ansible-playbook [core 2.17.14] config file = None configured module search path = ['/root/.ansible/plugins/modules', '/usr/share/ansible/plugins/modules'] ansible python module location = /usr/local/lib/python3.13/site-packages/ansible ansible collection location = /tmp/collections-f2S executable location = /usr/local/bin/ansible-playbook python version = 3.13.9 (main, Oct 14 2025, 00:00:00) [GCC 14.3.1 20250808 (Red Hat 14.3.1-3)] (/usr/bin/python3.13) jinja version = 3.1.6 libyaml = True No config file found; using defaults running playbook inside collection fedora.linux_system_roles Skipping callback 'debug', as we already have a stdout callback. Skipping callback 'json', as we already have a stdout callback. Skipping callback 'jsonl', as we already have a stdout callback. Skipping callback 'default', as we already have a stdout callback. Skipping callback 'minimal', as we already have a stdout callback. Skipping callback 'oneline', as we already have a stdout callback. PLAYBOOK: tests_default.yml **************************************************** 1 plays in /tmp/collections-f2S/ansible_collections/fedora/linux_system_roles/tests/aide/tests_default.yml PLAY [Ensure that the role runs with default parameters] *********************** TASK [fedora.linux_system_roles.aide : Set platform/version specific variables] *** task path: /tmp/collections-f2S/ansible_collections/fedora/linux_system_roles/roles/aide/tasks/main.yml:3 Tuesday 13 January 2026 18:27:01 -0500 (0:00:00.022) 0:00:00.022 ******* included: /tmp/collections-f2S/ansible_collections/fedora/linux_system_roles/roles/aide/tasks/set_vars.yml for managed-node2 TASK [fedora.linux_system_roles.aide : Ensure ansible_facts used by role] ****** task path: /tmp/collections-f2S/ansible_collections/fedora/linux_system_roles/roles/aide/tasks/set_vars.yml:2 Tuesday 13 January 2026 18:27:01 -0500 (0:00:00.017) 0:00:00.040 ******* [WARNING]: Platform linux on host managed-node2 is using the discovered Python interpreter at /usr/bin/python3, but future installation of another Python interpreter could change the meaning of that path. See https://docs.ansible.com/ansible- core/2.17/reference_appendices/interpreter_discovery.html for more information. ok: [managed-node2] TASK [fedora.linux_system_roles.aide : Check if system is ostree] ************** task path: /tmp/collections-f2S/ansible_collections/fedora/linux_system_roles/roles/aide/tasks/set_vars.yml:10 Tuesday 13 January 2026 18:27:01 -0500 (0:00:00.807) 0:00:00.848 ******* ok: [managed-node2] => { "changed": false, "stat": { "exists": false } } TASK [fedora.linux_system_roles.aide : Set flag to indicate system is ostree] *** task path: /tmp/collections-f2S/ansible_collections/fedora/linux_system_roles/roles/aide/tasks/set_vars.yml:15 Tuesday 13 January 2026 18:27:02 -0500 (0:00:00.460) 0:00:01.309 ******* ok: [managed-node2] => { "ansible_facts": { "__aide_is_ostree": false }, "changed": false } TASK [fedora.linux_system_roles.aide : Set platform/version specific variables] *** task path: /tmp/collections-f2S/ansible_collections/fedora/linux_system_roles/roles/aide/tasks/set_vars.yml:19 Tuesday 13 January 2026 18:27:02 -0500 (0:00:00.021) 0:00:01.330 ******* skipping: [managed-node2] => (item=RedHat.yml) => { "ansible_loop_var": "item", "changed": false, "false_condition": "__vars_file is file", "item": "RedHat.yml", "skip_reason": "Conditional result was False" } skipping: [managed-node2] => (item=Fedora.yml) => { "ansible_loop_var": "item", "changed": false, "false_condition": "__vars_file is file", "item": "Fedora.yml", "skip_reason": "Conditional result was False" } skipping: [managed-node2] => (item=Fedora_41.yml) => { "ansible_loop_var": "item", "changed": false, "false_condition": "__vars_file is file", "item": "Fedora_41.yml", "skip_reason": "Conditional result was False" } skipping: [managed-node2] => (item=Fedora_41.yml) => { "ansible_loop_var": "item", "changed": false, "false_condition": "__vars_file is file", "item": "Fedora_41.yml", "skip_reason": "Conditional result was False" } skipping: [managed-node2] => { "changed": false } MSG: All items skipped TASK [fedora.linux_system_roles.aide : Debug0] ********************************* task path: /tmp/collections-f2S/ansible_collections/fedora/linux_system_roles/roles/aide/tasks/main.yml:6 Tuesday 13 January 2026 18:27:02 -0500 (0:00:00.030) 0:00:01.360 ******* fatal: [managed-node2]: FAILED! => {} MSG: The task includes an option with an undefined variable.. 'ansible_distribution' is undefined The error appears to be in '/tmp/collections-f2S/ansible_collections/fedora/linux_system_roles/roles/aide/tasks/main.yml': line 6, column 3, but may be elsewhere in the file depending on the exact syntax problem. The offending line appears to be: - name: Debug0 ^ here PLAY RECAP ********************************************************************* managed-node2 : ok=4 changed=0 unreachable=0 failed=1 skipped=1 rescued=0 ignored=0 SYSTEM ROLES ERRORS BEGIN v1 [ { "ansible_version": "2.17.14", "end_time": "2026-01-13T23:27:02.400484+00:00Z", "host": "managed-node2", "message": "The task includes an option with an undefined variable.. 'ansible_distribution' is undefined\n\nThe error appears to be in '/tmp/collections-f2S/ansible_collections/fedora/linux_system_roles/roles/aide/tasks/main.yml': line 6, column 3, but may\nbe elsewhere in the file depending on the exact syntax problem.