C6973742D706F7274732062722D6578 terminal=? res=success' >type=CRED_ACQ msg=audit(1414328452.689:10466): pid=18963 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1414328452.690:10467): pid=18963 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1414328452.747:10468): pid=18963 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1414328452.748:10469): pid=18963 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1414328452.785:10470): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="neutron-ovs-cleanup" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1414328452.787:10471): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="neutron-openvswitch-agent" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1414328453.245:10472): pid=18980 uid=993 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D767363746C202D2D74696D656F75743D3130202D2D202D2D6D61792D6578697374206164642D62722062722D696E74 terminal=? res=success' >type=CRED_ACQ msg=audit(1414328453.245:10473): pid=18980 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1414328453.245:10474): pid=18980 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1414328453.307:10475): pid=18980 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1414328453.307:10476): pid=18980 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1414328453.315:10477): pid=18984 uid=993 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D767363746C202D2D74696D656F75743D3130202D2D207365742D6661696C2D6D6F64652062722D696E7420736563757265 terminal=? res=success' >type=CRED_ACQ msg=audit(1414328453.316:10478): pid=18984 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1414328453.316:10479): pid=18984 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1414328453.382:10480): pid=18984 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1414328453.382:10481): pid=18984 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1414328453.390:10482): pid=18987 uid=993 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D767363746C202D2D74696D656F75743D3130202D2D202D2D69662D6578697374732064656C2D706F72742062722D696E742070617463682D74756E terminal=? res=success' >type=CRED_ACQ msg=audit(1414328453.391:10483): pid=18987 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1414328453.391:10484): pid=18987 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1414328453.454:10485): pid=18987 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1414328453.454:10486): pid=18987 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1414328453.462:10487): pid=18990 uid=993 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D6F6663746C2064656C2D666C6F77732062722D696E74 terminal=? res=success' >type=CRED_ACQ msg=audit(1414328453.463:10488): pid=18990 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1414328453.463:10489): pid=18990 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1414328453.526:10490): pid=18990 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1414328453.526:10491): pid=18990 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1414328453.535:10492): pid=18993 uid=993 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D6F6663746C206164642D666C6F77732062722D696E74202D terminal=? res=success' >type=CRED_ACQ msg=audit(1414328453.535:10493): pid=18993 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1414328453.535:10494): pid=18993 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1414328453.608:10495): pid=18993 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1414328453.608:10496): pid=18993 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1414328453.618:10497): pid=18996 uid=993 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D6F6663746C206164642D666C6F77732062722D696E74202D terminal=? res=success' >type=CRED_ACQ msg=audit(1414328453.618:10498): pid=18996 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1414328453.618:10499): pid=18996 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1414328453.621:10500): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="openstack-nova-compute" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1414328453.679:10501): pid=18996 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1414328453.679:10502): pid=18996 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1414328453.809:10503): pid=19023 uid=993 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D767363746C202D2D74696D656F75743D3130206C6973742D6272 terminal=? res=success' >type=CRED_ACQ msg=audit(1414328453.809:10504): pid=19023 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1414328453.809:10505): pid=19023 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1414328453.874:10506): pid=19023 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1414328453.874:10507): pid=19023 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1414328453.883:10508): pid=19027 uid=993 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D767363746C202D2D74696D656F75743D3130202D2D202D2D69662D6578697374732064656C2D62722062722D74756E terminal=? res=success' >type=CRED_ACQ msg=audit(1414328453.883:10509): pid=19027 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1414328453.883:10510): pid=19027 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=ANOM_PROMISCUOUS msg=audit(1414328453.942:10511): dev=br-tun prom=0 old_prom=256 auid=4294967295 uid=0 gid=0 ses=4294967295 >type=SYSCALL msg=audit(1414328453.942:10511): arch=c000003e syscall=46 success=yes exit=32 a0=10 a1=7fff80662300 a2=0 a3=0 items=0 ppid=11281 pid=11282 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ovs-vswitchd" exe="/usr/sbin/ovs-vswitchd" subj=system_u:system_r:openvswitch_t:s0 key=(null) >type=USER_END msg=audit(1414328453.968:10512): pid=19027 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1414328453.968:10513): pid=19027 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1414328453.977:10514): pid=19049 uid=993 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D767363746C202D2D74696D656F75743D3130202D2D202D2D6D61792D6578697374206164642D62722062722D74756E terminal=? res=success' >type=CRED_ACQ msg=audit(1414328453.977:10515): pid=19049 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1414328453.977:10516): pid=19049 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=ANOM_PROMISCUOUS msg=audit(1414328454.034:10517): dev=br-tun prom=256 old_prom=0 auid=4294967295 uid=0 gid=0 ses=4294967295 >type=SYSCALL msg=audit(1414328454.034:10517): arch=c000003e syscall=46 success=yes exit=52 a0=10 a1=7fff806620f0 a2=0 a3=0 items=0 ppid=11281 pid=11282 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ovs-vswitchd" exe="/usr/sbin/ovs-vswitchd" subj=system_u:system_r:openvswitch_t:s0 key=(null) >type=USER_END msg=audit(1414328454.042:10518): pid=19049 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1414328454.042:10519): pid=19049 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1414328454.051:10520): pid=19058 uid=993 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D767363746C202D2D74696D656F75743D3130206164642D706F72742062722D696E742070617463682D74756E202D2D2073657420496E746572666163652070617463682D74756E20747970653D7061746368206F7074696F6E733A706565723D70617463682D696E74 terminal=? res=success' >type=CRED_ACQ msg=audit(1414328454.051:10521): pid=19058 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1414328454.052:10522): pid=19058 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1414328454.113:10523): pid=19058 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1414328454.113:10524): pid=19058 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1414328454.121:10525): pid=19061 uid=993 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D767363746C202D2D74696D656F75743D31302067657420496E746572666163652070617463682D74756E206F66706F7274 terminal=? res=success' >type=CRED_ACQ msg=audit(1414328454.122:10526): pid=19061 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1414328454.122:10527): pid=19061 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1414328454.180:10528): pid=19061 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1414328454.180:10529): pid=19061 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1414328454.189:10530): pid=19064 uid=993 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D767363746C202D2D74696D656F75743D3130206164642D706F72742062722D74756E2070617463682D696E74202D2D2073657420496E746572666163652070617463682D696E7420747970653D7061746368206F7074696F6E733A706565723D70617463682D74756E terminal=? res=success' >type=CRED_ACQ msg=audit(1414328454.189:10531): pid=19064 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1414328454.189:10532): pid=19064 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1414328454.250:10533): pid=19064 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1414328454.250:10534): pid=19064 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1414328454.259:10535): pid=19067 uid=993 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D767363746C202D2D74696D656F75743D31302067657420496E746572666163652070617463682D696E74206F66706F7274 terminal=? res=success' >type=CRED_ACQ msg=audit(1414328454.259:10536): pid=19067 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1414328454.259:10537): pid=19067 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1414328454.320:10538): pid=19067 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1414328454.320:10539): pid=19067 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1414328454.329:10540): pid=19070 uid=993 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D6F6663746C2064656C2D666C6F77732062722D74756E terminal=? res=success' >type=CRED_ACQ msg=audit(1414328454.330:10541): pid=19070 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1414328454.330:10542): pid=19070 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1414328454.391:10543): pid=19070 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1414328454.391:10544): pid=19070 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1414328454.400:10545): pid=19073 uid=993 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D6F6663746C206164642D666C6F77732062722D74756E202D terminal=? res=success' >type=CRED_ACQ msg=audit(1414328454.400:10546): pid=19073 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1414328454.400:10547): pid=19073 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1414328454.459:10548): pid=19073 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1414328454.459:10549): pid=19073 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1414328454.468:10550): pid=19076 uid=993 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D6F6663746C206164642D666C6F77732062722D74756E202D terminal=? res=success' >type=CRED_ACQ msg=audit(1414328454.468:10551): pid=19076 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1414328454.468:10552): pid=19076 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1414328454.526:10553): pid=19076 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1414328454.526:10554): pid=19076 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1414328454.535:10555): pid=19079 uid=993 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D6F6663746C206164642D666C6F77732062722D74756E202D terminal=? res=success' >type=CRED_ACQ msg=audit(1414328454.535:10556): pid=19079 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1414328454.535:10557): pid=19079 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1414328454.595:10558): pid=19079 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1414328454.595:10559): pid=19079 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1414328454.604:10560): pid=19082 uid=993 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D6F6663746C206164642D666C6F77732062722D74756E202D terminal=? res=success' >type=CRED_ACQ msg=audit(1414328454.604:10561): pid=19082 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1414328454.604:10562): pid=19082 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1414328454.664:10563): pid=19082 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1414328454.664:10564): pid=19082 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1414328454.672:10565): pid=19085 uid=993 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D6F6663746C206164642D666C6F77732062722D74756E202D terminal=? res=success' >type=CRED_ACQ msg=audit(1414328454.673:10566): pid=19085 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1414328454.673:10567): pid=19085 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1414328454.731:10568): pid=19085 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1414328454.731:10569): pid=19085 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1414328454.741:10570): pid=19088 uid=993 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D6F6663746C206164642D666C6F77732062722D74756E202D terminal=? res=success' >type=CRED_ACQ msg=audit(1414328454.742:10571): pid=19088 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1414328454.742:10572): pid=19088 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1414328454.807:10573): pid=19088 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1414328454.808:10574): pid=19088 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1414328454.816:10575): pid=19091 uid=993 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D6F6663746C206164642D666C6F77732062722D74756E202D terminal=? res=success' >type=CRED_ACQ msg=audit(1414328454.816:10576): pid=19091 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1414328454.816:10577): pid=19091 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1414328454.881:10578): pid=19091 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1414328454.881:10579): pid=19091 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1414328454.890:10580): pid=19094 uid=993 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D6F6663746C206164642D666C6F77732062722D74756E202D terminal=? res=success' >type=CRED_ACQ msg=audit(1414328454.890:10581): pid=19094 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1414328454.890:10582): pid=19094 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1414328454.955:10583): pid=19094 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1414328454.955:10584): pid=19094 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1414328454.964:10585): pid=19097 uid=993 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D6F6663746C206164642D666C6F77732062722D74756E202D terminal=? res=success' >type=CRED_ACQ msg=audit(1414328454.964:10586): pid=19097 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1414328454.964:10587): pid=19097 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1414328455.024:10588): pid=19097 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1414328455.024:10589): pid=19097 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1414328455.033:10590): pid=19100 uid=993 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D767363746C202D2D74696D656F75743D3130206C6973742D6272 terminal=? res=success' >type=CRED_ACQ msg=audit(1414328455.033:10591): pid=19100 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1414328455.033:10592): pid=19100 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1414328455.092:10593): pid=19100 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1414328455.092:10594): pid=19100 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1414328455.100:10595): pid=19103 uid=993 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D767363746C202D2D74696D656F75743D322062722D6765742D65787465726E616C2D69642062722D6578206272696467652D6964 terminal=? res=success' >type=CRED_ACQ msg=audit(1414328455.100:10596): pid=19103 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1414328455.101:10597): pid=19103 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1414328455.159:10598): pid=19103 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1414328455.159:10599): pid=19103 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1414328455.208:10600): pid=19106 uid=993 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F767364622D636C69656E74206D6F6E69746F7220496E74657266616365206E616D652C6F66706F7274202D2D666F726D61743D6A736F6E terminal=? res=success' >type=CRED_ACQ msg=audit(1414328455.208:10601): pid=19106 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1414328455.209:10602): pid=19106 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1414328455.212:10603): pid=19107 uid=993 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D6F6663746C2064756D702D666C6F77732062722D696E74207461626C653D3233 terminal=? res=success' >type=CRED_ACQ msg=audit(1414328455.212:10604): pid=19107 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1414328455.212:10605): pid=19107 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1414328455.271:10606): pid=19107 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1414328455.271:10607): pid=19107 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1414328455.303:10608): pid=19112 uid=993 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D767363746C202D2D74696D656F75743D3130206C6973742D706F7274732062722D696E74 terminal=? res=success' >type=CRED_ACQ msg=audit(1414328455.303:10609): pid=19112 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1414328455.303:10610): pid=19112 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1414328455.362:10611): pid=19112 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1414328455.362:10612): pid=19112 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1414328455.370:10613): pid=19115 uid=993 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D767363746C202D2D74696D656F75743D3130202D2D666F726D61743D6A736F6E202D2D202D2D636F6C756D6E733D6E616D652C65787465726E616C5F6964732C6F66706F7274206C69737420496E74657266616365 terminal=? res=success' >type=CRED_ACQ msg=audit(1414328455.370:10614): pid=19115 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1414328455.370:10615): pid=19115 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1414328455.428:10616): pid=19115 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1414328455.429:10617): pid=19115 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1414328455.437:10618): pid=19118 uid=993 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D767363746C202D2D74696D656F75743D3130206C6973742D706F7274732062722D696E74 terminal=? res=success' >type=CRED_ACQ msg=audit(1414328455.437:10619): pid=19118 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1414328455.438:10620): pid=19118 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1414328455.497:10621): pid=19118 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1414328455.497:10622): pid=19118 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1414328455.505:10623): pid=19121 uid=993 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D767363746C202D2D74696D656F75743D3130202D2D666F726D61743D6A736F6E202D2D202D2D636F6C756D6E733D6E616D652C746167206C69737420506F7274 terminal=? res=success' >type=CRED_ACQ msg=audit(1414328455.506:10624): pid=19121 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1414328455.506:10625): pid=19121 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1414328455.564:10626): pid=19121 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1414328455.564:10627): pid=19121 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1414328457.213:10628): pid=19124 uid=993 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D6F6663746C2064756D702D666C6F77732062722D696E74207461626C653D3233 terminal=? res=success' >type=CRED_ACQ msg=audit(1414328457.214:10629): pid=19124 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1414328457.214:10630): pid=19124 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1414328457.273:10631): pid=19124 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1414328457.273:10632): pid=19124 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1414328459.214:10633): pid=19127 uid=993 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D6F6663746C2064756D702D666C6F77732062722D696E74207461626C653D3233 terminal=? res=success' >type=CRED_ACQ msg=audit(1414328459.214:10634): pid=19127 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1414328459.214:10635): pid=19127 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1414328459.274:10636): pid=19127 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1414328459.274:10637): pid=19127 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1414328461.216:10638): pid=19130 uid=993 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D6F6663746C2064756D702D666C6F77732062722D696E74207461626C653D3233 terminal=? res=success' >type=CRED_ACQ msg=audit(1414328461.216:10639): pid=19130 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1414328461.217:10640): pid=19130 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1414328461.275:10641): pid=19130 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1414328461.276:10642): pid=19130 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1414328461.516:10644): pid=19133 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1414328461.516:10643): pid=19134 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="keystone" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1414328461.516:10646): pid=19134 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="keystone" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1414328461.516:10645): pid=19133 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1414328461.517:10647): pid=19133 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=343 res=1 >type=LOGIN msg=audit(1414328461.517:10648): pid=19134 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=163 old-ses=4294967295 ses=344 res=1 >type=USER_START msg=audit(1414328461.537:10649): pid=19133 uid=0 auid=0 ses=343 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_START msg=audit(1414328461.537:10650): pid=19134 uid=0 auid=163 ses=344 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="keystone" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1414328461.537:10651): pid=19133 uid=0 auid=0 ses=343 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1414328461.537:10652): pid=19134 uid=0 auid=163 ses=344 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="keystone" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1414328461.567:10653): pid=19133 uid=0 auid=0 ses=343 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1414328461.569:10654): pid=19133 uid=0 auid=0 ses=343 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1414328462.180:10655): pid=19134 uid=0 auid=163 ses=344 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="keystone" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1414328462.182:10656): pid=19134 uid=0 auid=163 ses=344 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="keystone" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_CMD msg=audit(1414328463.218:10657): pid=19170 uid=993 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D6F6663746C2064756D702D666C6F77732062722D696E74207461626C653D3233 terminal=? res=success' >type=CRED_ACQ msg=audit(1414328463.218:10658): pid=19170 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1414328463.219:10659): pid=19170 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1414328463.277:10660): pid=19170 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1414328463.277:10661): pid=19170 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1414328463.913:10662): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1414328463.913:10663): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1414328464.054:10664): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_START msg=audit(1414328464.054:10665): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414328464.054:10666): pid=19175 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=19175 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.34.60.204 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414328464.054:10667): pid=19175 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=19175 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.34.60.204 terminal=? res=success' >type=CRED_REFR msg=audit(1414328464.055:10668): pid=19175 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_CMD msg=audit(1414328465.221:10669): pid=19254 uid=993 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D6F6663746C2064756D702D666C6F77732062722D696E74207461626C653D3233 terminal=? res=success' >type=CRED_ACQ msg=audit(1414328465.221:10670): pid=19254 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1414328465.222:10671): pid=19254 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1414328465.280:10672): pid=19254 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1414328465.280:10673): pid=19254 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1414328465.822:10674): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1414328465.822:10675): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1414328465.981:10676): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_START msg=audit(1414328465.981:10677): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414328465.982:10678): pid=19363 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=19363 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.34.60.204 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414328465.982:10679): pid=19363 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=19363 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.34.60.204 terminal=? res=success' >type=CRED_REFR msg=audit(1414328465.982:10680): pid=19363 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_END msg=audit(1414328466.280:10681): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1414328466.281:10682): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1414328466.423:10683): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_START msg=audit(1414328466.423:10684): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414328466.423:10685): pid=19367 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=19367 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.34.60.204 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414328466.424:10686): pid=19367 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=19367 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.34.60.204 terminal=? res=success' >type=CRED_REFR msg=audit(1414328466.424:10687): pid=19367 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_END msg=audit(1414328466.775:10688): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1414328466.775:10689): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1414328466.908:10690): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_START msg=audit(1414328466.909:10691): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414328466.909:10692): pid=19371 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=19371 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.34.60.204 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414328466.909:10693): pid=19371 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=19371 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.34.60.204 terminal=? res=success' >type=CRED_REFR msg=audit(1414328466.910:10694): pid=19371 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_END msg=audit(1414328467.200:10695): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1414328467.200:10696): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_CMD msg=audit(1414328467.221:10697): pid=19375 uid=993 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D6F6663746C2064756D702D666C6F77732062722D696E74207461626C653D3233 terminal=? res=success' >type=CRED_ACQ msg=audit(1414328467.221:10698): pid=19375 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1414328467.222:10699): pid=19375 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1414328467.280:10700): pid=19375 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1414328467.280:10701): pid=19375 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_LOGIN msg=audit(1414328467.348:10702): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_START msg=audit(1414328467.349:10703): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414328467.349:10704): pid=19378 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=19378 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.34.60.204 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414328467.349:10705): pid=19378 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=19378 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.34.60.204 terminal=? res=success' >type=CRED_REFR msg=audit(1414328467.350:10706): pid=19378 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_END msg=audit(1414328467.636:10707): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1414328467.636:10708): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1414328467.780:10709): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_START msg=audit(1414328467.780:10710): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414328467.780:10711): pid=19382 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=19382 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.34.60.204 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414328467.780:10712): pid=19382 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=19382 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.34.60.204 terminal=? res=success' >type=CRED_REFR msg=audit(1414328467.780:10713): pid=19382 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_END msg=audit(1414328468.068:10714): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1414328468.068:10715): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1414328468.210:10716): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_START msg=audit(1414328468.210:10717): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414328468.210:10718): pid=19386 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=19386 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.34.60.204 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414328468.211:10719): pid=19386 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=19386 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.34.60.204 terminal=? res=success' >type=CRED_REFR msg=audit(1414328468.211:10720): pid=19386 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_CMD msg=audit(1414328469.223:10721): pid=19390 uid=993 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D6F6663746C2064756D702D666C6F77732062722D696E74207461626C653D3233 terminal=? res=success' >type=CRED_ACQ msg=audit(1414328469.223:10722): pid=19390 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1414328469.223:10723): pid=19390 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1414328469.284:10724): pid=19390 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1414328469.284:10725): pid=19390 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1414328471.224:10726): pid=19393 uid=993 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D6F6663746C2064756D702D666C6F77732062722D696E74207461626C653D3233 terminal=? res=success' >type=CRED_ACQ msg=audit(1414328471.224:10727): pid=19393 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1414328471.224:10728): pid=19393 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1414328471.287:10729): pid=19393 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1414328471.287:10730): pid=19393 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1414328473.227:10731): pid=19398 uid=993 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D6F6663746C2064756D702D666C6F77732062722D696E74207461626C653D3233 terminal=? res=success' >type=CRED_ACQ msg=audit(1414328473.227:10732): pid=19398 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1414328473.227:10733): pid=19398 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1414328473.286:10734): pid=19398 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1414328473.286:10735): pid=19398 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1414328475.226:10736): pid=19401 uid=993 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D6F6663746C2064756D702D666C6F77732062722D696E74207461626C653D3233 terminal=? res=success' >type=CRED_ACQ msg=audit(1414328475.226:10737): pid=19401 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1414328475.227:10738): pid=19401 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1414328475.288:10739): pid=19401 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1414328475.288:10740): pid=19401 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1414328476.823:10741): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1414328476.823:10742): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1414328476.968:10743): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_START msg=audit(1414328476.968:10744): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414328476.968:10745): pid=19404 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=19404 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.34.60.204 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414328476.968:10746): pid=19404 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=19404 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.34.60.204 terminal=? res=success' >type=CRED_REFR msg=audit(1414328476.969:10747): pid=19404 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_CMD msg=audit(1414328477.229:10748): pid=19409 uid=993 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D6F6663746C2064756D702D666C6F77732062722D696E74207461626C653D3233 terminal=? res=success' >type=CRED_ACQ msg=audit(1414328477.229:10749): pid=19409 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1414328477.229:10750): pid=19409 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1414328477.290:10751): pid=19409 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1414328477.290:10752): pid=19409 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1414328477.429:10753): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1414328477.429:10754): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1414328477.588:10755): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_START msg=audit(1414328477.588:10756): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414328477.588:10757): pid=19418 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=19418 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.34.60.204 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414328477.588:10758): pid=19418 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=19418 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.34.60.204 terminal=? res=success' >type=CRED_REFR msg=audit(1414328477.589:10759): pid=19418 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_END msg=audit(1414328479.104:10760): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1414328479.104:10761): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_CMD msg=audit(1414328479.231:10762): pid=19422 uid=993 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D6F6663746C2064756D702D666C6F77732062722D696E74207461626C653D3233 terminal=? res=success' >type=CRED_ACQ msg=audit(1414328479.231:10763): pid=19422 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1414328479.231:10764): pid=19422 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_LOGIN msg=audit(1414328479.235:10765): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_START msg=audit(1414328479.235:10766): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414328479.237:10767): pid=19424 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=19424 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.34.60.204 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414328479.237:10768): pid=19424 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=19424 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.34.60.204 terminal=? res=success' >type=CRED_REFR msg=audit(1414328479.237:10769): pid=19424 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_END msg=audit(1414328479.303:10770): pid=19422 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1414328479.303:10771): pid=19422 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1414328481.232:10772): pid=19460 uid=993 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D6F6663746C2064756D702D666C6F77732062722D696E74207461626C653D3233 terminal=? res=success' >type=CRED_ACQ msg=audit(1414328481.233:10773): pid=19460 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1414328481.233:10774): pid=19460 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1414328481.293:10775): pid=19460 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1414328481.293:10776): pid=19460 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1414328481.314:10777): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1414328481.314:10778): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1414328481.457:10779): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_START msg=audit(1414328481.457:10780): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414328481.458:10781): pid=19463 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=19463 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.34.60.204 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414328481.458:10782): pid=19463 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=19463 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.34.60.204 terminal=? res=success' >type=CRED_REFR msg=audit(1414328481.459:10783): pid=19463 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_END msg=audit(1414328482.743:10784): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1414328482.743:10785): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1414328482.888:10786): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_START msg=audit(1414328482.888:10787): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414328482.888:10788): pid=19485 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=19485 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.34.60.204 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414328482.888:10789): pid=19485 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=19485 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.34.60.204 terminal=? res=success' >type=CRED_REFR msg=audit(1414328482.889:10790): pid=19485 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_CMD msg=audit(1414328483.233:10791): pid=19489 uid=993 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D6F6663746C2064756D702D666C6F77732062722D696E74207461626C653D3233 terminal=? res=success' >type=CRED_ACQ msg=audit(1414328483.234:10792): pid=19489 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1414328483.234:10793): pid=19489 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1414328483.293:10794): pid=19489 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1414328483.293:10795): pid=19489 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1414328485.235:10796): pid=19492 uid=993 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D6F6663746C2064756D702D666C6F77732062722D696E74207461626C653D3233 terminal=? res=success' >type=CRED_ACQ msg=audit(1414328485.235:10797): pid=19492 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1414328485.235:10798): pid=19492 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1414328485.295:10799): pid=19492 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1414328485.295:10800): pid=19492 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1414328487.236:10801): pid=19495 uid=993 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D6F6663746C2064756D702D666C6F77732062722D696E74207461626C653D3233 terminal=? res=success' >type=CRED_ACQ msg=audit(1414328487.236:10802): pid=19495 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1414328487.236:10803): pid=19495 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1414328487.294:10804): pid=19495 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1414328487.294:10805): pid=19495 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1414328489.238:10806): pid=19498 uid=993 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D6F6663746C2064756D702D666C6F77732062722D696E74207461626C653D3233 terminal=? res=success' >type=CRED_ACQ msg=audit(1414328489.238:10807): pid=19498 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1414328489.238:10808): pid=19498 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1414328489.302:10809): pid=19498 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1414328489.302:10810): pid=19498 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1414328491.239:10811): pid=19501 uid=993 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D6F6663746C2064756D702D666C6F77732062722D696E74207461626C653D3233 terminal=? res=success' >type=CRED_ACQ msg=audit(1414328491.239:10812): pid=19501 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1414328491.239:10813): pid=19501 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1414328491.299:10814): pid=19501 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1414328491.299:10815): pid=19501 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1414328493.242:10816): pid=19506 uid=993 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D6F6663746C2064756D702D666C6F77732062722D696E74207461626C653D3233 terminal=? res=success' >type=CRED_ACQ msg=audit(1414328493.242:10817): pid=19506 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1414328493.243:10818): pid=19506 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1414328493.306:10819): pid=19506 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1414328493.306:10820): pid=19506 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1414328495.242:10821): pid=19509 uid=993 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D6F6663746C2064756D702D666C6F77732062722D696E74207461626C653D3233 terminal=? res=success' >type=CRED_ACQ msg=audit(1414328495.242:10822): pid=19509 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1414328495.243:10823): pid=19509 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1414328495.301:10824): pid=19509 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1414328495.301:10825): pid=19509 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1414328497.244:10826): pid=19512 uid=993 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D6F6663746C2064756D702D666C6F77732062722D696E74207461626C653D3233 terminal=? res=success' >type=CRED_ACQ msg=audit(1414328497.244:10827): pid=19512 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1414328497.244:10828): pid=19512 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1414328497.303:10829): pid=19512 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1414328497.303:10830): pid=19512 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1414328499.246:10831): pid=19515 uid=993 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D6F6663746C2064756D702D666C6F77732062722D696E74207461626C653D3233 terminal=? res=success' >type=CRED_ACQ msg=audit(1414328499.246:10832): pid=19515 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1414328499.247:10833): pid=19515 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1414328499.306:10834): pid=19515 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1414328499.306:10835): pid=19515 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1414328501.247:10836): pid=19518 uid=993 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D6F6663746C2064756D702D666C6F77732062722D696E74207461626C653D3233 terminal=? res=success' >type=CRED_ACQ msg=audit(1414328501.247:10837): pid=19518 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1414328501.248:10838): pid=19518 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1414328501.305:10839): pid=19518 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1414328501.306:10840): pid=19518 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1414328503.249:10841): pid=19523 uid=993 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D6F6663746C2064756D702D666C6F77732062722D696E74207461626C653D3233 terminal=? res=success' >type=CRED_ACQ msg=audit(1414328503.250:10842): pid=19523 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1414328503.250:10843): pid=19523 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1414328503.309:10844): pid=19523 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1414328503.309:10845): pid=19523 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1414328505.251:10846): pid=19526 uid=993 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D6F6663746C2064756D702D666C6F77732062722D696E74207461626C653D3233 terminal=? res=success' >type=CRED_ACQ msg=audit(1414328505.252:10847): pid=19526 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1414328505.252:10848): pid=19526 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1414328505.311:10849): pid=19526 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1414328505.311:10850): pid=19526 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1414328507.253:10851): pid=19529 uid=993 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D6F6663746C2064756D702D666C6F77732062722D696E74207461626C653D3233 terminal=? res=success' >type=CRED_ACQ msg=audit(1414328507.253:10852): pid=19529 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1414328507.253:10853): pid=19529 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1414328507.313:10854): pid=19529 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1414328507.313:10855): pid=19529 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1414328509.254:10856): pid=19538 uid=993 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D6F6663746C2064756D702D666C6F77732062722D696E74207461626C653D3233 terminal=? res=success' >type=CRED_ACQ msg=audit(1414328509.255:10857): pid=19538 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1414328509.255:10858): pid=19538 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1414328509.314:10859): pid=19538 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1414328509.314:10860): pid=19538 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1414328511.256:10861): pid=19541 uid=993 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D6F6663746C2064756D702D666C6F77732062722D696E74207461626C653D3233 terminal=? res=success' >type=CRED_ACQ msg=audit(1414328511.256:10862): pid=19541 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1414328511.256:10863): pid=19541 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1414328511.315:10864): pid=19541 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1414328511.315:10865): pid=19541 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1414328513.258:10866): pid=19547 uid=993 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D6F6663746C2064756D702D666C6F77732062722D696E74207461626C653D3233 terminal=? res=success' >type=CRED_ACQ msg=audit(1414328513.258:10867): pid=19547 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1414328513.258:10868): pid=19547 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1414328513.319:10869): pid=19547 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1414328513.319:10870): pid=19547 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1414328515.259:10871): pid=19550 uid=993 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D6F6663746C2064756D702D666C6F77732062722D696E74207461626C653D3233 terminal=? res=success' >type=CRED_ACQ msg=audit(1414328515.259:10872): pid=19550 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1414328515.259:10873): pid=19550 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1414328515.321:10874): pid=19550 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1414328515.321:10875): pid=19550 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1414328517.260:10876): pid=19553 uid=993 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D6F6663746C2064756D702D666C6F77732062722D696E74207461626C653D3233 terminal=? res=success' >type=CRED_ACQ msg=audit(1414328517.261:10877): pid=19553 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1414328517.261:10878): pid=19553 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1414328517.319:10879): pid=19553 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1414328517.319:10880): pid=19553 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1414328519.260:10881): pid=19556 uid=993 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D6F6663746C2064756D702D666C6F77732062722D696E74207461626C653D3233 terminal=? res=success' >type=CRED_ACQ msg=audit(1414328519.260:10882): pid=19556 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1414328519.261:10883): pid=19556 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1414328519.322:10884): pid=19556 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1414328519.322:10885): pid=19556 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1414328521.193:10886): pid=19559 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="keystone" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1414328521.194:10887): pid=19559 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="keystone" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1414328521.195:10888): pid=19559 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=163 old-ses=4294967295 ses=345 res=1 >type=USER_START msg=audit(1414328521.210:10889): pid=19559 uid=0 auid=163 ses=345 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="keystone" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1414328521.211:10890): pid=19559 uid=0 auid=163 ses=345 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="keystone" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_CMD msg=audit(1414328521.262:10891): pid=19563 uid=993 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D6F6663746C2064756D702D666C6F77732062722D696E74207461626C653D3233 terminal=? res=success' >type=CRED_ACQ msg=audit(1414328521.263:10892): pid=19563 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1414328521.263:10893): pid=19563 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1414328521.326:10894): pid=19563 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1414328521.326:10895): pid=19563 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1414328521.846:10896): pid=19559 uid=0 auid=163 ses=345 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="keystone" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1414328521.847:10897): pid=19559 uid=0 auid=163 ses=345 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="keystone" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_CMD msg=audit(1414328523.264:10898): pid=19578 uid=993 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D6F6663746C2064756D702D666C6F77732062722D696E74207461626C653D3233 terminal=? res=success' >type=CRED_ACQ msg=audit(1414328523.264:10899): pid=19578 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1414328523.264:10900): pid=19578 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1414328523.323:10901): pid=19578 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1414328523.323:10902): pid=19578 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1414328525.266:10903): pid=19581 uid=993 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D6F6663746C2064756D702D666C6F77732062722D696E74207461626C653D3233 terminal=? res=success' >type=CRED_ACQ msg=audit(1414328525.266:10904): pid=19581 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1414328525.266:10905): pid=19581 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1414328525.330:10906): pid=19581 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1414328525.330:10907): pid=19581 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1414328527.268:10908): pid=19584 uid=993 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D6F6663746C2064756D702D666C6F77732062722D696E74207461626C653D3233 terminal=? res=success' >type=CRED_ACQ msg=audit(1414328527.268:10909): pid=19584 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1414328527.268:10910): pid=19584 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1414328527.327:10911): pid=19584 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1414328527.327:10912): pid=19584 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1414328529.270:10913): pid=19587 uid=993 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D6F6663746C2064756D702D666C6F77732062722D696E74207461626C653D3233 terminal=? res=success' >type=CRED_ACQ msg=audit(1414328529.270:10914): pid=19587 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1414328529.270:10915): pid=19587 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1414328529.330:10916): pid=19587 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1414328529.330:10917): pid=19587 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1414328531.272:10918): pid=19590 uid=993 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D6F6663746C2064756D702D666C6F77732062722D696E74207461626C653D3233 terminal=? res=success' >type=CRED_ACQ msg=audit(1414328531.272:10919): pid=19590 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1414328531.272:10920): pid=19590 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1414328531.331:10921): pid=19590 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1414328531.331:10922): pid=19590 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1414328532.807:10923): pid=19595 uid=993 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206970206E65746E73206C697374 terminal=? res=success' >type=CRED_ACQ msg=audit(1414328532.807:10924): pid=19595 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1414328532.807:10925): pid=19595 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1414328532.863:10926): pid=19595 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1414328532.863:10927): pid=19595 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1414328533.274:10928): pid=19598 uid=993 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D6F6663746C2064756D702D666C6F77732062722D696E74207461626C653D3233 terminal=? res=success' >type=CRED_ACQ msg=audit(1414328533.274:10929): pid=19598 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1414328533.274:10930): pid=19598 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1414328533.333:10931): pid=19598 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1414328533.333:10932): pid=19598 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1414328533.453:10933): pid=19601 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D4320766773202D2D6E6F68656164696E6773202D2D756E69743D67202D6F206E616D652C73697A652C667265652C6C765F636F756E742C75756964202D2D736570617261746F72203A202D2D6E6F7375666669782063696E6465722D766F6C756D6573 terminal=? res=success' >type=CRED_ACQ msg=audit(1414328533.453:10934): pid=19601 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1414328533.455:10935): pid=19601 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1414328533.530:10936): pid=19601 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1414328533.530:10937): pid=19601 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1414328535.277:10938): pid=19604 uid=993 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D6F6663746C2064756D702D666C6F77732062722D696E74207461626C653D3233 terminal=? res=success' >type=CRED_ACQ msg=audit(1414328535.277:10939): pid=19604 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1414328535.278:10940): pid=19604 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1414328535.337:10941): pid=19604 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1414328535.337:10942): pid=19604 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1414328537.277:10943): pid=19607 uid=993 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D6F6663746C2064756D702D666C6F77732062722D696E74207461626C653D3233 terminal=? res=success' >type=CRED_ACQ msg=audit(1414328537.277:10944): pid=19607 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1414328537.277:10945): pid=19607 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1414328537.339:10946): pid=19607 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1414328537.339:10947): pid=19607 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1414328539.278:10948): pid=19616 uid=993 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D6F6663746C2064756D702D666C6F77732062722D696E74207461626C653D3233 terminal=? res=success' >type=CRED_ACQ msg=audit(1414328539.279:10949): pid=19616 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1414328539.279:10950): pid=19616 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1414328539.340:10951): pid=19616 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1414328539.340:10952): pid=19616 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1414328541.280:10953): pid=19619 uid=993 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D6F6663746C2064756D702D666C6F77732062722D696E74207461626C653D3233 terminal=? res=success' >type=CRED_ACQ msg=audit(1414328541.280:10954): pid=19619 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1414328541.281:10955): pid=19619 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1414328541.340:10956): pid=19619 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1414328541.340:10957): pid=19619 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1414328543.283:10958): pid=19631 uid=993 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D6F6663746C2064756D702D666C6F77732062722D696E74207461626C653D3233 terminal=? res=success' >type=CRED_ACQ msg=audit(1414328543.283:10959): pid=19631 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1414328543.284:10960): pid=19631 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1414328543.346:10961): pid=19631 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1414328543.346:10962): pid=19631 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1414328544.078:10963): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1414328544.078:10964): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1414328544.223:10965): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_START msg=audit(1414328544.223:10966): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414328544.223:10967): pid=19644 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=19644 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.34.60.204 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414328544.223:10968): pid=19644 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=19644 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.34.60.204 terminal=? res=success' >type=CRED_REFR msg=audit(1414328544.224:10969): pid=19644 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_CMD msg=audit(1414328545.283:10970): pid=19648 uid=993 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D6F6663746C2064756D702D666C6F77732062722D696E74207461626C653D3233 terminal=? res=success' >type=CRED_ACQ msg=audit(1414328545.284:10971): pid=19648 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1414328545.284:10972): pid=19648 