\n\nThe offending line appears to be:\n\n\n- name: Debug0\n ^ here\n", "start_time": "2026-01-13T23:27:02.389721+00:00Z", "task_name": "Debug0", "task_path": "/tmp/collections-f2S/ansible_collections/fedora/linux_system_roles/roles/aide/tasks/main.yml:6" } ] SYSTEM ROLES ERRORS END v1 TASKS RECAP ******************************************************************** Tuesday 13 January 2026 18:27:02 -0500 (0:00:00.012) 0:00:01.373 ******* =============================================================================== fedora.linux_system_roles.aide : Ensure ansible_facts used by role ------ 0.81s /tmp/collections-f2S/ansible_collections/fedora/linux_system_roles/roles/aide/tasks/set_vars.yml:2 fedora.linux_system_roles.aide : Check if system is ostree -------------- 0.46s /tmp/collections-f2S/ansible_collections/fedora/linux_system_roles/roles/aide/tasks/set_vars.yml:10 fedora.linux_system_roles.aide : Set platform/version specific variables --- 0.03s /tmp/collections-f2S/ansible_collections/fedora/linux_system_roles/roles/aide/tasks/set_vars.yml:19 fedora.linux_system_roles.aide : Set flag to indicate system is ostree --- 0.02s /tmp/collections-f2S/ansible_collections/fedora/linux_system_roles/roles/aide/tasks/set_vars.yml:15 fedora.linux_system_roles.aide : Set platform/version specific variables --- 0.02s /tmp/collections-f2S/ansible_collections/fedora/linux_system_roles/roles/aide/tasks/main.yml:3 fedora.linux_system_roles.aide : Debug0 --------------------------------- 0.01s /tmp/collections-f2S/ansible_collections/fedora/linux_system_roles/roles/aide/tasks/main.yml:6 Jan 13 18:27:00 managed-node2 audit[4236]: CRYPTO_KEY_USER pid=4236 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:f3:06:22:66:28:2c:8c:ef:41:54:cb:13:1f:73:c7:8e:ee:30:95:4e:b8:50:8f:2d:c5:ca:0b:8c:93:3a:72:30 direction=? spid=4236 suid=0 exe="/usr/libexec/openssh/sshd-session" hostname=? addr=10.31.44.128 terminal=? res=success' Jan 13 18:27:00 managed-node2 audit[4236]: CRYPTO_KEY_USER pid=4236 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:f0:51:d3:52:9e:e5:f1:0d:39:87:8f:d9:fc:1e:8d:dd:5f:d4:70:49:ac:ea:53:d5:1f:c2:d2:1b:af:00:9d:c1 direction=? spid=4236 suid=0 exe="/usr/libexec/openssh/sshd-session" hostname=? addr=10.31.44.128 terminal=? res=success' Jan 13 18:27:00 managed-node2 audit[4236]: CRYPTO_KEY_USER pid=4236 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:96:48:6b:c4:0e:e4:7c:8c:95:34:f6:ff:95:7a:36:f6:ab:e8:7a:6f:e3:41:4f:9c:1d:fc:82:b5:cf:15:47:44 direction=? spid=4236 suid=0 exe="/usr/libexec/openssh/sshd-session" hostname=? addr=10.31.44.128 terminal=? res=success' Jan 13 18:27:00 managed-node2 audit[4235]: CRYPTO_SESSION pid=4235 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=4236 suid=74 rport=56510 laddr=10.31.13.184 lport=22 exe="/usr/libexec/openssh/sshd-session" hostname=? addr=10.31.44.128 terminal=? res=success' Jan 13 18:27:00 managed-node2 audit[4235]: CRYPTO_SESSION pid=4235 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=4236 suid=74 rport=56510 laddr=10.31.13.184 lport=22 exe="/usr/libexec/openssh/sshd-session" hostname=? addr=10.31.44.128 terminal=? res=success' Jan 13 18:27:00 managed-node2 audit[4235]: USER_AUTH pid=4235 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/libexec/openssh/sshd-session" hostname=? addr=10.31.44.128 terminal=? res=success' Jan 13 18:27:00 managed-node2 audit[4235]: CRYPTO_KEY_USER pid=4235 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:f6:3d:5b:97:0b:77:c1:ca:d1:88:66:19:43:b6:46:bb:d6:b1:9b:77:03:92:51:fa:ff:3e:1c:f8:47:bc:0b:31 exe="/usr/libexec/openssh/sshd-session" hostname=? addr=10.31.44.128 terminal=? res=success' Jan 13 18:27:00 managed-node2 audit[4235]: USER_ACCT pid=4235 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/libexec/openssh/sshd-session" hostname=10.31.44.128 addr=10.31.44.128 terminal=ssh res=success' Jan 13 18:27:00 managed-node2 sshd-session[4235]: Accepted publickey for root from 10.31.44.128 port 56510 ssh2: RSA SHA256:9j1blwt3wcrRiGYZQ7ZGu9axm3cDklH6/z4c+Ee8CzE Jan 13 18:27:00 managed-node2 audit[4235]: CRYPTO_KEY_USER pid=4235 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=4236 suid=74 rport=56510 laddr=10.31.13.184 lport=22 exe="/usr/libexec/openssh/sshd-session" hostname=? addr=10.31.44.128 terminal=? res=success' Jan 13 18:27:00 managed-node2 audit[4235]: CRED_ACQ pid=4235 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/libexec/openssh/sshd-session" hostname=10.31.44.128 addr=10.31.44.128 terminal=ssh res=success' Jan 13 18:27:00 managed-node2 audit[4235]: USER_ROLE_CHANGE pid=4235 uid=0 auid=0 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pam_selinux default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/libexec/openssh/sshd-session" hostname=10.31.44.128 addr=10.31.44.128 terminal=ssh res=success' Jan 13 18:27:00 managed-node2 systemd-logind[610]: New session 8 of user root. ░░ Subject: A new session 8 has been created for user root ░░ Defined-By: systemd ░░ Support: https://lists.freedesktop.org/mailman/listinfo/systemd-devel ░░ Documentation: sd-login(3) ░░ ░░ A new session with the ID 8 has been created for the user root. ░░ ░░ The leading process of the session is 4235. Jan 13 18:27:00 managed-node2 systemd[1]: Started session-8.scope - Session 8 of User root. ░░ Subject: A start job for unit session-8.scope has finished successfully ░░ Defined-By: systemd ░░ Support: https://lists.freedesktop.org/mailman/listinfo/systemd-devel ░░ ░░ A start job for unit session-8.scope has finished successfully. ░░ ░░ The job identifier is 1898. Jan 13 18:27:00 managed-node2 sshd-session[4235]: pam_unix(sshd:session): session opened for user root(uid=0) by root(uid=0) Jan 13 18:27:00 managed-node2 audit[4235]: USER_START pid=4235 uid=0 auid=0 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/libexec/openssh/sshd-session" hostname=10.31.44.128 addr=10.31.44.128 terminal=ssh res=success' Jan 13 18:27:00 managed-node2 audit[4238]: CRYPTO_KEY_USER pid=4238 uid=0 auid=0 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:f3:06:22:66:28:2c:8c:ef:41:54:cb:13:1f:73:c7:8e:ee:30:95:4e:b8:50:8f:2d:c5:ca:0b:8c:93:3a:72:30 direction=? spid=4238 suid=0 exe="/usr/libexec/openssh/sshd-session" hostname=? addr=10.31.44.128 terminal=? res=success' Jan 13 18:27:00 managed-node2 