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1414328545.343:10973): pid=19648 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1414328545.343:10974): pid=19648 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1414328547.285:10975): pid=19651 uid=993 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D6F6663746C2064756D702D666C6F77732062722D696E74207461626C653D3233 terminal=? res=success' >type=CRED_ACQ msg=audit(1414328547.285:10976): pid=19651 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1414328547.285:10977): pid=19651 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1414328547.344:10978): pid=19651 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1414328547.344:10979): pid=19651 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1414328549.288:10980): pid=19654 uid=993 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D6F6663746C2064756D702D666C6F77732062722D696E74207461626C653D3233 terminal=? res=success' >type=CRED_ACQ msg=audit(1414328549.288:10981): pid=19654 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1414328549.288:10982): pid=19654 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1414328549.348:10983): pid=19654 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1414328549.348:10984): pid=19654 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1414328551.290:10985): pid=19657 uid=993 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D6F6663746C2064756D702D666C6F77732062722D696E74207461626C653D3233 terminal=? res=success' >type=CRED_ACQ msg=audit(1414328551.290:10986): pid=19657 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1414328551.290:10987): pid=19657 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1414328551.350:10988): pid=19657 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1414328551.350:10989): pid=19657 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1414328553.292:10990): pid=19662 uid=993 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D6F6663746C2064756D702D666C6F77732062722D696E74207461626C653D3233 terminal=? res=success' >type=CRED_ACQ msg=audit(1414328553.292:10991): pid=19662 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1414328553.292:10992): pid=19662 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1414328553.352:10993): pid=19662 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1414328553.352:10994): pid=19662 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1414328555.293:10995): pid=19665 uid=993 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D6F6663746C2064756D702D666C6F77732062722D696E74207461626C653D3233 terminal=? res=success' >type=CRED_ACQ msg=audit(1414328555.294:10996): pid=19665 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1414328555.294:10997): pid=19665 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1414328555.353:10998): pid=19665 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1414328555.353:10999): pid=19665 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1414328557.296:11000): pid=19668 uid=993 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D6F6663746C2064756D702D666C6F77732062722D696E74207461626C653D3233 terminal=? res=success' >type=CRED_ACQ msg=audit(1414328557.296:11001): pid=19668 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1414328557.296:11002): pid=19668 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1414328557.358:11003): pid=19668 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1414328557.358:11004): pid=19668 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1414328559.297:11005): pid=19671 uid=993 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D6F6663746C2064756D702D666C6F77732062722D696E74207461626C653D3233 terminal=? res=success' >type=CRED_ACQ msg=audit(1414328559.298:11006): pid=19671 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1414328559.298:11007): pid=19671 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1414328559.357:11008): pid=19671 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1414328559.357:11009): pid=19671 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1414328561.299:11010): pid=19674 uid=993 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D6F6663746C2064756D702D666C6F77732062722D696E74207461626C653D3233 terminal=? res=success' >type=CRED_ACQ msg=audit(1414328561.300:11011): pid=19674 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1414328561.300:11012): pid=19674 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1414328561.358:11013): pid=19674 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1414328561.358:11014): pid=19674 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1414328563.302:11015): pid=19679 uid=993 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D6F6663746C2064756D702D666C6F77732062722D696E74207461626C653D3233 terminal=? res=success' >type=CRED_ACQ msg=audit(1414328563.302:11016): pid=19679 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1414328563.302:11017): pid=19679 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1414328563.361:11018): pid=19679 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1414328563.361:11019): pid=19679 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1414328565.302:11020): pid=19682 uid=993 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D6F6663746C2064756D702D666C6F77732062722D696E74207461626C653D3233 terminal=? res=success' >type=CRED_ACQ msg=audit(1414328565.302:11021): pid=19682 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1414328565.303:11022): pid=19682 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1414328565.361:11023): pid=19682 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1414328565.361:11024): pid=19682 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1414328567.302:11025): pid=19685 uid=993 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D6F6663746C2064756D702D666C6F77732062722D696E74207461626C653D3233 terminal=? res=success' >type=CRED_ACQ msg=audit(1414328567.302:11026): pid=19685 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1414328567.302:11027): pid=19685 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1414328567.362:11028): pid=19685 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1414328567.362:11029): pid=19685 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1414328569.304:11030): pid=19691 uid=993 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D6F6663746C2064756D702D666C6F77732062722D696E74207461626C653D3233 terminal=? res=success' >type=CRED_ACQ msg=audit(1414328569.304:11031): pid=19691 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1414328569.304:11032): pid=19691 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1414328569.363:11033): pid=19691 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1414328569.363:11034): pid=19691 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1414328571.306:11035): pid=19694 uid=993 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D6F6663746C2064756D702D666C6F77732062722D696E74207461626C653D3233 terminal=? res=success' >type=CRED_ACQ msg=audit(1414328571.306:11036): pid=19694 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1414328571.306:11037): pid=19694 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1414328571.364:11038): pid=19694 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1414328571.364:11039): pid=19694 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1414328573.307:11040): pid=19699 uid=993 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D6F6663746C2064756D702D666C6F77732062722D696E74207461626C653D3233 terminal=? res=success' >type=CRED_ACQ msg=audit(1414328573.308:11041): pid=19699 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1414328573.308:11042): pid=19699 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1414328573.366:11043): pid=19699 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1414328573.366:11044): pid=19699 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1414328575.309:11045): pid=19702 uid=993 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D6F6663746C2064756D702D666C6F77732062722D696E74207461626C653D3233 terminal=? res=success' >type=CRED_ACQ msg=audit(1414328575.309:11046): pid=19702 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1414328575.309:11047): pid=19702 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1414328575.371:11048): pid=19702 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1414328575.371:11049): pid=19702 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1414328577.311:11050): pid=19705 uid=993 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D6F6663746C2064756D702D666C6F77732062722D696E74207461626C653D3233 terminal=? res=success' >type=CRED_ACQ msg=audit(1414328577.311:11051): pid=19705 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1414328577.311:11052): pid=19705 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1414328577.370:11053): pid=19705 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1414328577.370:11054): pid=19705 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1414328579.312:11055): pid=19708 uid=993 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D6F6663746C2064756D702D666C6F77732062722D696E74207461626C653D3233 terminal=? res=success' >type=CRED_ACQ msg=audit(1414328579.312:11056): pid=19708 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1414328579.312:11057): pid=19708 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1414328579.371:11058): pid=19708 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1414328579.371:11059): pid=19708 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1414328581.314:11060): pid=19711 uid=993 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D6F6663746C2064756D702D666C6F77732062722D696E74207461626C653D3233 terminal=? res=success' >type=CRED_ACQ msg=audit(1414328581.314:11061): pid=19711 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1414328581.314:11062): pid=19711 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1414328581.373:11063): pid=19711 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1414328581.373:11064): pid=19711 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1414328581.856:11065): pid=19714 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="keystone" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1414328581.856:11066): pid=19714 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="keystone" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1414328581.857:11067): pid=19714 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=163 old-ses=4294967295 ses=346 res=1 >type=USER_START msg=audit(1414328581.873:11068): pid=19714 uid=0 auid=163 ses=346 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="keystone" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1414328581.874:11069): pid=19714 uid=0 auid=163 ses=346 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="keystone" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1414328582.502:11070): pid=19714 uid=0 auid=163 ses=346 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="keystone" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1414328582.505:11071): pid=19714 uid=0 auid=163 ses=346 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="keystone" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_CMD msg=audit(1414328583.315:11072): pid=19730 uid=993 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D6F6663746C2064756D702D666C6F77732062722D696E74207461626C653D3233 terminal=? res=success' >type=CRED_ACQ msg=audit(1414328583.316:11073): pid=19730 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1414328583.316:11074): pid=19730 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1414328583.375:11075): pid=19730 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1414328583.375:11076): pid=19730 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1414328585.317:11077): pid=19733 uid=993 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D6F6663746C2064756D702D666C6F77732062722D696E74207461626C653D3233 terminal=? res=success' >type=CRED_ACQ msg=audit(1414328585.317:11078): pid=19733 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1414328585.317:11079): pid=19733 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1414328585.376:11080): pid=19733 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1414328585.376:11081): pid=19733 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1414328587.319:11082): pid=19736 uid=993 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D6F6663746C2064756D702D666C6F77732062722D696E74207461626C653D3233 terminal=? res=success' >type=CRED_ACQ msg=audit(1414328587.319:11083): pid=19736 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1414328587.320:11084): pid=19736 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1414328587.379:11085): pid=19736 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1414328587.379:11086): pid=19736 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1414328589.321:11087): pid=19739 uid=993 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D6F6663746C2064756D702D666C6F77732062722D696E74207461626C653D3233 terminal=? res=success' >type=CRED_ACQ msg=audit(1414328589.321:11088): pid=19739 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1414328589.321:11089): pid=19739 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1414328589.381:11090): pid=19739 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1414328589.381:11091): pid=19739 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1414328591.322:11092): pid=19742 uid=993 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D6F6663746C2064756D702D666C6F77732062722D696E74207461626C653D3233 terminal=? res=success' >type=CRED_ACQ msg=audit(1414328591.322:11093): pid=19742 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1414328591.323:11094): pid=19742 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1414328591.382:11095): pid=19742 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1414328591.382:11096): pid=19742 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1414328593.324:11097): pid=19747 uid=993 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D6F6663746C2064756D702D666C6F77732062722D696E74207461626C653D3233 terminal=? res=success' >type=CRED_ACQ msg=audit(1414328593.324:11098): pid=19747 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1414328593.325:11099): pid=19747 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1414328593.382:11100): pid=19747 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1414328593.382:11101): pid=19747 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1414328593.457:11102): pid=19750 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D4320766773202D2D6E6F68656164696E6773202D2D756E69743D67202D6F206E616D652C73697A652C667265652C6C765F636F756E742C75756964202D2D736570617261746F72203A202D2D6E6F7375666669782063696E6465722D766F6C756D6573 terminal=? res=success' >type=CRED_ACQ msg=audit(1414328593.457:11103): pid=19750 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1414328593.459:11104): pid=19750 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1414328593.534:11105): pid=19750 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1414328593.534:11106): pid=19750 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1414328595.326:11107): pid=19753 uid=993 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D6F6663746C2064756D702D666C6F77732062722D696E74207461626C653D3233 terminal=? res=success' >type=CRED_ACQ msg=audit(1414328595.327:11108): pid=19753 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1414328595.327:11109): pid=19753 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1414328595.385:11110): pid=19753 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1414328595.385:11111): pid=19753 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1414328597.327:11112): pid=19757 uid=993 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D6F6663746C2064756D702D666C6F77732062722D696E74207461626C653D3233 terminal=? res=success' >type=CRED_ACQ msg=audit(1414328597.327:11113): pid=19757 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1414328597.328:11114): pid=19757 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1414328597.388:11115): pid=19757 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1414328597.388:11116): pid=19757 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1414328599.328:11117): pid=19766 uid=993 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D6F6663746C2064756D702D666C6F77732062722D696E74207461626C653D3233 terminal=? res=success' >type=CRED_ACQ msg=audit(1414328599.328:11118): pid=19766 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1414328599.328:11119): pid=19766 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1414328599.389:11120): pid=19766 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1414328599.389:11121): pid=19766 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1414328601.330:11122): pid=19769 uid=993 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D6F6663746C2064756D702D666C6F77732062722D696E74207461626C653D3233 terminal=? res=success' >type=CRED_ACQ msg=audit(1414328601.330:11123): pid=19769 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1414328601.331:11124): pid=19769 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1414328601.390:11125): pid=19769 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1414328601.390:11126): pid=19769 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1414328603.332:11127): pid=19774 uid=993 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D6F6663746C2064756D702D666C6F77732062722D696E74207461626C653D3233 terminal=? res=success' >type=CRED_ACQ msg=audit(1414328603.333:11128): pid=19774 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1414328603.333:11129): pid=19774 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1414328603.392:11130): pid=19774 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1414328603.392:11131): pid=19774 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1414328605.334:11132): pid=19796 uid=993 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D6F6663746C2064756D702D666C6F77732062722D696E74207461626C653D3233 terminal=? res=success' >type=CRED_ACQ msg=audit(1414328605.334:11133): pid=19796 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1414328605.334:11134): pid=19796 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1414328605.393:11135): pid=19796 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1414328605.393:11136): pid=19796 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1414328605.437:11137): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1414328605.437:11138): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1414328605.581:11139): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_START msg=audit(1414328605.581:11140): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414328605.582:11141): pid=19799 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=19799 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.34.60.204 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414328605.582:11142): pid=19799 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=19799 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.34.60.204 terminal=? res=success' >type=CRED_REFR msg=audit(1414328605.582:11143): pid=19799 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_END msg=audit(1414328606.324:11144): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1414328606.324:11145): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1414328606.484:11146): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_START msg=audit(1414328606.484:11147): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414328606.484:11148): pid=19810 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=19810 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.34.60.204 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414328606.484:11149): pid=19810 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=19810 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.34.60.204 terminal=? res=success' >type=CRED_REFR msg=audit(1414328606.485:11150): pid=19810 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_CMD msg=audit(1414328607.336:11151): pid=19822 uid=993 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D6F6663746C2064756D702D666C6F77732062722D696E74207461626C653D3233 terminal=? res=success' >type=CRED_ACQ msg=audit(1414328607.336:11152): pid=19822 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1414328607.336:11153): pid=19822 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1414328607.408:11154): pid=19822 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1414328607.408:11155): pid=19822 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1414328608.778:11156): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1414328608.778:11157): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1414328608.919:11158): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_START msg=audit(1414328608.919:11159): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414328608.919:11160): pid=19831 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=19831 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.34.60.204 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414328608.919:11161): pid=19831 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=19831 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.34.60.204 terminal=? res=success' >type=CRED_REFR msg=audit(1414328608.920:11162): pid=19831 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_CMD msg=audit(1414328609.339:11163): pid=19841 uid=993 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D6F6663746C2064756D702D666C6F77732062722D696E74207461626C653D3233 terminal=? res=success' >type=CRED_ACQ msg=audit(1414328609.339:11164): pid=19841 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1414328609.339:11165): pid=19841 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1414328609.420:11166): pid=19841 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1414328609.420:11167): pid=19841 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1414328610.957:11168): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1414328610.957:11169): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1414328611.100:11170): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_START msg=audit(1414328611.100:11171): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414328611.101:11172): pid=19848 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=19848 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.34.60.204 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414328611.101:11173): pid=19848 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=19848 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.34.60.204 terminal=? res=success' >type=CRED_REFR msg=audit(1414328611.101:11174): pid=19848 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_CMD msg=audit(1414328611.339:11175): pid=19856 uid=993 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D6F6663746C2064756D702D666C6F77732062722D696E74207461626C653D3233 terminal=? res=success' >type=CRED_ACQ msg=audit(1414328611.339:11176): pid=19856 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1414328611.339:11177): pid=19856 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1414328611.399:11178): pid=19856 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1414328611.399:11179): pid=19856 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1414328612.357:11180): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1414328612.357:11181): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1414328612.500:11182): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_START msg=audit(1414328612.500:11183): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414328612.501:11184): pid=19872 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=19872 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.34.60.204 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414328612.501:11185): pid=19872 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=19872 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.34.60.204 terminal=? res=success' >type=CRED_REFR msg=audit(1414328612.501:11186): pid=19872 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_CMD msg=audit(1414328613.340:11187): pid=19886 uid=993 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D6F6663746C2064756D702D666C6F77732062722D696E74207461626C653D3233 terminal=? res=success' >type=CRED_ACQ msg=audit(1414328613.340:11188): pid=19886 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1414328613.340:11189): pid=19886 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1414328613.399:11190): pid=19886 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1414328613.399:11191): pid=19886 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1414328613.428:11192): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1414328613.428:11193): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1414328613.573:11194): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_START msg=audit(1414328613.573:11195): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414328613.573:11196): pid=19889 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=19889 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.34.60.204 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414328613.574:11197): pid=19889 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=19889 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.34.60.204 terminal=? res=success' >type=CRED_REFR msg=audit(1414328613.574:11198): pid=19889 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_END msg=audit(1414328614.559:11199): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1414328614.559:11200): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1414328614.704:11201): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_START msg=audit(1414328614.704:11202): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414328614.705:11203): pid=19905 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=19905 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.34.60.204 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414328614.705:11204): pid=19905 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=19905 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.34.60.204 terminal=? res=success' >type=CRED_REFR msg=audit(1414328614.705:11205): pid=19905 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_CMD msg=audit(1414328615.342:11206): pid=19919 uid=993 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D6F6663746C2064756D702D666C6F77732062722D696E74207461626C653D3233 terminal=? res=success' >type=CRED_ACQ msg=audit(1414328615.342:11207): pid=19919 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1414328615.342:11208): pid=19919 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1414328615.407:11209): pid=19919 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1414328615.407:11210): pid=19919 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1414328615.810:11211): pid=19924 uid=993 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206970206E65746E73206164642071726F757465722D31393466373930362D656436352D346233642D396463322D646363333261613637663265 terminal=? res=success' >type=CRED_ACQ msg=audit(1414328615.810:11212): pid=19924 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1414328615.810:11213): pid=19924 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=NETFILTER_CFG msg=audit(1414328615.863:11214): table=filter family=2 entries=0 >type=NETFILTER_CFG msg=audit(1414328615.863:11214): table=nat family=2 entries=0 >type=NETFILTER_CFG msg=audit(1414328615.863:11214): table=mangle family=2 entries=0 >type=NETFILTER_CFG msg=audit(1414328615.863:11214): table=filter family=10 entries=0 >type=SYSCALL msg=audit(1414328615.863:11214): arch=c000003e syscall=272 success=yes exit=0 a0=40000000 a1=c0 a2=0 a3=7fff058201b0 items=0 ppid=19925 pid=19926 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip" exe="/usr/sbin/ip" subj=system_u:system_r:neutron_t:s0 key=(null) >type=USER_END msg=audit(1414328615.884:11215): pid=19924 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1414328615.884:11216): pid=19924 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1414328615.889:11217): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1414328615.889:11218): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_CMD msg=audit(1414328615.894:11219): pid=19930 uid=993 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206970206E65746E7320657865632071726F757465722D31393466373930362D656436352D346233642D396463322D6463633332616136376632652073797363746C202D77206E65742E697076342E636F6E662E616C6C2E70726F6D6F74655F7365636F6E6461726965733D31 terminal=? res=success' >type=CRED_ACQ msg=audit(1414328615.894:11220): pid=19930 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1414328615.894:11221): pid=19930 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1414328615.972:11222): pid=19930 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1414328615.972:11223): pid=19930 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1414328615.980:11224): pid=19933 uid=993 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206970206E65746E7320657865632071726F757465722D31393466373930362D656436352D346233642D396463322D646363333261613637663265206970206C696E6B20736574206C6F207570 terminal=? res=success' >type=CRED_ACQ msg=audit(1414328615.981:11225): pid=19933 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1414328615.981:11226): pid=19933 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_LOGIN msg=audit(1414328616.034:11227): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_START msg=audit(1414328616.034:11228): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414328616.034:11229): pid=19936 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=19936 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.34.60.204 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414328616.034:11230): pid=19936 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=19936 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.34.60.204 terminal=? res=success' >type=CRED_REFR msg=audit(1414328616.035:11231): pid=19936 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_END msg=audit(1414328616.065:11232): pid=19933 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1414328616.065:11233): pid=19933 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1414328616.074:11234): pid=19940 uid=993 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206970206E65746E7320657865632071726F757465722D31393466373930362D656436352D346233642D396463322D6463633332616136376632652073797363746C202D77206E65742E697076342E69705F666F72776172643D31 terminal=? res=success' >type=CRED_ACQ msg=audit(1414328616.074:11235): pid=19940 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1414328616.074:11236): pid=19940 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1414328616.150:11237): pid=19940 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1414328616.150:11238): pid=19940 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1414328616.161:11239): pid=19943 uid=993 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206970206E65746E7320657865632071726F757465722D31393466373930362D656436352D346233642D396463322D6463633332616136376632652073797363746C202D77206E65742E697076362E636F6E662E616C6C2E666F7277617264696E673D31 terminal=? res=success' >type=CRED_ACQ msg=audit(1414328616.161:11240): pid=19943 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1414328616.162:11241): pid=19943 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1414328616.241:11242): pid=19943 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1414328616.241:11243): pid=19943 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1414328616.252:11244): pid=19950 uid=993 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206970206E65746E7320657865632071726F757465722D31393466373930362D656436352D346233642D396463322D6463633332616136376632652069707461626C65732D73617665202D63 terminal=? res=success' >type=CRED_ACQ msg=audit(1414328616.252:11245): pid=19950 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1414328616.253:11246): pid=19950 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1414328616.326:11247): pid=19950 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1414328616.326:11248): pid=19950 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1414328616.336:11249): pid=19955 uid=993 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206970206E65746E7320657865632071726F757465722D31393466373930362D656436352D346233642D396463322D6463633332616136376632652069707461626C65732D726573746F7265202D63 terminal=? res=success' >type=CRED_ACQ msg=audit(1414328616.336:11250): pid=19955 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1414328616.336:11251): pid=19955 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=NETFILTER_CFG msg=audit(1414328616.407:11252): table=raw family=2 entries=0 >type=NETFILTER_CFG msg=audit(1414328616.407:11252): table=raw family=2 entries=0 >type=SYSCALL msg=audit(1414328616.407:11252): arch=c000003e syscall=313 success=yes exit=0 a0=0 a1=7f16f8973d89 a2=0 a3=0 items=0 ppid=19958 pid=19960 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="modprobe" exe="/usr/bin/kmod" subj=system_u:system_r:insmod_t:s0 key=(null) >type=NETFILTER_CFG msg=audit(1414328616.410:11253): table=raw family=2 entries=3 >type=SYSCALL msg=audit(1414328616.410:11253): arch=c000003e syscall=54 success=yes exit=0 a0=3 a1=0 a2=40 a3=18de050 items=0 ppid=19956 pid=19957 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=NETFILTER_CFG msg=audit(1414328616.410:11254): table=mangle family=2 entries=6 >type=SYSCALL msg=audit(1414328616.410:11254): arch=c000003e syscall=54 success=yes exit=0 a0=3 a1=0 a2=40 a3=18de100 items=0 ppid=19956 pid=19957 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=NETFILTER_CFG msg=audit(1414328616.411:11255): table=nat family=2 entries=5 >type=SYSCALL msg=audit(1414328616.411:11255): arch=c000003e syscall=54 success=yes exit=0 a0=3 a1=0 a2=40 a3=18e0ce0 items=0 ppid=19956 pid=19957 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=NETFILTER_CFG msg=audit(1414328616.414:11256): table=filter family=2 entries=4 >type=SYSCALL msg=audit(1414328616.414:11256): arch=c000003e syscall=54 success=yes exit=0 a0=3 a1=0 a2=40 a3=18e0ec0 items=0 ppid=19956 pid=19957 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=USER_END msg=audit(1414328616.429:11257): pid=19955 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1414328616.429:11258): pid=19955 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1414328616.439:11259): pid=19964 uid=993 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206970206E65746E7320657865632071726F757465722D31393466373930362D656436352D346233642D396463322D646363333261613637663265206970367461626C65732D73617665202D63 terminal=? res=success' >type=CRED_ACQ msg=audit(1414328616.439:11260): pid=19964 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1414328616.440:11261): pid=19964 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1414328616.519:11262): pid=19964 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1414328616.519:11263): pid=19964 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1414328616.528:11264): pid=19967 uid=993 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206970206E65746E7320657865632071726F757465722D31393466373930362D656436352D346233642D396463322D646363333261613637663265206970367461626C65732D726573746F7265202D63 terminal=? res=success' >type=CRED_ACQ msg=audit(1414328616.528:11265): pid=19967 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1414328616.528:11266): pid=19967 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=NETFILTER_CFG msg=audit(1414328616.590:11267): table=filter family=10 entries=4 >type=SYSCALL msg=audit(1414328616.590:11267): arch=c000003e syscall=54 success=yes exit=0 a0=3 a1=29 a2=40 a3=10b2960 items=0 ppid=19968 pid=19970 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=USER_END msg=audit(1414328616.603:11268): pid=19967 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1414328616.603:11269): pid=19967 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1414328616.613:11270): pid=19972 uid=993 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206970206E65746E73206C697374 terminal=? res=success' >type=CRED_ACQ msg=audit(1414328616.613:11271): pid=19972 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1414328616.614:11272): pid=19972 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1414328616.673:11273): pid=19972 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1414328616.673:11274): pid=19972 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1414328616.698:11275): pid=19975 uid=993 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=CRED_ACQ msg=audit(1414328616.698:11276): pid=19975 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1414328616.699:11277): pid=19975 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1414328617.193:11278): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1414328617.193:11279): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_END msg=audit(1414328617.195:11280): pid=19975 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1414328617.195:11281): pid=19975 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1414328617.204:11282): pid=19985 uid=993 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206970206E65746E7320657865632071726F757465722D31393466373930362D656436352D346233642D396463322D646363333261613637663265206970202D6F202D64206C696E6B206C697374 terminal=? res=success' >type=CRED_ACQ msg=audit(1414328617.205:11283): pid=19985 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1414328617.205:11284): pid=19985 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1414328617.278:11285): pid=19985 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1414328617.278:11286): pid=19985 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1414328617.286:11287): pid=19988 uid=993 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206970206E65746E7320657865632071726F757465722D31393466373930362D656436352D346233642D396463322D646363333261613637663265206970202D6F206C696E6B2073686F772071672D32613638643337632D3664 terminal=? res=success' >type=CRED_ACQ msg=audit(1414328617.287:11288): pid=19988 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1414328617.287:11289): pid=19988 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_LOGIN msg=audit(1414328617.338:11290): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_START msg=audit(1414328617.338:11291): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414328617.338:11292): pid=19991 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=19991 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.34.60.204 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414328617.338:11293): pid=19991 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=19991 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.34.60.204 terminal=? res=success' >type=CRED_REFR msg=audit(1414328617.339:11294): pid=19991 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_CMD msg=audit(1414328617.344:11295): pid=19990 uid=993 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D6F6663746C2064756D702D666C6F77732062722D696E74207461626C653D3233 terminal=? res=success' >type=CRED_ACQ msg=audit(1414328617.344:11296): pid=19990 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1414328617.344:11297): pid=19990 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1414328617.380:11298): pid=19988 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1414328617.380:11299): pid=19988 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1414328617.394:11300): pid=20001 uid=993 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206970206E65746E7320657865632071726F757465722D31393466373930362D656436352D346233642D396463322D646363333261613637663265206970202D6F206C696E6B2073686F772071672D32613638643337632D3664 terminal=? res=success' >type=CRED_ACQ msg=audit(1414328617.394:11301): pid=20001 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1414328617.394:11302): pid=20001 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1414328617.402:11303): pid=19990 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1414328617.402:11304): pid=19990 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1414328617.411:11305): pid=20004 uid=993 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D767363746C202D2D74696D656F75743D3130206C6973742D706F7274732062722D696E74 terminal=? res=success' >type=CRED_ACQ msg=audit(1414328617.412:11306): pid=20004 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1414328617.412:11307): pid=20004 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1414328617.471:11308): pid=20004 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1414328617.471:11309): pid=20004 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1414328617.480:11310): pid=20007 uid=993 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D767363746C202D2D74696D656F75743D3130202D2D666F726D61743D6A736F6E202D2D202D2D636F6C756D6E733D6E616D652C65787465726E616C5F6964732C6F66706F7274206C69737420496E74657266616365 terminal=? res=success' >type=CRED_ACQ msg=audit(1414328617.480:11311): pid=20007 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1414328617.481:11312): pid=20007 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1414328617.504:11313): pid=20001 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1414328617.504:11314): pid=20001 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1414328617.516:11315): pid=20015 uid=993 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=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 terminal=? res=success' >type=CRED_ACQ msg=audit(1414328617.517:11316): pid=20015 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1414328617.517:11317): pid=20015 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1414328617.542:11318): pid=20007 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1414328617.542:11319): pid=20007 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1414328617.551:11320): pid=20022 uid=993 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D767363746C202D2D74696D656F75743D3130206C6973742D706F7274732062722D696E74 terminal=? res=success' >type=CRED_ACQ msg=audit(1414328617.551:11321): pid=20022 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1414328617.551:11322): pid=20022 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=ANOM_PROMISCUOUS msg=audit(1414328617.575:11323): dev=qg-2a68d37c-6d prom=256 old_prom=0 auid=4294967295 uid=0 gid=0 ses=4294967295 >type=SYSCALL msg=audit(1414328617.575:11323): arch=c000003e syscall=46 success=yes exit=60 a0=10 a1=7fff806620f0 a2=0 a3=1 items=0 ppid=11281 pid=11282 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ovs-vswitchd" exe="/usr/sbin/ovs-vswitchd" subj=system_u:system_r:openvswitch_t:s0 key=(null) >type=USER_END msg=audit(1414328617.584:11324): pid=20015 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1414328617.584:11325): pid=20015 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1414328617.593:11326): pid=20031 uid=993 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206970206C696E6B207365742071672D32613638643337632D366420616464726573732066613A31363A33653A34393A39393A3833 terminal=? res=success' >type=CRED_ACQ msg=audit(1414328617.593:11327): pid=20031 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1414328617.594:11328): pid=20031 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1414328617.621:11329): pid=20022 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1414328617.621:11330): pid=20022 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1414328617.630:11331): pid=20034 uid=993 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D767363746C202D2D74696D656F75743D3130202D2D666F726D61743D6A736F6E202D2D202D2D636F6C756D6E733D6E616D652C746167206C69737420506F7274 terminal=? res=success' >type=CRED_ACQ msg=audit(1414328617.630:11332): pid=20034 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1414328617.631:11333): pid=20034 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1414328617.652:11334): pid=20031 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1414328617.652:11335): pid=20031 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1414328617.665:11336): pid=20040 uid=993 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206970206C696E6B207365742071672D32613638643337632D3664206E65746E732071726F757465722D31393466373930362D656436352D346233642D396463322D646363333261613637663265 terminal=? res=success' >type=CRED_ACQ msg=audit(1414328617.665:11337): pid=20040 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1414328617.665:11338): pid=20040 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1414328617.690:11339): pid=20034 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1414328617.690:11340): pid=20034 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1414328617.733:11341): pid=20040 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1414328617.733:11342): pid=20040 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1414328617.743:11343): pid=20053 uid=993 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206970206E65746E7320657865632071726F757465722D31393466373930362D656436352D346233642D396463322D646363333261613637663265206970206C696E6B207365742071672D32613638643337632D3664207570 terminal=? res=success' >type=CRED_ACQ msg=audit(1414328617.743:11344): pid=20053 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1414328617.743:11345): pid=20053 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1414328617.820:11346): pid=20053 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1414328617.820:11347): pid=20053 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1414328617.835:11348): pid=20067 uid=993 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206970206E65746E7320657865632071726F757465722D31393466373930362D656436352D346233642D396463322D64636333326161363766326520697020616464722073686F772071672D32613638643337632D3664207065726D616E656E742073636F706520676C6F62616C terminal=? res=success' >type=CRED_ACQ msg=audit(1414328617.835:11349): pid=20067 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1414328617.836:11350): pid=20067 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1414328617.919:11351): pid=20067 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1414328617.919:11352): pid=20067 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1414328617.929:11353): pid=20072 uid=993 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206970206E65746E7320657865632071726F757465722D31393466373930362D656436352D346233642D396463322D646363333261613637663265206970202D34206164647220616464203137322E32342E302E312F323420627264203137322E32342E302E3235352073636F706520676C6F62616C206465762071672D32613638643337632D3664 terminal=? res=success' >type=CRED_ACQ msg=audit(1414328617.929:11354): pid=20072 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1414328617.929:11355): pid=20072 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1414328618.000:11356): pid=20072 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1414328618.000:11357): pid=20072 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1414328618.010:11358): pid=20075 uid=993 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206970206E65746E7320657865632071726F757465722D31393466373930362D656436352D346233642D396463322D64636333326161363766326520697020726F757465207265706C6163652064656661756C7420766961203137322E32342E302E323534206465762071672D32613638643337632D3664 terminal=? res=success' >type=CRED_ACQ msg=audit(1414328618.010:11359): pid=20075 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1414328618.010:11360): pid=20075 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1414328618.087:11361): pid=20075 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1414328618.087:11362): pid=20075 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1414328618.096:11363): pid=20078 uid=993 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206970206E65746E7320657865632071726F757465722D31393466373930362D656436352D346233642D396463322D64636333326161363766326520697020726F757465206C697374206465762071672D32613638643337632D36642073636F7065206C696E6B terminal=? res=success' >type=CRED_ACQ msg=audit(1414328618.096:11364): pid=20078 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1414328618.097:11365): pid=20078 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1414328618.174:11366): pid=20078 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1414328618.175:11367): pid=20078 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1414328618.184:11368): pid=20081 uid=993 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206970206E65746E7320657865632071726F757465722D31393466373930362D656436352D346233642D396463322D6463633332616136376632652069707461626C65732D73617665202D63 terminal=? res=success' >type=CRED_ACQ msg=audit(1414328618.184:11369): pid=20081 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1414328618.184:11370): pid=20081 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1414328618.188:11371): pid=20082 uid=993 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206970206E65746E7320657865632071726F757465722D31393466373930362D656436352D346233642D396463322D64636333326161363766326520617270696E67202D41202D492071672D32613638643337632D3664202D632033203137322E32342E302E31 terminal=? res=success' >type=CRED_ACQ msg=audit(1414328618.189:11372): pid=20082 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1414328618.189:11373): pid=20082 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1414328618.265:11374): pid=20081 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1414328618.265:11375): pid=20081 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1414328618.275:11376): pid=20087 uid=993 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206970206E65746E7320657865632071726F757465722D31393466373930362D656436352D346233642D396463322D6463633332616136376632652069707461626C65732D726573746F7265202D63 terminal=? res=success' >type=CRED_ACQ msg=audit(1414328618.275:11377): pid=20087 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1414328618.275:11378): pid=20087 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1414328618.288:11379): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1414328618.289:11380): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=NETFILTER_CFG msg=audit(1414328618.340:11381): table=raw family=2 entries=9 >type=SYSCALL msg=audit(1414328618.340:11381): arch=c000003e syscall=54 success=yes exit=0 a0=3 a1=0 a2=40 a3=1ac53e0 items=0 ppid=20088 pid=20089 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=NETFILTER_CFG msg=audit(1414328618.340:11382): table=mangle family=2 entries=6 >type=SYSCALL msg=audit(1414328618.340:11382): arch=c000003e syscall=54 success=yes exit=0 a0=3 a1=0 a2=40 a3=1ac50b0 items=0 ppid=20088 pid=20089 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=NETFILTER_CFG msg=audit(1414328618.341:11383): table=nat family=2 entries=24 >type=SYSCALL msg=audit(1414328618.341:11383): arch=c000003e syscall=54 success=yes exit=0 a0=3 a1=0 a2=40 a3=1ac9690 items=0 ppid=20088 pid=20089 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=NETFILTER_CFG msg=audit(1414328618.341:11384): table=filter family=2 entries=21 >type=SYSCALL msg=audit(1414328618.341:11384): arch=c000003e syscall=54 success=yes exit=0 a0=3 a1=0 a2=40 a3=1ac8f00 items=0 ppid=20088 pid=20089 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=USER_END msg=audit(1414328618.353:11385): pid=20087 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1414328618.353:11386): pid=20087 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1414328618.362:11387): pid=20090 uid=993 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206970206E65746E7320657865632071726F757465722D31393466373930362D656436352D346233642D396463322D646363333261613637663265206970367461626C65732D73617665202D63 terminal=? res=success' >type=CRED_ACQ msg=audit(1414328618.362:11388): pid=20090 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1414328618.362:11389): pid=20090 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_LOGIN msg=audit(1414328618.432:11390): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_START msg=audit(1414328618.432:11391): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414328618.433:11392): pid=20093 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=20093 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.34.60.204 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414328618.433:11393): pid=20093 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=20093 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.34.60.204 terminal=? res=success' >type=CRED_REFR msg=audit(1414328618.434:11394): pid=20093 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_END msg=audit(1414328618.441:11395): pid=20090 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1414328618.441:11396): pid=20090 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1414328618.450:11397): pid=20097 uid=993 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206970206E65746E7320657865632071726F757465722D31393466373930362D656436352D346233642D396463322D646363333261613637663265206970367461626C65732D726573746F7265202D63 terminal=? res=success' >type=CRED_ACQ msg=audit(1414328618.450:11398): pid=20097 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1414328618.450:11399): pid=20097 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=NETFILTER_CFG msg=audit(1414328618.516:11400): table=filter family=10 entries=20 >type=SYSCALL msg=audit(1414328618.516:11400): arch=c000003e syscall=54 success=yes exit=0 a0=3 a1=29 a2=40 a3=13ac660 items=0 ppid=20098 pid=20099 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=USER_END msg=audit(1414328618.533:11401): pid=20097 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1414328618.533:11402): pid=20097 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1414328618.541:11403): pid=20100 uid=993 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206970206E65746E7320657865632071726F757465722D31393466373930362D656436352D346233642D396463322D64636333326161363766326520697020616464722073686F772071672D32613638643337632D3664 terminal=? res=success' >type=CRED_ACQ msg=audit(1414328618.542:11404): pid=20100 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1414328618.542:11405): pid=20100 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1414328618.621:11406): pid=20100 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1414328618.621:11407): pid=20100 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1414328619.344:11408): pid=20113 uid=993 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D6F6663746C2064756D702D666C6F77732062722D696E74207461626C653D3233 terminal=? res=success' >type=CRED_ACQ msg=audit(1414328619.344:11409): pid=20113 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1414328619.345:11410): pid=20113 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1414328619.376:11411): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1414328619.376:11412): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_END msg=audit(1414328619.405:11413): pid=20113 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1414328619.405:11414): pid=20113 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1414328619.414:11415): pid=20116 uid=993 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D767363746C202D2D74696D656F75743D3130206C6973742D706F7274732062722D696E74 terminal=? res=success' >type=CRED_ACQ msg=audit(1414328619.414:11416): pid=20116 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1414328619.414:11417): pid=20116 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1414328619.474:11418): pid=20116 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1414328619.474:11419): pid=20116 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1414328619.483:11420): pid=20119 uid=993 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D767363746C202D2D74696D656F75743D3130202D2D666F726D61743D6A736F6E202D2D202D2D636F6C756D6E733D6E616D652C65787465726E616C5F6964732C6F66706F7274206C69737420496E74657266616365 terminal=? res=success' >type=CRED_ACQ msg=audit(1414328619.483:11421): pid=20119 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1414328619.483:11422): pid=20119 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_LOGIN msg=audit(1414328619.517:11423): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_START msg=audit(1414328619.517:11424): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414328619.518:11425): pid=20121 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=20121 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.34.60.204 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414328619.518:11426): pid=20121 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=20121 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.34.60.204 terminal=? res=success' >type=CRED_REFR msg=audit(1414328619.519:11427): pid=20121 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_END msg=audit(1414328619.543:11428): pid=20119 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1414328619.543:11429): pid=20119 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1414328619.552:11430): pid=20127 uid=993 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D767363746C202D2D74696D656F75743D3130206C6973742D706F7274732062722D696E74 terminal=? res=success' >type=CRED_ACQ msg=audit(1414328619.552:11431): pid=20127 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1414328619.552:11432): pid=20127 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1414328619.612:11433): pid=20127 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1414328619.612:11434): pid=20127 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1414328619.621:11435): pid=20130 uid=993 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D767363746C202D2D74696D656F75743D3130202D2D666F726D61743D6A736F6E202D2D202D2D636F6C756D6E733D6E616D652C746167206C69737420506F7274 terminal=? res=success' >type=CRED_ACQ msg=audit(1414328619.621:11436): pid=20130 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1414328619.621:11437): pid=20130 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1414328619.681:11438): pid=20130 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1414328619.682:11439): pid=20130 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1414328620.263:11440): pid=20082 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1414328620.263:11441): pid=20082 