audit[4238]: CRYPTO_KEY_USER pid=4238 uid=0 auid=0 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:f0:51:d3:52:9e:e5:f1:0d:39:87:8f:d9:fc:1e:8d:dd:5f:d4:70:49:ac:ea:53:d5:1f:c2:d2:1b:af:00:9d:c1 direction=? spid=4238 suid=0 exe="/usr/libexec/openssh/sshd-session" hostname=? addr=10.31.44.128 terminal=? res=success' Jan 13 18:27:00 managed-node2 audit[4238]: CRYPTO_KEY_USER pid=4238 uid=0 auid=0 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:96:48:6b:c4:0e:e4:7c:8c:95:34:f6:ff:95:7a:36:f6:ab:e8:7a:6f:e3:41:4f:9c:1d:fc:82:b5:cf:15:47:44 direction=? spid=4238 suid=0 exe="/usr/libexec/openssh/sshd-session" hostname=? addr=10.31.44.128 terminal=? res=success' Jan 13 18:27:00 managed-node2 audit[4238]: CRED_ACQ pid=4238 uid=0 auid=0 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/libexec/openssh/sshd-session" hostname=10.31.44.128 addr=10.31.44.128 terminal=ssh res=success' Jan 13 18:27:00 managed-node2 audit[4235]: USER_LOGIN pid=4235 uid=0 auid=0 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/libexec/openssh/sshd-session" hostname=? addr=10.31.44.128 terminal=ssh res=success' Jan 13 18:27:00 managed-node2 audit[4235]: USER_START pid=4235 uid=0 auid=0 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/libexec/openssh/sshd-session" hostname=? addr=10.31.44.128 terminal=ssh res=success' Jan 13 18:27:00 managed-node2 audit[4239]: CRYPTO_KEY_USER pid=4239 uid=0 auid=0 ses=8 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:96:48:6b:c4:0e:e4:7c:8c:95:34:f6:ff:95:7a:36:f6:ab:e8:7a:6f:e3:41:4f:9c:1d:fc:82:b5:cf:15:47:44 direction=? spid=4239 suid=0 exe="/usr/libexec/openssh/sshd-session" hostname=? addr=10.31.44.128 terminal=? res=success' Jan 13 18:27:00 managed-node2 sshd-session[4238]: Received disconnect from 10.31.44.128 port 56510:11: disconnected by user Jan 13 18:27:00 managed-node2 audit[4235]: CRYPTO_KEY_USER pid=4235 uid=0 auid=0 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=4238 suid=0 rport=56510 laddr=10.31.13.184 lport=22 exe="/usr/libexec/openssh/sshd-session" hostname=? addr=10.31.44.128 terminal=? res=success' Jan 13 18:27:00 managed-node2 sshd-session[4238]: Disconnected from user root 10.31.44.128 port 56510 Jan 13 18:27:00 managed-node2 sshd-session[4235]: pam_unix(sshd:session): session closed for user root Jan 13 18:27:00 managed-node2 audit[4235]: USER_END pid=4235 uid=0 auid=0 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/libexec/openssh/sshd-session" hostname=10.31.44.128 addr=10.31.44.128 terminal=ssh res=success' Jan 13 18:27:00 managed-node2 audit[4235]: CRED_DISP pid=4235 uid=0 auid=0 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/libexec/openssh/sshd-session" hostname=10.31.44.128 addr=10.31.44.128 terminal=ssh res=success' Jan 13 18:27:00 managed-node2 audit[4235]: USER_END pid=4235 uid=0 auid=0 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/libexec/openssh/sshd-session" hostname=? addr=10.31.44.128 terminal=ssh res=success' Jan 13 18:27:00 managed-node2 audit[4235]: USER_LOGOUT pid=4235 uid=0 auid=0 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/libexec/openssh/sshd-session" hostname=? addr=10.31.44.128 terminal=ssh res=success' Jan 13 18:27:00 managed-node2 systemd[1]: session-8.scope: Deactivated successfully. ░░ Subject: Unit succeeded ░░ Defined-By: systemd ░░ Support: https://lists.freedesktop.org/mailman/listinfo/systemd-devel ░░ ░░ The unit session-8.scope has successfully entered the 'dead' state. Jan 13 18:27:00 managed-node2 systemd-logind[610]: Session 8 logged out. Waiting for processes to exit. Jan 13 18:27:00 managed-node2 systemd-logind[610]: Removed session 8. ░░ Subject: Session 8 has been terminated ░░ Defined-By: systemd ░░ Support: https://lists.freedesktop.org/mailman/listinfo/systemd-devel ░░ Documentation: sd-login(3) ░░ ░░ A session with the ID 8 has been terminated. Jan 13 18:27:00 managed-node2 audit[4266]: CRYPTO_KEY_USER pid=4266 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:f3:06:22:66:28:2c:8c:ef:41:54:cb:13:1f:73:c7:8e:ee:30:95:4e:b8:50:8f:2d:c5:ca:0b:8c:93:3a:72:30 direction=? spid=4266 suid=0 exe="/usr/libexec/openssh/sshd-session" hostname=? addr=10.31.44.128 terminal=? res=success' Jan 13 18:27:00 managed-node2 audit[4266]: CRYPTO_KEY_USER pid=4266 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:f0:51:d3:52:9e:e5:f1:0d:39:87:8f:d9:fc:1e:8d:dd:5f:d4:70:49:ac:ea:53:d5:1f:c2:d2:1b:af:00:9d:c1 direction=? spid=4266 suid=0 exe="/usr/libexec/openssh/sshd-session" hostname=? addr=10.31.44.128 terminal=? res=success' Jan 13 18:27:00 managed-node2 audit[4266]: CRYPTO_KEY_USER pid=4266 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:96:48:6b:c4:0e:e4:7c:8c:95:34:f6:ff:95:7a:36:f6:ab:e8:7a:6f:e3:41:4f:9c:1d:fc:82:b5:cf:15:47:44 direction=? spid=4266 suid=0 exe="/usr/libexec/openssh/sshd-session" hostname=? addr=10.31.44.128 terminal=? res=success' Jan 13 18:27:00 managed-node2 audit[4265]: CRYPTO_SESSION pid=4265 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=4266 suid=74 rport=56516 laddr=10.31.13.184 lport=22 exe="/usr/libexec/openssh/sshd-session" hostname=? addr=10.31.44.128 terminal=? res=success' Jan 13 18:27:00 managed-node2 audit[4265]: CRYPTO_SESSION pid=4265 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=4266 suid=74 rport=56516 laddr=10.31.13.184 lport=22 exe="/usr/libexec/openssh/sshd-session" hostname=? addr=10.31.44.128 terminal=? res=success' Jan 13 18:27:00 managed-node2 audit[4265]: USER_AUTH pid=4265 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/libexec/openssh/sshd-session" hostname=? addr=10.31.44.128 terminal=? res=success' Jan 13 18:27:00 managed-node2 audit[4265]: CRYPTO_KEY_USER pid=4265 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:f6:3d:5b:97:0b:77:c1:ca:d1:88:66:19:43:b6:46:bb:d6:b1:9b:77:03:92:51:fa:ff:3e:1c:f8:47:bc:0b:31 exe="/usr/libexec/openssh/sshd-session" hostname=? addr=10.31.44.128 terminal=? res=success' Jan 13 18:27:00 managed-node2 audit[4265]: USER_ACCT pid=4265 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/libexec/openssh/sshd-session" hostname=10.31.44.128 addr=10.31.44.128 terminal=ssh res=success' Jan 13 18:27:00 managed-node2 sshd-session[4265]: Accepted publickey for root from 10.31.44.128 port 56516 ssh2: RSA SHA256:9j1blwt3wcrRiGYZQ7ZGu9axm3cDklH6/z4c+Ee8CzE Jan 13 18:27:00 managed-node2 audit[4265]: CRYPTO_KEY_USER pid=4265 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=4266 suid=74 rport=56516 laddr=10.31.13.184 lport=22 exe="/usr/libexec/openssh/sshd-session" hostname=? addr=10.31.44.128 terminal=? res=success' Jan 13 18:27:00 managed-node2 audit[4265]: CRED_ACQ pid=4265 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/libexec/openssh/sshd-session" hostname=10.31.44.128 addr=10.31.44.128 terminal=ssh res=success' Jan 13 18:27:00 managed-node2 audit[4265]: USER_ROLE_CHANGE pid=4265 uid=0 auid=0 ses=9 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pam_selinux default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/libexec/openssh/sshd-session" hostname=10.31.44.128 addr=10.31.44.128 terminal=ssh res=success' Jan 13 18:27:00 managed-node2 systemd-logind[610]: New session 9 of user root. ░░ Subject: A new session 9 has been created for user root ░░ Defined-By: systemd ░░ Support: https://lists.freedesktop.org/mailman/listinfo/systemd-devel ░░ Documentation: sd-login(3) ░░ ░░ A new session with the ID 9 has been created for the user root. ░░ ░░ The leading process of the session is 4265. Jan 13 18:27:00 managed-node2 systemd[1]: Started session-9.scope - Session 9 of User root. ░░ Subject: A start job for unit session-9.scope has finished successfully ░░ Defined-By: systemd ░░ Support: https://lists.freedesktop.org/mailman/listinfo/systemd-devel ░░ ░░ A start job for unit session-9.scope has finished successfully. ░░ ░░ The job identifier is 1994. Jan 13 18:27:00 managed-node2 sshd-session[4265]: pam_unix(sshd:session): session opened for user root(uid=0) by root(uid=0) Jan 13 18:27:00 managed-node2 audit[4265]: USER_START pid=4265 uid=0 auid=0 ses=9 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/libexec/openssh/sshd-session" hostname=10.31.44.128 addr=10.31.44.128 terminal=ssh res=success' Jan 13 18:27:00 managed-node2 audit[4268]: CRYPTO_KEY_USER pid=4268 uid=0 auid=0 ses=9 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:f3:06:22:66:28:2c:8c:ef:41:54:cb:13:1f:73:c7:8e:ee:30:95:4e:b8:50:8f:2d:c5:ca:0b:8c:93:3a:72:30 direction=? spid=4268 suid=0 exe="/usr/libexec/openssh/sshd-session" hostname=? addr=10.31.44.128 terminal=? res=success' Jan 13 18:27:00 managed-node2 audit[4268]: CRYPTO_KEY_USER pid=4268 uid=0 auid=0 ses=9 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:f0:51:d3:52:9e:e5:f1:0d:39:87:8f:d9:fc:1e:8d:dd:5f:d4:70:49:ac:ea:53:d5:1f:c2:d2:1b:af:00:9d:c1 direction=? spid=4268 suid=0 exe="/usr/libexec/openssh/sshd-session" hostname=? addr=10.31.44.128 terminal=? res=success' Jan 13 18:27:00 managed-node2 audit[4268]: CRYPTO_KEY_USER pid=4268 uid=0 auid=0 ses=9 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:96:48:6b:c4:0e:e4:7c:8c:95:34:f6:ff:95:7a:36:f6:ab:e8:7a:6f:e3:41:4f:9c:1d:fc:82:b5:cf:15:47:44 direction=? spid=4268 suid=0 exe="/usr/libexec/openssh/sshd-session" hostname=? addr=10.31.44.128 terminal=? res=success' Jan 13 18:27:00 managed-node2 audit[4268]: CRED_ACQ pid=4268 uid=0 auid=0 ses=9 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/libexec/openssh/sshd-session" hostname=10.31.44.128 addr=10.31.44.128 terminal=ssh res=success' Jan 13 18:27:00 managed-node2 audit[4265]: USER_LOGIN pid=4265 uid=0 auid=0 ses=9 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/libexec/openssh/sshd-session" hostname=? addr=10.31.44.128 terminal=ssh res=success' Jan 13 18:27:00 managed-node2 audit[4265]: USER_START pid=4265 uid=0 auid=0 ses=9 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/libexec/openssh/sshd-session" hostname=? addr=10.31.44.128 terminal=ssh res=success' Jan 13 18:27:00 managed-node2 audit[4269]: CRYPTO_KEY_USER pid=4269 uid=0 auid=0 ses=9 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:96:48:6b:c4:0e:e4:7c:8c:95:34:f6:ff:95:7a:36:f6:ab:e8:7a:6f:e3:41:4f:9c:1d:fc:82:b5:cf:15:47:44 direction=? spid=4269 suid=0 exe="/usr/libexec/openssh/sshd-session" hostname=? addr=10.31.44.128 terminal=? res=success' Jan 13 18:27:00 managed-node2 sshd-session[4268]: Received disconnect from 10.31.44.128 port 56516:11: disconnected by user Jan 13 18:27:00 managed-node2 audit[4265]: USER_END pid=4265 uid=0 auid=0 ses=9 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/libexec/openssh/sshd-session" hostname=? addr=10.31.44.128 terminal=ssh res=success' Jan 13 18:27:00 managed-node2 audit[4265]: USER_LOGOUT pid=4265 uid=0 auid=0 ses=9 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/libexec/openssh/sshd-session" hostname=? addr=10.31.44.128 terminal=ssh res=success' Jan 13 18:27:00 managed-node2 audit[4265]: CRYPTO_KEY_USER pid=4265 uid=0 auid=0 ses=9 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=4268 suid=0 rport=56516 laddr=10.31.13.184 lport=22 exe="/usr/libexec/openssh/sshd-session" hostname=? addr=10.31.44.128 terminal=? res=success' Jan 13 18:27:00 managed-node2 sshd-session[4268]: Disconnected from user root 10.31.44.128 port 56516 Jan 13 18:27:00 managed-node2 sshd-session[4265]: pam_unix(sshd:session): session closed for user root Jan 13 18:27:00 managed-node2 audit[4265]: USER_END pid=4265 uid=0 auid=0 ses=9 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/libexec/openssh/sshd-session" hostname=10.31.44.128 addr=10.31.44.128 terminal=ssh res=success' Jan 13 18:27:00 managed-node2 audit[4265]: CRED_DISP pid=4265 uid=0 auid=0 ses=9 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/libexec/openssh/sshd-session" hostname=10.31.44.128 