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1414328620.465:11442): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1414328620.465:11443): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1414328620.609:11444): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_START msg=audit(1414328620.609:11445): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414328620.609:11446): pid=20143 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=20143 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.34.60.204 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414328620.610:11447): pid=20143 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=20143 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.34.60.204 terminal=? res=success' >type=CRED_REFR msg=audit(1414328620.610:11448): pid=20143 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_END msg=audit(1414328620.951:11449): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1414328620.951:11450): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1414328621.097:11451): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_START msg=audit(1414328621.097:11452): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414328621.097:11453): pid=20152 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=20152 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.34.60.204 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414328621.097:11454): pid=20152 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=20152 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.34.60.204 terminal=? res=success' >type=CRED_REFR msg=audit(1414328621.097:11455): pid=20152 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_CMD msg=audit(1414328621.346:11456): pid=20156 uid=993 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D6F6663746C2064756D702D666C6F77732062722D696E74207461626C653D3233 terminal=? res=success' >type=CRED_ACQ msg=audit(1414328621.346:11457): pid=20156 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1414328621.346:11458): pid=20156 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1414328621.407:11459): pid=20156 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1414328621.407:11460): pid=20156 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1414328621.438:11461): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1414328621.438:11462): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1414328621.585:11463): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_START msg=audit(1414328621.585:11464): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414328621.586:11465): pid=20159 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=20159 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.34.60.204 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414328621.586:11466): pid=20159 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=20159 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.34.60.204 terminal=? res=success' >type=CRED_REFR msg=audit(1414328621.587:11467): pid=20159 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_END msg=audit(1414328621.928:11468): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1414328621.928:11469): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1414328622.072:11470): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_START msg=audit(1414328622.072:11471): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414328622.072:11472): pid=20163 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=20163 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.34.60.204 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414328622.073:11473): pid=20163 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=20163 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.34.60.204 terminal=? res=success' >type=CRED_REFR msg=audit(1414328622.073:11474): pid=20163 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_END msg=audit(1414328622.412:11475): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1414328622.412:11476): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1414328622.557:11477): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_START msg=audit(1414328622.557:11478): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414328622.558:11479): pid=20169 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=20169 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.34.60.204 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414328622.558:11480): pid=20169 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=20169 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.34.60.204 terminal=? res=success' >type=CRED_REFR msg=audit(1414328622.558:11481): pid=20169 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_END msg=audit(1414328622.899:11482): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1414328622.899:11483): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1414328623.043:11484): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_START msg=audit(1414328623.043:11485): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414328623.043:11486): pid=20173 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=20173 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.34.60.204 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414328623.043:11487): pid=20173 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=20173 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.34.60.204 terminal=? res=success' >type=CRED_REFR msg=audit(1414328623.044:11488): pid=20173 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_CMD msg=audit(1414328623.347:11489): pid=20177 uid=993 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D6F6663746C2064756D702D666C6F77732062722D696E74207461626C653D3233 terminal=? res=success' >type=CRED_ACQ msg=audit(1414328623.348:11490): pid=20177 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1414328623.348:11491): pid=20177 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1414328623.384:11492): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1414328623.384:11493): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_END msg=audit(1414328623.407:11494): pid=20177 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1414328623.407:11495): pid=20177 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_LOGIN msg=audit(1414328623.529:11496): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_START msg=audit(1414328623.529:11497): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414328623.530:11498): pid=20180 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=20180 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.34.60.204 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414328623.530:11499): pid=20180 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=20180 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.34.60.204 terminal=? res=success' >type=CRED_REFR msg=audit(1414328623.531:11500): pid=20180 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_END msg=audit(1414328623.872:11501): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1414328623.872:11502): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1414328624.015:11503): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_START msg=audit(1414328624.015:11504): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414328624.015:11505): pid=20184 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=20184 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.34.60.204 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414328624.016:11506): pid=20184 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=20184 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.34.60.204 terminal=? res=success' >type=CRED_REFR msg=audit(1414328624.016:11507): pid=20184 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_END msg=audit(1414328624.358:11508): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1414328624.358:11509): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1414328624.502:11510): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_START msg=audit(1414328624.502:11511): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414328624.503:11512): pid=20188 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=20188 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.34.60.204 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414328624.503:11513): pid=20188 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=20188 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.34.60.204 terminal=? res=success' >type=CRED_REFR msg=audit(1414328624.503:11514): pid=20188 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_END msg=audit(1414328624.844:11515): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1414328624.844:11516): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1414328624.991:11517): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_START msg=audit(1414328624.991:11518): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414328624.991:11519): pid=20192 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=20192 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.34.60.204 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414328624.991:11520): pid=20192 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=20192 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.34.60.204 terminal=? res=success' >type=CRED_REFR msg=audit(1414328624.992:11521): pid=20192 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_END msg=audit(1414328625.334:11522): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1414328625.334:11523): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_CMD msg=audit(1414328625.349:11524): pid=20196 uid=993 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D6F6663746C2064756D702D666C6F77732062722D696E74207461626C653D3233 terminal=? res=success' >type=CRED_ACQ msg=audit(1414328625.349:11525): pid=20196 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1414328625.349:11526): pid=20196 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1414328625.410:11527): pid=20196 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1414328625.411:11528): pid=20196 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_LOGIN msg=audit(1414328625.479:11529): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_START msg=audit(1414328625.479:11530): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414328625.479:11531): pid=20199 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=20199 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.34.60.204 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414328625.480:11532): pid=20199 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=20199 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.34.60.204 terminal=? res=success' >type=CRED_REFR msg=audit(1414328625.480:11533): pid=20199 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_END msg=audit(1414328625.822:11534): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1414328625.822:11535): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1414328625.968:11536): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_START msg=audit(1414328625.968:11537): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414328625.968:11538): pid=20203 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=20203 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.34.60.204 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414328625.968:11539): pid=20203 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=20203 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.34.60.204 terminal=? res=success' >type=CRED_REFR msg=audit(1414328625.969:11540): pid=20203 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_END msg=audit(1414328626.314:11541): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1414328626.314:11542): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1414328626.458:11543): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_START msg=audit(1414328626.458:11544): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414328626.458:11545): pid=20207 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=20207 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.34.60.204 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414328626.458:11546): pid=20207 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=20207 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.34.60.204 terminal=? res=success' >type=CRED_REFR msg=audit(1414328626.459:11547): pid=20207 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_END msg=audit(1414328626.803:11548): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1414328626.803:11549): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1414328626.948:11550): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_START msg=audit(1414328626.948:11551): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414328626.948:11552): pid=20211 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=20211 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.34.60.204 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414328626.949:11553): pid=20211 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=20211 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.34.60.204 terminal=? res=success' >type=CRED_REFR msg=audit(1414328626.949:11554): pid=20211 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_END msg=audit(1414328627.290:11555): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1414328627.290:11556): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_CMD msg=audit(1414328627.351:11557): pid=20215 uid=993 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D6F6663746C2064756D702D666C6F77732062722D696E74207461626C653D3233 terminal=? res=success' >type=CRED_ACQ msg=audit(1414328627.351:11558): pid=20215 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1414328627.351:11559): pid=20215 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1414328627.411:11560): pid=20215 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1414328627.412:11561): pid=20215 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_LOGIN msg=audit(1414328627.435:11562): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_START msg=audit(1414328627.435:11563): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414328627.435:11564): pid=20218 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=20218 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.34.60.204 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414328627.436:11565): pid=20218 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=20218 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.34.60.204 terminal=? res=success' >type=CRED_REFR msg=audit(1414328627.436:11566): pid=20218 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_END msg=audit(1414328627.778:11567): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1414328627.778:11568): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1414328627.922:11569): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_START msg=audit(1414328627.922:11570): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414328627.922:11571): pid=20225 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=20225 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.34.60.204 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414328627.923:11572): pid=20225 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=20225 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.34.60.204 terminal=? res=success' >type=CRED_REFR msg=audit(1414328627.923:11573): pid=20225 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_END msg=audit(1414328628.264:11574): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1414328628.265:11575): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1414328628.411:11576): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_START msg=audit(1414328628.411:11577): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414328628.411:11578): pid=20229 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=20229 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.34.60.204 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414328628.411:11579): pid=20229 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=20229 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.34.60.204 terminal=? res=success' >type=CRED_REFR msg=audit(1414328628.412:11580): pid=20229 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_END msg=audit(1414328628.754:11581): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1414328628.754:11582): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1414328628.899:11583): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_START msg=audit(1414328628.899:11584): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414328628.900:11585): pid=20233 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=20233 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.34.60.204 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414328628.900:11586): pid=20233 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=20233 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.34.60.204 terminal=? res=success' >type=CRED_REFR msg=audit(1414328628.900:11587): pid=20233 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_END msg=audit(1414328629.202:11588): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1414328629.202:11589): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_CMD msg=audit(1414328629.353:11590): pid=20237 uid=993 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D6F6663746C2064756D702D666C6F77732062722D696E74207461626C653D3233 terminal=? res=success' >type=CRED_ACQ msg=audit(1414328629.353:11591): pid=20237 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1414328629.353:11592): pid=20237 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_LOGIN msg=audit(1414328629.361:11593): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_START msg=audit(1414328629.361:11594): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414328629.362:11595): pid=20239 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=20239 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.34.60.204 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414328629.362:11596): pid=20239 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=20239 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.34.60.204 terminal=? res=success' >type=CRED_REFR msg=audit(1414328629.363:11597): pid=20239 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_END msg=audit(1414328629.417:11598): pid=20237 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1414328629.417:11599): pid=20237 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1414328629.669:11600): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1414328629.669:11601): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1414328629.828:11602): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_START msg=audit(1414328629.828:11603): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414328629.829:11604): pid=20244 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=20244 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.34.60.204 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414328629.829:11605): pid=20244 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=20244 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.34.60.204 terminal=? res=success' >type=CRED_REFR msg=audit(1414328629.829:11606): pid=20244 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_END msg=audit(1414328630.169:11607): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1414328630.169:11608): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1414328630.315:11609): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_START msg=audit(1414328630.315:11610): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414328630.316:11611): pid=20248 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=20248 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.34.60.204 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414328630.316:11612): pid=20248 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=20248 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.34.60.204 terminal=? res=success' >type=CRED_REFR msg=audit(1414328630.316:11613): pid=20248 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_END msg=audit(1414328630.659:11614): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1414328630.659:11615): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1414328630.804:11616): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_START msg=audit(1414328630.804:11617): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414328630.804:11618): pid=20252 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=20252 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.34.60.204 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414328630.805:11619): pid=20252 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=20252 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.34.60.204 terminal=? res=success' >type=CRED_REFR msg=audit(1414328630.805:11620): pid=20252 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_END msg=audit(1414328631.159:11621): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1414328631.159:11622): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1414328631.302:11623): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_START msg=audit(1414328631.302:11624): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414328631.303:11625): pid=20256 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=20256 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.34.60.204 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414328631.303:11626): pid=20256 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=20256 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.34.60.204 terminal=? res=success' >type=CRED_REFR msg=audit(1414328631.303:11627): pid=20256 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_CMD msg=audit(1414328631.354:11628): pid=20260 uid=993 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D6F6663746C2064756D702D666C6F77732062722D696E74207461626C653D3233 terminal=? res=success' >type=CRED_ACQ msg=audit(1414328631.354:11629): pid=20260 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1414328631.355:11630): pid=20260 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1414328631.413:11631): pid=20260 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1414328631.413:11632): pid=20260 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1414328631.607:11633): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1414328631.607:11634): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1414328631.766:11635): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_START msg=audit(1414328631.766:11636): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414328631.767:11637): pid=20263 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=20263 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.34.60.204 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414328631.767:11638): pid=20263 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=20263 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.34.60.204 terminal=? res=success' >type=CRED_REFR msg=audit(1414328631.768:11639): pid=20263 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_END msg=audit(1414328632.108:11640): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1414328632.108:11641): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1414328632.252:11642): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_START msg=audit(1414328632.252:11643): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414328632.253:11644): pid=20269 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=20269 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.34.60.204 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414328632.253:11645): pid=20269 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=20269 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.34.60.204 terminal=? res=success' >type=CRED_REFR msg=audit(1414328632.253:11646): pid=20269 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_END msg=audit(1414328632.596:11647): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1414328632.596:11648): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1414328632.740:11649): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_START msg=audit(1414328632.740:11650): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414328632.741:11651): pid=20273 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=20273 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.34.60.204 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414328632.741:11652): pid=20273 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=20273 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.34.60.204 terminal=? res=success' >type=CRED_REFR msg=audit(1414328632.742:11653): pid=20273 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_END msg=audit(1414328633.085:11654): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1414328633.085:11655): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1414328633.229:11656): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_START msg=audit(1414328633.229:11657): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414328633.230:11658): pid=20277 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=20277 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.34.60.204 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414328633.230:11659): pid=20277 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=20277 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.34.60.204 terminal=? res=success' >type=CRED_REFR msg=audit(1414328633.230:11660): pid=20277 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_CMD msg=audit(1414328633.355:11661): pid=20281 uid=993 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D6F6663746C2064756D702D666C6F77732062722D696E74207461626C653D3233 terminal=? res=success' >type=CRED_ACQ msg=audit(1414328633.356:11662): pid=20281 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1414328633.356:11663): pid=20281 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1414328633.414:11664): pid=20281 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1414328633.415:11665): pid=20281 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1414328633.571:11666): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1414328633.572:11667): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1414328633.716:11668): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_START msg=audit(1414328633.716:11669): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414328633.716:11670): pid=20284 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=20284 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.34.60.204 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414328633.716:11671): pid=20284 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=20284 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.34.60.204 terminal=? res=success' >type=CRED_REFR msg=audit(1414328633.716:11672): pid=20284 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_END msg=audit(1414328634.020:11673): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1414328634.020:11674): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1414328634.178:11675): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_START msg=audit(1414328634.178:11676): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414328634.179:11677): pid=20288 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=20288 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.34.60.204 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414328634.179:11678): pid=20288 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=20288 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.34.60.204 terminal=? res=success' >type=CRED_REFR msg=audit(1414328634.179:11679): pid=20288 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_END msg=audit(1414328634.520:11680): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1414328634.520:11681): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1414328634.665:11682): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_START msg=audit(1414328634.665:11683): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414328634.666:11684): pid=20292 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=20292 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.34.60.204 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414328634.666:11685): pid=20292 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=20292 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.34.60.204 terminal=? res=success' >type=CRED_REFR msg=audit(1414328634.666:11686): pid=20292 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_END msg=audit(1414328635.007:11687): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1414328635.007:11688): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1414328635.152:11689): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_START msg=audit(1414328635.152:11690): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414328635.152:11691): pid=20296 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=20296 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.34.60.204 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414328635.153:11692): pid=20296 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=20296 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.34.60.204 