addr=10.31.44.128 terminal=ssh res=success' Jan 13 18:27:00 managed-node2 systemd[1]: session-9.scope: Deactivated successfully. ░░ Subject: Unit succeeded ░░ Defined-By: systemd ░░ Support: https://lists.freedesktop.org/mailman/listinfo/systemd-devel ░░ ░░ The unit session-9.scope has successfully entered the 'dead' state. Jan 13 18:27:00 managed-node2 systemd-logind[610]: Session 9 logged out. Waiting for processes to exit. Jan 13 18:27:00 managed-node2 systemd-logind[610]: Removed session 9. ░░ Subject: Session 9 has been terminated ░░ Defined-By: systemd ░░ Support: https://lists.freedesktop.org/mailman/listinfo/systemd-devel ░░ Documentation: sd-login(3) ░░ ░░ A session with the ID 9 has been terminated. Jan 13 18:27:01 managed-node2 audit[3846]: USER_LOGIN pid=3846 uid=0 auid=0 ses=7 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/libexec/openssh/sshd-session" hostname=? addr=10.31.44.128 terminal=ssh res=success' Jan 13 18:27:01 managed-node2 audit[3846]: USER_START pid=3846 uid=0 auid=0 ses=7 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/libexec/openssh/sshd-session" hostname=? addr=10.31.44.128 terminal=ssh res=success' Jan 13 18:27:01 managed-node2 audit[4295]: CRYPTO_KEY_USER pid=4295 uid=0 auid=0 ses=7 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:96:48:6b:c4:0e:e4:7c:8c:95:34:f6:ff:95:7a:36:f6:ab:e8:7a:6f:e3:41:4f:9c:1d:fc:82:b5:cf:15:47:44 direction=? spid=4295 suid=0 exe="/usr/libexec/openssh/sshd-session" hostname=? addr=10.31.44.128 terminal=? res=success' Jan 13 18:27:01 managed-node2 audit[3846]: USER_END pid=3846 uid=0 auid=0 ses=7 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/libexec/openssh/sshd-session" hostname=? addr=10.31.44.128 terminal=ssh res=success' Jan 13 18:27:01 managed-node2 audit[3846]: USER_LOGOUT pid=3846 uid=0 auid=0 ses=7 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/libexec/openssh/sshd-session" hostname=? addr=10.31.44.128 terminal=ssh res=success' Jan 13 18:27:01 managed-node2 audit[3846]: USER_LOGIN pid=3846 uid=0 auid=0 ses=7 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/libexec/openssh/sshd-session" hostname=? addr=10.31.44.128 terminal=ssh res=success' Jan 13 18:27:01 managed-node2 audit[3846]: USER_START pid=3846 uid=0 auid=0 ses=7 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/libexec/openssh/sshd-session" hostname=? addr=10.31.44.128 terminal=ssh res=success' Jan 13 18:27:01 managed-node2 audit[4319]: CRYPTO_KEY_USER pid=4319 uid=0 auid=0 ses=7 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:96:48:6b:c4:0e:e4:7c:8c:95:34:f6:ff:95:7a:36:f6:ab:e8:7a:6f:e3:41:4f:9c:1d:fc:82:b5:cf:15:47:44 direction=? spid=4319 suid=0 exe="/usr/libexec/openssh/sshd-session" hostname=? addr=10.31.44.128 terminal=? res=success' Jan 13 18:27:01 managed-node2 audit[3846]: USER_END pid=3846 uid=0 auid=0 ses=7 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/libexec/openssh/sshd-session" hostname=? addr=10.31.44.128 terminal=ssh res=success' Jan 13 18:27:01 managed-node2 audit[3846]: USER_LOGOUT pid=3846 uid=0 auid=0 ses=7 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/libexec/openssh/sshd-session" hostname=? addr=10.31.44.128 terminal=ssh res=success' Jan 13 18:27:01 managed-node2 audit[3846]: USER_LOGIN pid=3846 uid=0 auid=0 ses=7 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/libexec/openssh/sshd-session" hostname=? addr=10.31.44.128 terminal=ssh res=success' Jan 13 18:27:01 managed-node2 audit[3846]: USER_START pid=3846 uid=0 auid=0 ses=7 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/libexec/openssh/sshd-session" hostname=? addr=10.31.44.128 terminal=ssh res=success' Jan 13 18:27:01 managed-node2 audit[4349]: CRYPTO_KEY_USER pid=4349 uid=0 auid=0 ses=7 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:96:48:6b:c4:0e:e4:7c:8c:95:34:f6:ff:95:7a:36:f6:ab:e8:7a:6f:e3:41:4f:9c:1d:fc:82:b5:cf:15:47:44 direction=? spid=4349 suid=0 exe="/usr/libexec/openssh/sshd-session" hostname=? addr=10.31.44.128 terminal=? res=success' Jan 13 18:27:01 managed-node2 audit[3846]: USER_END pid=3846 uid=0 auid=0 ses=7 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/libexec/openssh/sshd-session" hostname=? addr=10.31.44.128 terminal=ssh res=success' Jan 13 18:27:01 managed-node2 audit[3846]: USER_LOGOUT pid=3846 uid=0 auid=0 ses=7 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/libexec/openssh/sshd-session" hostname=? addr=10.31.44.128 terminal=ssh res=success' Jan 13 18:27:01 managed-node2 audit[3846]: USER_LOGIN pid=3846 uid=0 auid=0 ses=7 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/libexec/openssh/sshd-session" hostname=? addr=10.31.44.128 terminal=ssh res=success' Jan 13 18:27:01 managed-node2 audit[3846]: USER_START pid=3846 uid=0 auid=0 ses=7 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/libexec/openssh/sshd-session" hostname=? addr=10.31.44.128 terminal=ssh res=success' Jan 13 18:27:01 managed-node2 audit[4375]: CRYPTO_KEY_USER pid=4375 uid=0 auid=0 ses=7 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:96:48:6b:c4:0e:e4:7c:8c:95:34:f6:ff:95:7a:36:f6:ab:e8:7a:6f:e3:41:4f:9c:1d:fc:82:b5:cf:15:47:44 direction=? spid=4375 suid=0 exe="/usr/libexec/openssh/sshd-session" hostname=? addr=10.31.44.128 terminal=? res=success' Jan 13 18:27:01 managed-node2 audit[3846]: USER_END pid=3846 uid=0 auid=0 ses=7 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/libexec/openssh/sshd-session" hostname=? addr=10.31.44.128 terminal=ssh res=success' Jan 13 18:27:01 managed-node2 audit[3846]: USER_LOGOUT pid=3846 uid=0 auid=0 ses=7 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/libexec/openssh/sshd-session" hostname=? addr=10.31.44.128 terminal=ssh res=success' Jan 13 18:27:01 managed-node2 audit[3846]: USER_LOGIN pid=3846 uid=0 auid=0 ses=7 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/libexec/openssh/sshd-session" hostname=? addr=10.31.44.128 terminal=ssh res=success' Jan 13 18:27:01 managed-node2 audit[3846]: USER_START pid=3846 uid=0 auid=0 ses=7 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/libexec/openssh/sshd-session" hostname=? addr=10.31.44.128 terminal=ssh res=success' Jan 13 18:27:01 managed-node2 audit[4400]: CRYPTO_KEY_USER pid=4400 uid=0 auid=0 ses=7 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:96:48:6b:c4:0e:e4:7c:8c:95:34:f6:ff:95:7a:36:f6:ab:e8:7a:6f:e3:41:4f:9c:1d:fc:82:b5:cf:15:47:44 direction=? spid=4400 suid=0 exe="/usr/libexec/openssh/sshd-session" hostname=? addr=10.31.44.128 terminal=? res=success' Jan 13 18:27:01 managed-node2 audit[3846]: USER_END pid=3846 uid=0 auid=0 ses=7 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/libexec/openssh/sshd-session" hostname=? addr=10.31.44.128 terminal=ssh res=success' Jan 13 18:27:01 managed-node2 audit[3846]: USER_LOGOUT pid=3846 uid=0 auid=0 ses=7 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/libexec/openssh/sshd-session" hostname=? addr=10.31.44.128 terminal=ssh res=success' Jan 13 18:27:01 managed-node2 audit[3846]: USER_LOGIN pid=3846 uid=0 auid=0 ses=7 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/libexec/openssh/sshd-session" hostname=? addr=10.31.44.128 terminal=ssh res=success' Jan 13 18:27:01 managed-node2 audit[3846]: USER_START pid=3846 uid=0 auid=0 ses=7 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/libexec/openssh/sshd-session" hostname=? addr=10.31.44.128 terminal=ssh res=success' Jan 13 18:27:01 managed-node2 audit[4424]: CRYPTO_KEY_USER pid=4424 uid=0 auid=0 ses=7 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:96:48:6b:c4:0e:e4:7c:8c:95:34:f6:ff:95:7a:36:f6:ab:e8:7a:6f:e3:41:4f:9c:1d:fc:82:b5:cf:15:47:44 direction=? spid=4424 suid=0 exe="/usr/libexec/openssh/sshd-session" hostname=? addr=10.31.44.128 terminal=? res=success' Jan 13 18:27:01 managed-node2 audit[3846]: USER_END pid=3846 uid=0 auid=0 ses=7 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/libexec/openssh/sshd-session" hostname=? addr=10.31.44.128 terminal=ssh res=success' Jan 13 18:27:01 managed-node2 audit[3846]: USER_LOGOUT pid=3846 uid=0 auid=0 ses=7 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/libexec/openssh/sshd-session" hostname=? addr=10.31.44.128 terminal=ssh res=success' Jan 13 18:27:01 managed-node2 audit[3846]: USER_LOGIN pid=3846 uid=0 auid=0 ses=7 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/libexec/openssh/sshd-session" hostname=managed-node2 addr=10.31.44.128 terminal=/dev/pts/0 res=success' Jan 13 18:27:01 managed-node2 audit[3846]: USER_START pid=3846 uid=0 auid=0 ses=7 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/libexec/openssh/sshd-session" hostname=managed-node2 addr=10.31.44.128 terminal=/dev/pts/0 res=success' Jan 13 18:27:01 managed-node2 audit[4449]: CRYPTO_KEY_USER pid=4449 uid=0 auid=0 ses=7 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:96:48:6b:c4:0e:e4:7c:8c:95:34:f6:ff:95:7a:36:f6:ab:e8:7a:6f:e3:41:4f:9c:1d:fc:82:b5:cf:15:47:44 direction=? spid=4449 suid=0 exe="/usr/libexec/openssh/sshd-session" hostname=managed-node2 addr=10.31.44.128 terminal=pts/0 res=success' Jan 13 18:27:01 managed-node2 python3[4475]: ansible-setup Invoked with gather_subset=['!all', '!min', 'distribution', 'distribution_major_version', 'distribution_version', 'os_family'] gather_timeout=10 filter=[] fact_path=/etc/ansible/facts.d Jan 13 18:27:01 managed-node2 audit[3846]: USER_END pid=3846 uid=0 auid=0 ses=7 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/libexec/openssh/sshd-session" hostname=managed-node2 addr=? terminal=/dev/pts/0 res=success' Jan 13 18:27:01 managed-node2 audit[3846]: USER_LOGOUT pid=3846 uid=0 auid=0 ses=7 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/libexec/openssh/sshd-session" hostname=managed-node2 addr=? terminal=/dev/pts/0 res=success' Jan 13 18:27:01 managed-node2 audit[3846]: USER_LOGIN pid=3846 uid=0 auid=0 ses=7 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/libexec/openssh/sshd-session" hostname=? addr=10.31.44.128 terminal=ssh res=success' Jan 13 18:27:01 managed-node2 audit[3846]: USER_START pid=3846 uid=0 auid=0 ses=7 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/libexec/openssh/sshd-session" hostname=? addr=10.31.44.128 terminal=ssh res=success' Jan 13 18:27:01 managed-node2 audit[4478]: CRYPTO_KEY_USER pid=4478 uid=0 auid=0 ses=7 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:96:48:6b:c4:0e:e4:7c:8c:95:34:f6:ff:95:7a:36:f6:ab:e8:7a:6f:e3:41:4f:9c:1d:fc:82:b5:cf:15:47:44 direction=? spid=4478 suid=0 exe="/usr/libexec/openssh/sshd-session" hostname=? addr=10.31.44.128 terminal=? res=success' Jan 13 18:27:01 managed-node2 audit[3846]: USER_END pid=3846 uid=0 auid=0 ses=7 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/libexec/openssh/sshd-session" hostname=? addr=10.31.44.128 terminal=ssh res=success' Jan 13 18:27:01 managed-node2 audit[3846]: USER_LOGOUT pid=3846 uid=0 auid=0 ses=7 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/libexec/openssh/sshd-session" hostname=? addr=10.31.44.128 terminal=ssh res=success' Jan 13 18:27:01 managed-node2 audit[3846]: USER_LOGIN pid=3846 uid=0 auid=0 ses=7 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/libexec/openssh/sshd-session" hostname=? addr=10.31.44.128 terminal=ssh res=success' Jan 13 18:27:01 managed-node2 audit[3846]: USER_START pid=3846 uid=0 auid=0 ses=7 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/libexec/openssh/sshd-session" hostname=? addr=10.31.44.128 terminal=ssh res=success' Jan 13 18:27:01 managed-node2 audit[4503]: CRYPTO_KEY_USER pid=4503 uid=0 auid=0 ses=7 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:96:48:6b:c4:0e:e4:7c:8c:95:34:f6:ff:95:7a:36:f6:ab:e8:7a:6f:e3:41:4f:9c:1d:fc:82:b5:cf:15:47:44 direction=? spid=4503 suid=0 