terminal=? res=success' >type=CRED_REFR msg=audit(1414328635.153:11693): pid=20296 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_CMD msg=audit(1414328635.357:11694): pid=20300 uid=993 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D6F6663746C2064756D702D666C6F77732062722D696E74207461626C653D3233 terminal=? res=success' >type=CRED_ACQ msg=audit(1414328635.357:11695): pid=20300 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1414328635.357:11696): pid=20300 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1414328635.416:11697): pid=20300 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1414328635.416:11698): pid=20300 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1414328635.495:11699): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1414328635.495:11700): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1414328635.638:11701): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_START msg=audit(1414328635.638:11702): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414328635.639:11703): pid=20303 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=20303 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.34.60.204 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414328635.639:11704): pid=20303 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=20303 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.34.60.204 terminal=? res=success' >type=CRED_REFR msg=audit(1414328635.640:11705): pid=20303 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_END msg=audit(1414328635.982:11706): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1414328635.982:11707): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1414328636.126:11708): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_START msg=audit(1414328636.126:11709): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414328636.127:11710): pid=20307 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=20307 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.34.60.204 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414328636.127:11711): pid=20307 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=20307 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.34.60.204 terminal=? res=success' >type=CRED_REFR msg=audit(1414328636.128:11712): pid=20307 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_END msg=audit(1414328636.472:11713): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1414328636.472:11714): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1414328636.618:11715): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_START msg=audit(1414328636.618:11716): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414328636.618:11717): pid=20311 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=20311 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.34.60.204 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414328636.618:11718): pid=20311 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=20311 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.34.60.204 terminal=? res=success' >type=CRED_REFR msg=audit(1414328636.619:11719): pid=20311 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_END msg=audit(1414328636.961:11720): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1414328636.961:11721): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1414328637.106:11722): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_START msg=audit(1414328637.106:11723): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414328637.106:11724): pid=20315 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=20315 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.34.60.204 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414328637.106:11725): pid=20315 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=20315 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.34.60.204 terminal=? res=success' >type=CRED_REFR msg=audit(1414328637.107:11726): pid=20315 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_CMD msg=audit(1414328637.359:11727): pid=20319 uid=993 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D6F6663746C2064756D702D666C6F77732062722D696E74207461626C653D3233 terminal=? res=success' >type=CRED_ACQ msg=audit(1414328637.359:11728): pid=20319 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1414328637.360:11729): pid=20319 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1414328637.422:11730): pid=20319 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1414328637.422:11731): pid=20319 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1414328637.448:11732): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1414328637.448:11733): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1414328637.592:11734): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_START msg=audit(1414328637.592:11735): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414328637.592:11736): pid=20322 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=20322 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.34.60.204 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414328637.593:11737): pid=20322 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=20322 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.34.60.204 terminal=? res=success' >type=CRED_REFR msg=audit(1414328637.593:11738): pid=20322 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_END msg=audit(1414328637.932:11739): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1414328637.932:11740): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1414328638.078:11741): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_START msg=audit(1414328638.078:11742): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414328638.079:11743): pid=20326 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=20326 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.34.60.204 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414328638.079:11744): pid=20326 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=20326 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.34.60.204 terminal=? res=success' >type=CRED_REFR msg=audit(1414328638.079:11745): pid=20326 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_END msg=audit(1414328638.420:11746): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1414328638.420:11747): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1414328638.565:11748): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_START msg=audit(1414328638.565:11749): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414328638.566:11750): pid=20330 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=20330 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.34.60.204 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414328638.566:11751): pid=20330 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=20330 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.34.60.204 terminal=? res=success' >type=CRED_REFR msg=audit(1414328638.566:11752): pid=20330 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_END msg=audit(1414328638.907:11753): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1414328638.907:11754): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1414328639.053:11755): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_START msg=audit(1414328639.053:11756): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414328639.054:11757): pid=20334 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=20334 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.34.60.204 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414328639.054:11758): pid=20334 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=20334 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.34.60.204 terminal=? res=success' >type=CRED_REFR msg=audit(1414328639.054:11759): pid=20334 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_END msg=audit(1414328639.358:11760): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1414328639.358:11761): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_CMD msg=audit(1414328639.361:11762): pid=20338 uid=993 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D6F6663746C2064756D702D666C6F77732062722D696E74207461626C653D3233 terminal=? res=success' >type=CRED_ACQ msg=audit(1414328639.361:11763): pid=20338 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1414328639.362:11764): pid=20338 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1414328639.421:11765): pid=20338 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1414328639.422:11766): pid=20338 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_LOGIN msg=audit(1414328639.518:11767): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_START msg=audit(1414328639.518:11768): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414328639.519:11769): pid=20341 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=20341 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.34.60.204 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414328639.519:11770): pid=20341 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=20341 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.34.60.204 terminal=? res=success' >type=CRED_REFR msg=audit(1414328639.520:11771): pid=20341 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_END msg=audit(1414328639.862:11772): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1414328639.862:11773): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1414328640.006:11774): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_START msg=audit(1414328640.006:11775): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414328640.007:11776): pid=20345 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=20345 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.34.60.204 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414328640.007:11777): pid=20345 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=20345 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.34.60.204 terminal=? res=success' >type=CRED_REFR msg=audit(1414328640.007:11778): pid=20345 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_END msg=audit(1414328640.317:11779): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1414328640.317:11780): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1414328640.475:11781): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_START msg=audit(1414328640.475:11782): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414328640.476:11783): pid=20349 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=20349 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.34.60.204 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414328640.476:11784): pid=20349 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=20349 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.34.60.204 terminal=? res=success' >type=CRED_REFR msg=audit(1414328640.476:11785): pid=20349 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_END msg=audit(1414328640.819:11786): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1414328640.819:11787): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1414328640.965:11788): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_START msg=audit(1414328640.965:11789): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414328640.965:11790): pid=20353 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=20353 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.34.60.204 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414328640.965:11791): pid=20353 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=20353 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.34.60.204 terminal=? res=success' >type=CRED_REFR msg=audit(1414328640.965:11792): pid=20353 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_END msg=audit(1414328641.269:11793): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1414328641.269:11794): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_CMD msg=audit(1414328641.361:11795): pid=20357 uid=993 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D6F6663746C2064756D702D666C6F77732062722D696E74207461626C653D3233 terminal=? res=success' >type=CRED_ACQ msg=audit(1414328641.361:11796): pid=20357 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1414328641.362:11797): pid=20357 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1414328641.421:11798): pid=20357 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1414328641.421:11799): pid=20357 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_LOGIN msg=audit(1414328641.433:11800): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_START msg=audit(1414328641.433:11801): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414328641.434:11802): pid=20360 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=20360 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.34.60.204 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414328641.434:11803): pid=20360 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=20360 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.34.60.204 terminal=? res=success' >type=CRED_REFR msg=audit(1414328641.434:11804): pid=20360 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_ACCT msg=audit(1414328641.517:11805): pid=20364 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="keystone" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1414328641.517:11806): pid=20364 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="keystone" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1414328641.518:11807): pid=20364 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=163 old-ses=4294967295 ses=347 res=1 >type=USER_START msg=audit(1414328641.532:11808): pid=20364 uid=0 auid=163 ses=347 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="keystone" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1414328641.533:11809): pid=20364 uid=0 auid=163 ses=347 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="keystone" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1414328641.774:11810): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1414328641.774:11811): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1414328641.921:11812): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_START msg=audit(1414328641.921:11813): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414328641.922:11814): pid=20374 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=20374 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.34.60.204 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414328641.922:11815): pid=20374 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=20374 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.34.60.204 terminal=? res=success' >type=CRED_REFR msg=audit(1414328641.923:11816): pid=20374 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=CRED_DISP msg=audit(1414328642.172:11817): pid=20364 uid=0 auid=163 ses=347 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="keystone" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1414328642.173:11818): pid=20364 uid=0 auid=163 ses=347 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="keystone" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1414328642.271:11819): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1414328642.271:11820): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1414328642.421:11821): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_START msg=audit(1414328642.421:11822): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414328642.429:11823): pid=20384 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=20384 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.34.60.204 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414328642.429:11824): pid=20384 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=20384 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.34.60.204 terminal=? res=success' >type=CRED_REFR msg=audit(1414328642.430:11825): pid=20384 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_END msg=audit(1414328642.770:11826): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1414328642.770:11827): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1414328642.914:11828): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_START msg=audit(1414328642.914:11829): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414328642.914:11830): pid=20388 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=20388 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.34.60.204 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414328642.914:11831): pid=20388 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=20388 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.34.60.204 terminal=? res=success' >type=CRED_REFR msg=audit(1414328642.915:11832): pid=20388 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_END msg=audit(1414328643.255:11833): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1414328643.255:11834): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_CMD msg=audit(1414328643.363:11835): pid=20392 uid=993 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D6F6663746C2064756D702D666C6F77732062722D696E74207461626C653D3233 terminal=? res=success' >type=CRED_ACQ msg=audit(1414328643.364:11836): pid=20392 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1414328643.364:11837): pid=20392 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_LOGIN msg=audit(1414328643.398:11838): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_START msg=audit(1414328643.398:11839): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414328643.399:11840): pid=20394 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=20394 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.34.60.204 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414328643.399:11841): pid=20394 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=20394 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.34.60.204 terminal=? res=success' >type=CRED_REFR msg=audit(1414328643.400:11842): pid=20394 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_END msg=audit(1414328643.425:11843): pid=20392 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1414328643.425:11844): pid=20392 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1414328643.743:11845): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1414328643.743:11846): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1414328643.888:11847): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_START msg=audit(1414328643.888:11848): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414328643.888:11849): pid=20399 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=20399 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.34.60.204 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414328643.888:11850): pid=20399 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=20399 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.34.60.204 terminal=? res=success' >type=CRED_REFR msg=audit(1414328643.889:11851): pid=20399 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_END msg=audit(1414328644.231:11852): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1414328644.231:11853): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1414328644.374:11854): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_START msg=audit(1414328644.374:11855): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414328644.374:11856): pid=20403 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=20403 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.34.60.204 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414328644.374:11857): pid=20403 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=20403 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.34.60.204 terminal=? res=success' >type=CRED_REFR msg=audit(1414328644.375:11858): pid=20403 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_END msg=audit(1414328644.717:11859): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1414328644.717:11860): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1414328644.866:11861): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_START msg=audit(1414328644.866:11862): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414328644.867:11863): pid=20407 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=20407 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.34.60.204 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414328644.867:11864): pid=20407 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=20407 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.34.60.204 terminal=? res=success' >type=CRED_REFR msg=audit(1414328644.867:11865): pid=20407 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_END msg=audit(1414328645.211:11866): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1414328645.211:11867): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1414328645.354:11868): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_START msg=audit(1414328645.354:11869): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414328645.355:11870): pid=20411 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=20411 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.34.60.204 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414328645.355:11871): pid=20411 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=20411 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.34.60.204 terminal=? res=success' >type=CRED_REFR msg=audit(1414328645.355:11872): pid=20411 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_CMD msg=audit(1414328645.364:11873): pid=20412 uid=993 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D6F6663746C2064756D702D666C6F77732062722D696E74207461626C653D3233 terminal=? res=success' >type=CRED_ACQ msg=audit(1414328645.364:11874): pid=20412 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1414328645.365:11875): pid=20412 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1414328645.424:11876): pid=20412 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1414328645.424:11877): pid=20412 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1414328645.701:11878): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1414328645.701:11879): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1414328645.845:11880): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_START msg=audit(1414328645.845:11881): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414328645.845:11882): pid=20418 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=20418 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.34.60.204 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414328645.845:11883): pid=20418 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=20418 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.34.60.204 terminal=? res=success' >type=CRED_REFR msg=audit(1414328645.846:11884): pid=20418 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_END msg=audit(1414328646.524:11885): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1414328646.525:11886): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1414328646.649:11887): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_START msg=audit(1414328646.649:11888): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414328646.650:11889): pid=20422 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=20422 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.34.60.204 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414328646.650:11890): pid=20422 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=20422 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.34.60.204 terminal=? res=success' >type=CRED_REFR msg=audit(1414328646.650:11891): pid=20422 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_END msg=audit(1414328646.992:11892): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1414328646.992:11893): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1414328647.138:11894): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_START msg=audit(1414328647.138:11895): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414328647.138:11896): pid=20426 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=20426 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.34.60.204 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414328647.138:11897): pid=20426 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=20426 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.34.60.204 terminal=? res=success' >type=CRED_REFR msg=audit(1414328647.138:11898): pid=20426 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_CMD msg=audit(1414328647.365:11899): pid=20430 uid=993 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D6F6663746C2064756D702D666C6F77732062722D696E74207461626C653D3233 terminal=? res=success' >type=CRED_ACQ msg=audit(1414328647.366:11900): pid=20430 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1414328647.366:11901): pid=20430 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1414328647.428:11902): pid=20430 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1414328647.428:11903): pid=20430 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1414328647.441:11904): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1414328647.441:11905): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1414328647.599:11906): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_START msg=audit(1414328647.599:11907): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414328647.600:11908): pid=20433 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=20433 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.34.60.204 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414328647.600:11909): pid=20433 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=20433 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.34.60.204 terminal=? res=success' >type=CRED_REFR msg=audit(1414328647.600:11910): pid=20433 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_END msg=audit(1414328647.943:11911): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1414328647.943:11912): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1414328648.087:11913): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_START msg=audit(1414328648.087:11914): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414328648.087:11915): pid=20437 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=20437 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.34.60.204 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414328648.087:11916): pid=20437 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=20437 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.34.60.204 terminal=? res=success' >type=CRED_REFR msg=audit(1414328648.087:11917): pid=20437 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_END msg=audit(1414328648.391:11918): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1414328648.391:11919): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1414328648.550:11920): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_START msg=audit(1414328648.550:11921): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414328648.551:11922): pid=20441 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=20441 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.34.60.204 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414328648.551:11923): pid=20441 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=20441 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.34.60.204 terminal=? res=success' >type=CRED_REFR msg=audit(1414328648.551:11924): pid=20441 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_END msg=audit(1414328648.894:11925): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1414328648.894:11926): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1414328649.039:11927): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_START msg=audit(1414328649.039:11928): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414328649.039:11929): pid=20445 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=20445 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.34.60.204 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414328649.039:11930): pid=20445 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=20445 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.34.60.204 terminal=? res=success' >type=CRED_REFR msg=audit(1414328649.040:11931): pid=20445 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_END msg=audit(1414328649.342:11932): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1414328649.342:11933): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_CMD msg=audit(1414328649.367:11934): pid=20449 uid=993 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D6F6663746C2064756D702D666C6F77732062722D696E74207461626C653D3233 terminal=? res=success' >type=CRED_ACQ msg=audit(1414328649.367:11935): pid=20449 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1414328649.367:11936): pid=20449 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1414328649.426:11937): pid=20449 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1414328649.426:11938): pid=20449 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_LOGIN msg=audit(1414328649.502:11939): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_START msg=audit(1414328649.502:11940): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414328649.502:11941): pid=20452 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=20452 