exe="/usr/libexec/openssh/sshd-session" hostname=? addr=10.31.44.128 terminal=? res=success' Jan 13 18:27:01 managed-node2 audit[3846]: USER_END pid=3846 uid=0 auid=0 ses=7 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/libexec/openssh/sshd-session" hostname=? addr=10.31.44.128 terminal=ssh res=success' Jan 13 18:27:01 managed-node2 audit[3846]: USER_LOGOUT pid=3846 uid=0 auid=0 ses=7 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/libexec/openssh/sshd-session" hostname=? addr=10.31.44.128 terminal=ssh res=success' Jan 13 18:27:01 managed-node2 audit[3846]: USER_LOGIN pid=3846 uid=0 auid=0 ses=7 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/libexec/openssh/sshd-session" hostname=? addr=10.31.44.128 terminal=ssh res=success' Jan 13 18:27:01 managed-node2 audit[3846]: USER_START pid=3846 uid=0 auid=0 ses=7 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/libexec/openssh/sshd-session" hostname=? addr=10.31.44.128 terminal=ssh res=success' Jan 13 18:27:01 managed-node2 audit[4527]: CRYPTO_KEY_USER pid=4527 uid=0 auid=0 ses=7 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:96:48:6b:c4:0e:e4:7c:8c:95:34:f6:ff:95:7a:36:f6:ab:e8:7a:6f:e3:41:4f:9c:1d:fc:82:b5:cf:15:47:44 direction=? spid=4527 suid=0 exe="/usr/libexec/openssh/sshd-session" hostname=? addr=10.31.44.128 terminal=? res=success' Jan 13 18:27:01 managed-node2 audit[3846]: USER_END pid=3846 uid=0 auid=0 ses=7 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/libexec/openssh/sshd-session" hostname=? addr=10.31.44.128 terminal=ssh res=success' Jan 13 18:27:01 managed-node2 audit[3846]: USER_LOGOUT pid=3846 uid=0 auid=0 ses=7 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/libexec/openssh/sshd-session" hostname=? addr=10.31.44.128 terminal=ssh res=success' Jan 13 18:27:02 managed-node2 audit[3846]: USER_LOGIN pid=3846 uid=0 auid=0 ses=7 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/libexec/openssh/sshd-session" hostname=? addr=10.31.44.128 terminal=ssh res=success' Jan 13 18:27:02 managed-node2 audit[3846]: USER_START pid=3846 uid=0 auid=0 ses=7 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/libexec/openssh/sshd-session" hostname=? addr=10.31.44.128 terminal=ssh res=success' Jan 13 18:27:02 managed-node2 audit[4557]: CRYPTO_KEY_USER pid=4557 uid=0 auid=0 ses=7 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:96:48:6b:c4:0e:e4:7c:8c:95:34:f6:ff:95:7a:36:f6:ab:e8:7a:6f:e3:41:4f:9c:1d:fc:82:b5:cf:15:47:44 direction=? spid=4557 suid=0 exe="/usr/libexec/openssh/sshd-session" hostname=? addr=10.31.44.128 terminal=? res=success' Jan 13 18:27:02 managed-node2 audit[3846]: USER_END pid=3846 uid=0 auid=0 ses=7 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/libexec/openssh/sshd-session" hostname=? addr=10.31.44.128 terminal=ssh res=success' Jan 13 18:27:02 managed-node2 audit[3846]: USER_LOGOUT pid=3846 uid=0 auid=0 ses=7 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/libexec/openssh/sshd-session" hostname=? addr=10.31.44.128 terminal=ssh res=success' Jan 13 18:27:02 managed-node2 audit[3846]: USER_LOGIN pid=3846 uid=0 auid=0 ses=7 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/libexec/openssh/sshd-session" hostname=? addr=10.31.44.128 terminal=ssh res=success' Jan 13 18:27:02 managed-node2 audit[3846]: USER_START pid=3846 uid=0 auid=0 ses=7 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/libexec/openssh/sshd-session" hostname=? addr=10.31.44.128 terminal=ssh res=success' Jan 13 18:27:02 managed-node2 audit[4581]: CRYPTO_KEY_USER pid=4581 uid=0 auid=0 ses=7 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:96:48:6b:c4:0e:e4:7c:8c:95:34:f6:ff:95:7a:36:f6:ab:e8:7a:6f:e3:41:4f:9c:1d:fc:82:b5:cf:15:47:44 direction=? spid=4581 suid=0 exe="/usr/libexec/openssh/sshd-session" hostname=? addr=10.31.44.128 terminal=? res=success' Jan 13 18:27:02 managed-node2 audit[3846]: USER_END pid=3846 uid=0 auid=0 ses=7 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/libexec/openssh/sshd-session" hostname=? addr=10.31.44.128 terminal=ssh res=success' Jan 13 18:27:02 managed-node2 audit[3846]: USER_LOGOUT pid=3846 uid=0 auid=0 ses=7 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/libexec/openssh/sshd-session" hostname=? addr=10.31.44.128 terminal=ssh res=success' Jan 13 18:27:02 managed-node2 audit[3846]: USER_LOGIN pid=3846 uid=0 auid=0 ses=7 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/libexec/openssh/sshd-session" hostname=managed-node2 addr=10.31.44.128 terminal=/dev/pts/0 res=success' Jan 13 18:27:02 managed-node2 audit[3846]: USER_START pid=3846 uid=0 auid=0 ses=7 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/libexec/openssh/sshd-session" hostname=managed-node2 addr=10.31.44.128 terminal=/dev/pts/0 res=success' Jan 13 18:27:02 managed-node2 audit[4606]: CRYPTO_KEY_USER pid=4606 uid=0 auid=0 ses=7 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:96:48:6b:c4:0e:e4:7c:8c:95:34:f6:ff:95:7a:36:f6:ab:e8:7a:6f:e3:41:4f:9c:1d:fc:82:b5:cf:15:47:44 direction=? spid=4606 suid=0 exe="/usr/libexec/openssh/sshd-session" hostname=managed-node2 addr=10.31.44.128 terminal=pts/0 res=success' Jan 13 18:27:02 managed-node2 python3[4632]: ansible-stat Invoked with path=/run/ostree-booted follow=False get_checksum=True get_mime=True get_attributes=True checksum_algorithm=sha1 Jan 13 18:27:02 managed-node2 audit[3846]: USER_END pid=3846 uid=0 auid=0 ses=7 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/libexec/openssh/sshd-session" hostname=managed-node2 addr=? terminal=/dev/pts/0 res=success' Jan 13 18:27:02 managed-node2 audit[3846]: USER_LOGOUT pid=3846 uid=0 auid=0 ses=7 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/libexec/openssh/sshd-session" hostname=managed-node2 addr=? terminal=/dev/pts/0 res=success' Jan 13 18:27:02 managed-node2 audit[3846]: USER_LOGIN pid=3846 uid=0 auid=0 ses=7 