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.34.60.204 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414328649.502:11942): pid=20452 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=20452 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.34.60.204 terminal=? res=success' >type=CRED_REFR msg=audit(1414328649.503:11943): pid=20452 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_END msg=audit(1414328649.845:11944): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1414328649.845:11945): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1414328649.991:11946): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_START msg=audit(1414328649.991:11947): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414328649.991:11948): pid=20456 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=20456 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.34.60.204 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414328649.991:11949): pid=20456 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=20456 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.34.60.204 terminal=? res=success' >type=CRED_REFR msg=audit(1414328649.992:11950): pid=20456 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_END msg=audit(1414328650.297:11951): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1414328650.297:11952): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1414328650.456:11953): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_START msg=audit(1414328650.456:11954): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414328650.456:11955): pid=20460 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=20460 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.34.60.204 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414328650.456:11956): pid=20460 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=20460 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.34.60.204 terminal=? res=success' >type=CRED_REFR msg=audit(1414328650.457:11957): pid=20460 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_END msg=audit(1414328650.801:11958): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1414328650.801:11959): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1414328650.943:11960): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_START msg=audit(1414328650.943:11961): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414328650.943:11962): pid=20464 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=20464 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.34.60.204 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414328650.944:11963): pid=20464 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=20464 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.34.60.204 terminal=? res=success' >type=CRED_REFR msg=audit(1414328650.944:11964): pid=20464 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_END msg=audit(1414328651.287:11965): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1414328651.287:11966): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_CMD msg=audit(1414328651.369:11967): pid=20468 uid=993 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D6F6663746C2064756D702D666C6F77732062722D696E74207461626C653D3233 terminal=? res=success' >type=CRED_ACQ msg=audit(1414328651.370:11968): pid=20468 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1414328651.370:11969): pid=20468 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1414328651.428:11970): pid=20468 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1414328651.429:11971): pid=20468 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_LOGIN msg=audit(1414328651.431:11972): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_START msg=audit(1414328651.431:11973): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414328651.432:11974): pid=20471 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=20471 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.34.60.204 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414328651.432:11975): pid=20471 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=20471 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.34.60.204 terminal=? res=success' >type=CRED_REFR msg=audit(1414328651.432:11976): pid=20471 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_END msg=audit(1414328651.774:11977): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1414328651.774:11978): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1414328651.919:11979): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_START msg=audit(1414328651.919:11980): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414328651.920:11981): pid=20475 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=20475 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.34.60.204 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414328651.920:11982): pid=20475 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=20475 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.34.60.204 terminal=? res=success' >type=CRED_REFR msg=audit(1414328651.920:11983): pid=20475 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_END msg=audit(1414328652.262:11984): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1414328652.262:11985): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1414328652.406:11986): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_START msg=audit(1414328652.406:11987): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414328652.406:11988): pid=20481 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=20481 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.34.60.204 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414328652.406:11989): pid=20481 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=20481 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.34.60.204 terminal=? res=success' >type=CRED_REFR msg=audit(1414328652.407:11990): pid=20481 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_END msg=audit(1414328652.749:11991): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1414328652.749:11992): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1414328652.897:11993): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_START msg=audit(1414328652.897:11994): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414328652.897:11995): pid=20485 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=20485 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.34.60.204 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414328652.897:11996): pid=20485 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=20485 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.34.60.204 terminal=? res=success' >type=CRED_REFR msg=audit(1414328652.898:11997): pid=20485 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_END msg=audit(1414328653.239:11998): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1414328653.239:11999): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_CMD msg=audit(1414328653.371:12000): pid=20489 uid=993 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D6F6663746C2064756D702D666C6F77732062722D696E74207461626C653D3233 terminal=? res=success' >type=CRED_ACQ msg=audit(1414328653.371:12001): pid=20489 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1414328653.371:12002): pid=20489 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_LOGIN msg=audit(1414328653.384:12003): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_START msg=audit(1414328653.384:12004): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414328653.385:12005): pid=20491 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=20491 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.34.60.204 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414328653.385:12006): pid=20491 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=20491 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.34.60.204 terminal=? res=success' >type=CRED_REFR msg=audit(1414328653.385:12007): pid=20491 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_END msg=audit(1414328653.437:12008): pid=20489 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1414328653.437:12009): pid=20489 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1414328653.458:12010): pid=20496 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D4320766773202D2D6E6F68656164696E6773202D2D756E69743D67202D6F206E616D652C73697A652C667265652C6C765F636F756E742C75756964202D2D736570617261746F72203A202D2D6E6F7375666669782063696E6465722D766F6C756D6573 terminal=? res=success' >type=CRED_ACQ msg=audit(1414328653.458:12011): pid=20496 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1414328653.460:12012): pid=20496 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1414328653.535:12013): pid=20496 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1414328653.535:12014): pid=20496 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1414328653.742:12015): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1414328653.742:12016): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1414328653.885:12017): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_START msg=audit(1414328653.885:12018): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414328653.885:12019): pid=20499 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=20499 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.34.60.204 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414328653.886:12020): pid=20499 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=20499 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.34.60.204 terminal=? res=success' >type=CRED_REFR msg=audit(1414328653.886:12021): pid=20499 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_END msg=audit(1414328654.231:12022): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1414328654.231:12023): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1414328654.375:12024): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_START msg=audit(1414328654.375:12025): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414328654.375:12026): pid=20503 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=20503 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.34.60.204 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414328654.376:12027): pid=20503 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=20503 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.34.60.204 terminal=? res=success' >type=CRED_REFR msg=audit(1414328654.376:12028): pid=20503 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_END msg=audit(1414328654.681:12029): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1414328654.681:12030): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1414328654.841:12031): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_START msg=audit(1414328654.841:12032): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414328654.841:12033): pid=20507 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=20507 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.34.60.204 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414328654.842:12034): pid=20507 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=20507 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.34.60.204 terminal=? res=success' >type=CRED_REFR msg=audit(1414328654.842:12035): pid=20507 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_END msg=audit(1414328655.147:12036): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1414328655.147:12037): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1414328655.306:12038): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_START msg=audit(1414328655.306:12039): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414328655.307:12040): pid=20511 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=20511 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.34.60.204 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414328655.307:12041): pid=20511 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=20511 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.34.60.204 terminal=? res=success' >type=CRED_REFR msg=audit(1414328655.307:12042): pid=20511 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_CMD msg=audit(1414328655.373:12043): pid=20515 uid=993 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D6F6663746C2064756D702D666C6F77732062722D696E74207461626C653D3233 terminal=? res=success' >type=CRED_ACQ msg=audit(1414328655.374:12044): pid=20515 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1414328655.374:12045): pid=20515 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1414328655.443:12046): pid=20515 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1414328655.443:12047): pid=20515 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1414328655.655:12048): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1414328655.655:12049): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1414328655.799:12050): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_START msg=audit(1414328655.799:12051): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414328655.799:12052): pid=20518 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=20518 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.34.60.204 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414328655.800:12053): pid=20518 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=20518 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.34.60.204 terminal=? res=success' >type=CRED_REFR msg=audit(1414328655.800:12054): pid=20518 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_END msg=audit(1414328656.144:12055): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1414328656.144:12056): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1414328656.287:12057): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_START msg=audit(1414328656.287:12058): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414328656.288:12059): pid=20522 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=20522 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.34.60.204 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414328656.288:12060): pid=20522 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=20522 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.34.60.204 terminal=? res=success' >type=CRED_REFR msg=audit(1414328656.289:12061): pid=20522 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_END msg=audit(1414328656.642:12062): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1414328656.642:12063): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1414328656.787:12064): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_START msg=audit(1414328656.787:12065): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414328656.788:12066): pid=20526 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=20526 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.34.60.204 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414328656.788:12067): pid=20526 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=20526 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.34.60.204 terminal=? res=success' >type=CRED_REFR msg=audit(1414328656.788:12068): pid=20526 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_END msg=audit(1414328657.131:12069): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1414328657.131:12070): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1414328657.275:12071): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_START msg=audit(1414328657.275:12072): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414328657.276:12073): pid=20530 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=20530 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.34.60.204 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414328657.276:12074): pid=20530 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=20530 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.34.60.204 terminal=? res=success' >type=CRED_REFR msg=audit(1414328657.276:12075): pid=20530 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_CMD msg=audit(1414328657.375:12076): pid=20534 uid=993 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D6F6663746C2064756D702D666C6F77732062722D696E74207461626C653D3233 terminal=? res=success' >type=CRED_ACQ msg=audit(1414328657.375:12077): pid=20534 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1414328657.375:12078): pid=20534 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1414328657.437:12079): pid=20534 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1414328657.437:12080): pid=20534 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1414328657.621:12081): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1414328657.621:12082): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1414328657.767:12083): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_START msg=audit(1414328657.767:12084): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414328657.768:12085): pid=20543 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=20543 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.34.60.204 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414328657.768:12086): pid=20543 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=20543 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.34.60.204 terminal=? res=success' >type=CRED_REFR msg=audit(1414328657.769:12087): pid=20543 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_END msg=audit(1414328658.114:12088): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1414328658.114:12089): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1414328658.258:12090): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_START msg=audit(1414328658.258:12091): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414328658.258:12092): pid=20547 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=20547 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.34.60.204 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414328658.258:12093): pid=20547 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=20547 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.34.60.204 terminal=? res=success' >type=CRED_REFR msg=audit(1414328658.259:12094): pid=20547 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_END msg=audit(1414328658.606:12095): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1414328658.606:12096): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1414328658.750:12097): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_START msg=audit(1414328658.750:12098): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414328658.750:12099): pid=20551 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=20551 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.34.60.204 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414328658.750:12100): pid=20551 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=20551 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.34.60.204 terminal=? res=success' >type=CRED_REFR msg=audit(1414328658.751:12101): pid=20551 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_END msg=audit(1414328659.094:12102): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1414328659.094:12103): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1414328659.238:12104): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_START msg=audit(1414328659.238:12105): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414328659.238:12106): pid=20555 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=20555 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.34.60.204 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414328659.238:12107): pid=20555 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=20555 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.34.60.204 terminal=? res=success' >type=CRED_REFR msg=audit(1414328659.239:12108): pid=20555 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_CMD msg=audit(1414328659.375:12109): pid=20559 uid=993 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D6F6663746C2064756D702D666C6F77732062722D696E74207461626C653D3233 terminal=? res=success' >type=CRED_ACQ msg=audit(1414328659.375:12110): pid=20559 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1414328659.376:12111): pid=20559 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1414328659.435:12112): pid=20559 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1414328659.435:12113): pid=20559 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1414328659.543:12114): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1414328659.543:12115): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1414328659.702:12116): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_START msg=audit(1414328659.702:12117): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414328659.702:12118): pid=20562 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=20562 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.34.60.204 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414328659.702:12119): pid=20562 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=20562 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.34.60.204 terminal=? res=success' >type=CRED_REFR msg=audit(1414328659.703:12120): pid=20562 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_END msg=audit(1414328660.045:12121): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1414328660.045:12122): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1414328660.188:12123): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_START msg=audit(1414328660.188:12124): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414328660.189:12125): pid=20566 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=20566 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.34.60.204 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414328660.189:12126): pid=20566 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=20566 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.34.60.204 terminal=? res=success' >type=CRED_REFR msg=audit(1414328660.189:12127): pid=20566 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_END msg=audit(1414328660.530:12128): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1414328660.530:12129): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1414328660.676:12130): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_START msg=audit(1414328660.676:12131): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414328660.676:12132): pid=20570 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=20570 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.34.60.204 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414328660.676:12133): pid=20570 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=20570 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.34.60.204 terminal=? res=success' >type=CRED_REFR msg=audit(1414328660.677:12134): pid=20570 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_END msg=audit(1414328660.980:12135): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1414328660.980:12136): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1414328661.138:12137): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_START msg=audit(1414328661.138:12138): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414328661.139:12139): pid=20574 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=20574 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.34.60.204 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414328661.139:12140): pid=20574 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=20574 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.34.60.204 terminal=? res=success' >type=CRED_REFR msg=audit(1414328661.139:12141): pid=20574 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_CMD msg=audit(1414328661.376:12142): pid=20578 uid=993 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D6F6663746C2064756D702D666C6F77732062722D696E74207461626C653D3233 terminal=? res=success' >type=CRED_ACQ msg=audit(1414328661.376:12143): pid=20578 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1414328661.377:12144): pid=20578 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1414328661.435:12145): pid=20578 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1414328661.436:12146): pid=20578 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1414328661.483:12147): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1414328661.483:12148): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1414328661.629:12149): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_START msg=audit(1414328661.629:12150): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414328661.629:12151): pid=20581 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=20581 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.34.60.204 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414328661.629:12152): pid=20581 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=20581 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.34.60.204 terminal=? res=success' >type=CRED_REFR msg=audit(1414328661.630:12153): pid=20581 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_END msg=audit(1414328661.933:12154): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1414328661.933:12155): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1414328662.093:12156): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_START msg=audit(1414328662.093:12157): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414328662.093:12158): pid=20585 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=20585 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.34.60.204 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414328662.093:12159): pid=20585 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=20585 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.34.60.204 terminal=? res=success' >type=CRED_REFR msg=audit(1414328662.094:12160): pid=20585 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_END msg=audit(1414328662.439:12161): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1414328662.439:12162): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1414328662.584:12163): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_START msg=audit(1414328662.584:12164): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414328662.584:12165): pid=20591 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=20591 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.34.60.204 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414328662.584:12166): pid=20591 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=20591 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.34.60.204 terminal=? res=success' >type=CRED_REFR msg=audit(1414328662.584:12167): pid=20591 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_CMD msg=audit(1414328663.379:12168): pid=20605 uid=993 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D6F6663746C2064756D702D666C6F77732062722D696E74207461626C653D3233 terminal=? res=success' >type=CRED_ACQ msg=audit(1414328663.379:12169): pid=20605 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1414328663.379:12170): pid=20605 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1414328663.442:12171): pid=20605 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1414328663.442:12172): pid=20605 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1414328665.379:12173): pid=20615 uid=993 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D6F6663746C2064756D702D666C6F77732062722D696E74207461626C653D3233 terminal=? res=success' >type=CRED_ACQ msg=audit(1414328665.380:12174): pid=20615 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1414328665.380:12175): pid=20615 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1414328665.441:12176): pid=20615 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1414328665.441:12177): pid=20615 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1414328667.381:12178): pid=20659 uid=993 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D6F6663746C2064756D702D666C6F77732062722D696E74207461626C653D3233 terminal=? res=success' >type=CRED_ACQ msg=audit(1414328667.382:12179): pid=20659 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1414328667.382:12180): pid=20659 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1414328667.446:12181): pid=20659 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1414328667.446:12182): pid=20659 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1414328669.382:12183): pid=20675 uid=993 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D6F6663746C2064756D702D666C6F77732062722D696E74207461626C653D3233 terminal=? res=success' >type=CRED_ACQ msg=audit(1414328669.382:12184): pid=20675 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1414328669.383:12185): pid=20675 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1414328669.446:12186): pid=20675 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1414328669.447:12187): pid=20675 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1414328671.384:12188): pid=20691 uid=993 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D6F6663746C2064756D702D666C6F77732062722D696E74207461626C653D3233 terminal=? res=success' >type=CRED_ACQ msg=audit(1414328671.385:12189): pid=20691 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1414328671.385:12190): pid=20691 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1414328671.452:12191): pid=20691 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1414328671.452:12192): pid=20691 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1414328673.386:12193): pid=20705 uid=993 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D6F6663746C2064756D702D666C6F77732062722D696E74207461626C653D3233 terminal=? res=success' >type=CRED_ACQ msg=audit(1414328673.386:12194): pid=20705 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1414328673.386:12195): pid=20705 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1414328673.446:12196): pid=20705 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1414328673.446:12197): pid=20705 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1414328675.385:12198): pid=20714 uid=993 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D6F6663746C2064756D702D666C6F77732062722D696E74207461626C653D3233 terminal=? res=success' >type=CRED_ACQ msg=audit(1414328675.386:12199): pid=20714 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1414328675.386:12200): pid=20714 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1414328675.452:12201): pid=20714 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1414328675.452:12202): pid=20714 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1414328677.388:12203): pid=20736 uid=993 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D6F6663746C2064756D702D666C6F77732062722D696E74207461626C653D3233 terminal=? res=success' >type=CRED_ACQ msg=audit(1414328677.388:12204): pid=20736 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1414328677.388:12205): pid=20736 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1414328677.450:12206): pid=20736 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1414328677.450:12207): pid=20736 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1414328679.389:12208): pid=20752 uid=993 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D6F6663746C2064756D702D666C6F77732062722D696E74207461626C653D3233 terminal=? res=success' >type=CRED_ACQ msg=audit(1414328679.390:12209): pid=20752 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1414328679.390:12210): pid=20752 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1414328679.453:12211): pid=20752 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1414328679.453:12212): pid=20752 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1414328681.391:12213): pid=20770 uid=993 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D6F6663746C2064756D702D666C6F77732062722D696E74207461626C653D3233 terminal=? res=success' >type=CRED_ACQ msg=audit(1414328681.392:12214): pid=20770 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1414328681.392:12215): pid=20770 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1414328681.477:12216): pid=20770 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1414328681.477:12217): pid=20770 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1414328683.396:12218): pid=20786 uid=993 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D6F6663746C2064756D702D666C6F77732062722D696E74207461626C653D3233 terminal=? res=success' >type=CRED_ACQ msg=audit(1414328683.396:12219): pid=20786 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1414328683.396:12220): pid=20786 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1414328683.462:12221): pid=20786 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1414328683.462:12222): pid=20786 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1414328685.398:12223): pid=20797 uid=993 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D6F6663746C2064756D702D666C6F77732062722D696E74207461626C653D3233 terminal=? res=success' >type=CRED_ACQ msg=audit(1414328685.398:12224): pid=20797 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1414328685.398:12225): pid=20797 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1414328685.461:12226): pid=20797 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1414328685.461:12227): pid=20797 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1414328687.402:12228): pid=20832 uid=993 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D6F6663746C2064756D702D666C6F77732062722D696E74207461626C653D3233 terminal=? res=success' >type=CRED_ACQ msg=audit(1414328687.403:12229): pid=20832 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1414328687.403:12230): pid=20832 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1414328687.469:12231): pid=20832 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1414328687.469:12232): pid=20832 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1414328689.402:12233): pid=20844 uid=993 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D6F6663746C2064756D702D666C6F77732062722D696E74207461626C653D3233 terminal=? res=success' >type=CRED_ACQ msg=audit(1414328689.402:12234): pid=20844 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1414328689.402:12235): pid=20844 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1414328689.467:12236): pid=20844 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1414328689.467:12237): pid=20844 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1414328691.404:12238): pid=20853 uid=993 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D6F6663746C2064756D702D666C6F77732062722D696E74207461626C653D3233 terminal=? res=success' >type=CRED_ACQ msg=audit(1414328691.404:12239): pid=20853 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1414328691.404:12240): pid=20853 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1414328691.466:12241): pid=20853 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1414328691.466:12242): pid=20853 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1414328693.407:12243): pid=20868 uid=993 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D6F6663746C2064756D702D666C6F77732062722D696E74207461626C653D3233 terminal=? res=success' >type=CRED_ACQ msg=audit(1414328693.407:12244): pid=20868 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1414328693.408:12245): pid=20868 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1414328693.471:12246): pid=20868 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1414328693.471:12247): pid=20868 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1414328695.406:12248): pid=20888 uid=993 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D6F6663746C2064756D702D666C6F77732062722D696E74207461626C653D3233 terminal=? res=success' >type=CRED_ACQ msg=audit(1414328695.406:12249): pid=20888 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1414328695.406:12250): pid=20888 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1414328695.473:12251): pid=20888 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1414328695.473:12252): pid=20888 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1414328697.408:12253): pid=20898 uid=993 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D6F6663746C2064756D702D666C6F77732062722D696E74207461626C653D3233 terminal=? res=success' >type=CRED_ACQ msg=audit(1414328697.408:12254): pid=20898 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1414328697.408:12255): pid=20898 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1414328697.472:12256): pid=20898 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1414328697.472:12257): pid=20898 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1414328699.409:12258): pid=20911 uid=993 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D6F6663746C2064756D702D666C6F77732062722D696E74207461626C653D3233 terminal=? res=success' >type=CRED_ACQ msg=audit(1414328699.410:12259): pid=20911 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1414328699.410:12260): pid=20911 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1414328699.477:12261): pid=20911 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1414328699.477:12262): pid=20911 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1414328701.185:12263): pid=20923 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="keystone" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1414328701.185:12264): pid=20923 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="keystone" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1414328701.187:12265): pid=20923 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=163 old-ses=4294967295 ses=348 res=1 >type=USER_START msg=audit(1414328701.200:12266): pid=20923 uid=0 auid=163 ses=348 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="keystone" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1414328701.200:12267): pid=20923 uid=0 auid=163 ses=348 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="keystone" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_CMD msg=audit(1414328701.411:12268): pid=20931 uid=993 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D6F6663746C2064756D702D666C6F77732062722D696E74207461626C653D3233 terminal=? res=success' >type=CRED_ACQ msg=audit(1414328701.412:12269): pid=20931 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1414328701.412:12270): pid=20931 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1414328701.472:12271): pid=20931 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1414328701.473:12272): pid=20931 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1414328701.841:12273): pid=20923 uid=0 auid=163 ses=348 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="keystone" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1414328701.843:12274): pid=20923 uid=0 auid=163 ses=348 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="keystone" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_CMD msg=audit(1414328703.411:12275): pid=20941 uid=993 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D6F6663746C2064756D702D666C6F77732062722D696E74207461626C653D3233 terminal=? res=success' >type=CRED_ACQ msg=audit(1414328703.411:12276): pid=20941 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1414328703.411:12277): pid=20941 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1414328703.471:12278): pid=20941 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1414328703.471:12279): pid=20941 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1414328705.413:12280): pid=20944 uid=993 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D6F6663746C2064756D702D666C6F77732062722D696E74207461626C653D3233 terminal=? res=success' >type=CRED_ACQ msg=audit(1414328705.413:12281): pid=20944 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1414328705.414:12282): pid=20944 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1414328705.473:12283): pid=20944 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1414328705.473:12284): pid=20944 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1414328707.413:12285): pid=20947 uid=993 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D6F6663746C2064756D702D666C6F77732062722D696E74207461626C653D3233 terminal=? res=success' >type=CRED_ACQ msg=audit(1414328707.413:12286): pid=20947 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1414328707.414:12287): pid=20947 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1414328707.473:12288): pid=20947 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1414328707.473:12289): pid=20947 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1414328709.415:12290): pid=20950 uid=993 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D6F6663746C2064756D702D666C6F77732062722D696E74207461626C653D3233 terminal=? res=success' >type=CRED_ACQ msg=audit(1414328709.415:12291): pid=20950 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1414328709.416:12292): pid=20950 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1414328709.474:12293): pid=20950 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1414328709.474:12294): pid=20950 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1414328711.417:12295): pid=20953 uid=993 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D6F6663746C2064756D702D666C6F77732062722D696E74207461626C653D3233 terminal=? res=success' >type=CRED_ACQ msg=audit(1414328711.417:12296): pid=20953 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1414328711.417:12297): pid=20953 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1414328711.476:12298): pid=20953 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1414328711.476:12299): pid=20953 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1414328713.417:12300): pid=20958 uid=993 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D6F6663746C2064756D702D666C6F77732062722D696E74207461626C653D3233 terminal=? res=success' >type=CRED_ACQ msg=audit(1414328713.417:12301): pid=20958 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1414328713.418:12302): pid=20958 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1414328713.461:12303): pid=20960 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D4320766773202D2D6E6F68656164696E6773202D2D756E69743D67202D6F206E616D652C73697A652C667265652C6C765F636F756E742C75756964202D2D736570617261746F72203A202D2D6E6F7375666669782063696E6465722D766F6C756D6573 terminal=? res=success' >type=CRED_ACQ msg=audit(1414328713.461:12304): pid=20960 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1414328713.463:12305): pid=20960 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1414328713.487:12306): pid=20958 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1414328713.487:12307): pid=20958 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1414328713.539:12308): pid=20960 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1414328713.539:12309): pid=20960 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1414328715.420:12310): pid=20964 uid=993 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D6F6663746C2064756D702D666C6F77732062722D696E74207461626C653D3233 terminal=? res=success' >type=CRED_ACQ msg=audit(1414328715.420:12311): pid=20964 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1414328715.420:12312): pid=20964 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1414328715.481:12313): pid=20964 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1414328715.481:12314): pid=20964 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1414328717.422:12315): pid=20967 uid=993 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D6F6663746C2064756D702D666C6F77732062722D696E74207461626C653D3233 terminal=? res=success' >type=CRED_ACQ msg=audit(1414328717.422:12316): pid=20967 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1414328717.423:12317): pid=20967 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1414328717.482:12318): pid=20967 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1414328717.482:12319): pid=20967 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1414328719.423:12320): pid=20980 uid=993 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D6F6663746C2064756D702D666C6F77732062722D696E74207461626C653D3233 terminal=? res=success' >type=CRED_ACQ msg=audit(1414328719.423:12321): pid=20980 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1414328719.424:12322): pid=20980 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1414328719.482:12323): pid=20980 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1414328719.482:12324): pid=20980 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1414328721.425:12325): pid=20983 uid=993 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D6F6663746C2064756D702D666C6F77732062722D696E74207461626C653D3233 terminal=? res=success' >type=CRED_ACQ msg=audit(1414328721.426:12326): pid=20983 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1414328721.426:12327): pid=20983 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1414328721.483:12328): pid=20983 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1414328721.483:12329): pid=20983 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1414328723.428:12330): pid=20988 uid=993 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D6F6663746C2064756D702D666C6F77732062722D696E74207461626C653D3233 terminal=? res=success' >type=CRED_ACQ msg=audit(1414328723.428:12331): pid=20988 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1414328723.428:12332): pid=20988 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1414328723.487:12333): pid=20988 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1414328723.487:12334): pid=20988 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1414328725.429:12335): pid=20991 uid=993 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D6F6663746C2064756D702D666C6F77732062722D696E74207461626C653D3233 terminal=? res=success' >type=CRED_ACQ msg=audit(1414328725.429:12336): pid=20991 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1414328725.429:12337): pid=20991 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1414328725.487:12338): pid=20991 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1414328725.487:12339): pid=20991 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1414328727.430:12340): pid=21000 uid=993 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D6F6663746C2064756D702D666C6F77732062722D696E74207461626C653D3233 terminal=? res=success' >type=CRED_ACQ msg=audit(1414328727.431:12341): pid=21000 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1414328727.431:12342): pid=21000 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1414328727.493:12343): pid=21000 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1414328727.494:12344): pid=21000 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1414328729.432:12345): pid=21015 uid=993 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D6F6663746C2064756D702D666C6F77732062722D696E74207461626C653D3233 terminal=? res=success' >type=CRED_ACQ msg=audit(1414328729.432:12346): pid=21015 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1414328729.432:12347): pid=21015 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1414328729.498:12348): pid=21015 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1414328729.498:12349): pid=21015 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1414328731.434:12350): pid=21029 uid=993 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D6F6663746C2064756D702D666C6F77732062722D696E74207461626C653D3233 terminal=? res=success' >type=CRED_ACQ msg=audit(1414328731.434:12351): pid=21029 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1414328731.435:12352): pid=21029 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1414328731.496:12353): pid=21029 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1414328731.496:12354): pid=21029 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1414328733.435:12355): pid=21038 uid=993 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D6F6663746C2064756D702D666C6F77732062722D696E74207461626C653D3233 terminal=? res=success' >type=CRED_ACQ msg=audit(1414328733.436:12356): pid=21038 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1414328733.436:12357): pid=21038 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1414328733.495:12358): pid=21038 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1414328733.496:12359): pid=21038 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1414328735.438:12360): pid=21049 uid=993 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D6F6663746C2064756D702D666C6F77732062722D696E74207461626C653D3233 terminal=? res=success' >type=CRED_ACQ msg=audit(1414328735.438:12361): pid=21049 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1414328735.439:12362): pid=21049 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1414328735.503:12363): pid=21049 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1414328735.503:12364): pid=21049 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1414328737.440:12365): pid=21057 uid=993 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D6F6663746C2064756D702D666C6F77732062722D696E74207461626C653D3233 terminal=? res=success' >type=CRED_ACQ msg=audit(1414328737.440:12366): pid=21057 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1414328737.440:12367): pid=21057 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1414328737.507:12368): pid=21057 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1414328737.508:12369): pid=21057 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1414328739.440:12370): pid=21061 uid=993 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D6F6663746C2064756D702D666C6F77732062722D696E74207461626C653D3233 terminal=? res=success' >type=CRED_ACQ msg=audit(1414328739.441:12371): pid=21061 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1414328739.441:12372): pid=21061 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1414328739.504:12373): pid=21061 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1414328739.504:12374): pid=21061 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1414328741.442:12375): pid=21071 uid=993 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D6F6663746C2064756D702D666C6F77732062722D696E74207461626C653D3233 terminal=? res=success' >type=CRED_ACQ msg=audit(1414328741.442:12376): pid=21071 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1414328741.442:12377): pid=21071 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1414328741.505:12378): pid=21071 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1414328741.505:12379): pid=21071 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1414328743.444:12380): pid=21097 uid=993 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D6F6663746C2064756D702D666C6F77732062722D696E74207461626C653D3233 terminal=? res=success' >type=CRED_ACQ msg=audit(1414328743.445:12381): pid=21097 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1414328743.445:12382): pid=21097 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1414328743.505:12383): pid=21097 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1414328743.506:12384): pid=21097 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1414328745.448:12385): pid=21105 uid=993 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D6F6663746C2064756D702D666C6F77732062722D696E74207461626C653D3233 terminal=? res=success' >type=CRED_ACQ msg=audit(1414328745.449:12386): pid=21105 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1414328745.449:12387): pid=21105 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1414328745.516:12388): pid=21105 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1414328745.516:12389): pid=21105 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1414328747.449:12390): pid=21116 uid=993 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D6F6663746C2064756D702D666C6F77732062722D696E74207461626C653D3233 terminal=? res=success' >type=CRED_ACQ msg=audit(1414328747.449:12391): pid=21116 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1414328747.449:12392): pid=21116 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1414328747.512:12393): pid=21116 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1414328747.512:12394): pid=21116 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1414328749.450:12395): pid=21134 uid=993 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D6F6663746C2064756D702D666C6F77732062722D696E74207461626C653D3233 terminal=? res=success' >type=CRED_ACQ msg=audit(1414328749.450:12396): pid=21134 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1414328749.450:12397): pid=21134 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1414328749.515:12398): pid=21134 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1414328749.515:12399): pid=21134 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1414328751.450:12400): pid=21143 uid=993 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D6F6663746C2064756D702D666C6F77732062722D696E74207461626C653D3233 terminal=? res=success' >type=CRED_ACQ msg=audit(1414328751.450:12401): pid=21143 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1414328751.451:12402): pid=21143 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1414328751.510:12403): pid=21143 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1414328751.510:12404): pid=21143 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1414328753.454:12405): pid=21155 uid=993 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D6F6663746C2064756D702D666C6F77732062722D696E74207461626C653D3233 terminal=? res=success' >type=CRED_ACQ msg=audit(1414328753.454:12406): pid=21155 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1414328753.454:12407): pid=21155 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1414328753.531:12408): pid=21155 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1414328753.531:12409): pid=21155 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1414328755.456:12410): pid=21169 uid=993 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D6F6663746C2064756D702D666C6F77732062722D696E74207461626C653D3233 terminal=? res=success' >type=CRED_ACQ msg=audit(1414328755.456:12411): pid=21169 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1414328755.456:12412): pid=21169 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1414328755.518:12413): pid=21169 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1414328755.519:12414): pid=21169 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1414328756.562:12415): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1414328756.562:12416): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1414328756.710:12417): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_START msg=audit(1414328756.710:12418): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414328756.711:12419): pid=21176 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=21176 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.34.60.204 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414328756.711:12420): pid=21176 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=21176 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.34.60.204 terminal=? res=success' >type=CRED_REFR msg=audit(1414328756.712:12421): pid=21176 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_END msg=audit(1414328757.005:12422): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1414328757.005:12423): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1414328757.153:12424): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_START msg=audit(1414328757.153:12425): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414328757.154:12426): pid=21180 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=21180 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.34.60.204 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414328757.154:12427): pid=21180 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=21180 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.34.60.204 terminal=? res=success' >type=CRED_REFR msg=audit(1414328757.154:12428): pid=21180 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_CMD msg=audit(1414328757.457:12429): pid=21184 uid=993 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D6F6663746C2064756D702D666C6F77732062722D696E74207461626C653D3233 terminal=? res=success' >type=CRED_ACQ msg=audit(1414328757.457:12430): pid=21184 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1414328757.457:12431): pid=21184 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1414328757.478:12432): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1414328757.479:12433): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_END msg=audit(1414328757.519:12434): pid=21184 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1414328757.519:12435): pid=21184 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_LOGIN msg=audit(1414328757.602:12436): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_START msg=audit(1414328757.602:12437): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414328757.602:12438): pid=21187 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=21187 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.34.60.204 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414328757.603:12439): pid=21187 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=21187 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.34.60.204 terminal=? res=success' >type=CRED_REFR msg=audit(1414328757.603:12440): pid=21187 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_END msg=audit(1414328757.894:12441): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1414328757.894:12442): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1414328758.047:12443): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=USER_START msg=audit(1414328758.047:12444): pid=1090 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1414328758.047:12445): pid=21191 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=eb:f8:69:00:5b:2a:54:31:45:63:6b:d9:09:78:00:e7 direction=? spid=21191 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.34.60.204 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1414328758.048:12446): pid=21191 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=cb:34:20:5f:31:a1:9e:b6:ba:40:9c:75:40:f1:29:9e direction=? spid=21191 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.34.60.204 terminal=? res=success' >type=CRED_REFR msg=audit(1414328758.048:12447): pid=21191 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.34.60.204 addr=10.34.60.204 terminal=ssh res=success'
<b>You cannot view the attachment while viewing its details because your browser does not support IFRAMEs. <a href="attachment.cgi?id=950846">View the attachment on a separate page</a>.</b>
View Attachment As Raw
Actions:
View
Attachments on
bug 1157268
: 950846