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/libexec/openssh/sshd-session" hostname=? addr=10.31.44.128 terminal=ssh res=success' Jan 13 18:27:02 managed-node2 audit[3846]: USER_START pid=3846 uid=0 auid=0 ses=7 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/libexec/openssh/sshd-session" hostname=? addr=10.31.44.128 terminal=ssh res=success' Jan 13 18:27:02 managed-node2 audit[4633]: CRYPTO_KEY_USER pid=4633 uid=0 auid=0 ses=7 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:96:48:6b:c4:0e:e4:7c:8c:95:34:f6:ff:95:7a:36:f6:ab:e8:7a:6f:e3:41:4f:9c:1d:fc:82:b5:cf:15:47:44 direction=? spid=4633 suid=0 exe="/usr/libexec/openssh/sshd-session" hostname=? addr=10.31.44.128 terminal=? res=success' Jan 13 18:27:02 managed-node2 audit[3846]: USER_END pid=3846 uid=0 auid=0 ses=7 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/libexec/openssh/sshd-session" hostname=? addr=10.31.44.128 terminal=ssh res=success' Jan 13 18:27:02 managed-node2 audit[3846]: USER_LOGOUT pid=3846 uid=0 auid=0 ses=7 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/libexec/openssh/sshd-session" hostname=? addr=10.31.44.128 terminal=ssh res=success' Jan 13 18:27:02 managed-node2 audit[4659]: CRYPTO_KEY_USER pid=4659 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:f3:06:22:66:28:2c:8c:ef:41:54:cb:13:1f:73:c7:8e:ee:30:95:4e:b8:50:8f:2d:c5:ca:0b:8c:93:3a:72:30 direction=? spid=4659 suid=0 exe="/usr/libexec/openssh/sshd-session" hostname=? addr=10.31.44.128 terminal=? res=success' Jan 13 18:27:02 managed-node2 audit[4659]: CRYPTO_KEY_USER pid=4659 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:f0:51:d3:52:9e:e5:f1:0d:39:87:8f:d9:fc:1e:8d:dd:5f:d4:70:49:ac:ea:53:d5:1f:c2:d2:1b:af:00:9d:c1 direction=? spid=4659 suid=0 exe="/usr/libexec/openssh/sshd-session" hostname=? addr=10.31.44.128 terminal=? res=success' Jan 13 18:27:02 managed-node2 audit[4659]: CRYPTO_KEY_USER pid=4659 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:96:48:6b:c4:0e:e4:7c:8c:95:34:f6:ff:95:7a:36:f6:ab:e8:7a:6f:e3:41:4f:9c:1d:fc:82:b5:cf:15:47:44 direction=? spid=4659 suid=0 exe="/usr/libexec/openssh/sshd-session" hostname=? addr=10.31.44.128 terminal=? res=success' Jan 13 18:27:02 managed-node2 audit[4658]: CRYPTO_SESSION pid=4658 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=4659 suid=74 rport=56526 laddr=10.31.13.184 lport=22 exe="/usr/libexec/openssh/sshd-session" hostname=? addr=10.31.44.128 terminal=? res=success' Jan 13 18:27:02 managed-node2 audit[4658]: CRYPTO_SESSION pid=4658 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=4659 suid=74 rport=56526 laddr=10.31.13.184 lport=22 exe="/usr/libexec/openssh/sshd-session" hostname=? addr=10.31.44.128 terminal=? res=success' Jan 13 18:27:02 managed-node2 audit[4658]: USER_AUTH pid=4658 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/libexec/openssh/sshd-session" hostname=? addr=10.31.44.128 terminal=? res=success' Jan 13 18:27:02 managed-node2 audit[4658]: CRYPTO_KEY_USER pid=4658 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:f6:3d:5b:97:0b:77:c1:ca:d1:88:66:19:43:b6:46:bb:d6:b1:9b:77:03:92:51:fa:ff:3e:1c:f8:47:bc:0b:31 exe="/usr/libexec/openssh/sshd-session" hostname=? addr=10.31.44.128 terminal=? res=success' Jan 13 18:27:02 managed-node2 audit[4658]: USER_ACCT pid=4658 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/libexec/openssh/sshd-session" hostname=10.31.44.128 addr=10.31.44.128 terminal=ssh res=success' Jan 13 18:27:02 managed-node2 sshd-session[4658]: Accepted publickey for root from 10.31.44.128 port 56526 ssh2: RSA SHA256:9j1blwt3wcrRiGYZQ7ZGu9axm3cDklH6/z4c+Ee8CzE Jan 13 18:27:02 managed-node2 audit[4658]: CRYPTO_KEY_USER pid=4658 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=4659 suid=74 rport=56526 laddr=10.31.13.184 lport=22 exe="/usr/libexec/openssh/sshd-session" hostname=? addr=10.31.44.128 terminal=? res=success' Jan 13 18:27:02 managed-node2 audit[4658]: CRED_ACQ pid=4658 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/libexec/openssh/sshd-session" hostname=10.31.44.128 addr=10.31.44.128 terminal=ssh res=success' Jan 13 18:27:02 managed-node2 audit[4658]: USER_ROLE_CHANGE pid=4658 uid=0 auid=0 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pam_selinux default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/libexec/openssh/sshd-session" hostname=10.31.44.128 addr=10.31.44.128 terminal=ssh res=success' Jan 13 18:27:02 managed-node2 systemd-logind[610]: New session 10 of user root. ░░ Subject: A new session 10 has been created for user root ░░ Defined-By: systemd ░░ Support: https://lists.freedesktop.org/mailman/listinfo/systemd-devel ░░ Documentation: sd-login(3) ░░ ░░ A new session with the ID 10 has been created for the user root. ░░ ░░ The leading process of the session is 4658. Jan 13 18:27:02 managed-node2 systemd[1]: Started session-10.scope - Session 10 of User root. ░░ Subject: A start job for unit session-10.scope has finished successfully ░░ Defined-By: systemd ░░ Support: https://lists.freedesktop.org/mailman/listinfo/systemd-devel ░░ ░░ A start job for unit session-10.scope has finished successfully. ░░ ░░ The job identifier is 2090. Jan 13 18:27:02 managed-node2 sshd-session[4658]: pam_unix(sshd:session): session opened for user root(uid=0) by root(uid=0) Jan 13 18:27:02 managed-node2 audit[4658]: USER_START pid=4658 uid=0 auid=0 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/libexec/openssh/sshd-session" hostname=10.31.44.128 addr=10.31.44.128 terminal=ssh res=success' Jan 13 18:27:02 managed-node2 audit[4661]: CRYPTO_KEY_USER pid=4661 uid=0 auid=0 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:f3:06:22:66:28:2c:8c:ef:41:54:cb:13:1f:73:c7:8e:ee:30:95:4e:b8:50:8f:2d:c5:ca:0b:8c:93:3a:72:30 direction=? spid=4661 suid=0 exe="/usr/libexec/openssh/sshd-session" hostname=? addr=10.31.44.128 terminal=? res=success' Jan 13 18:27:02 managed-node2 audit[4661]: CRYPTO_KEY_USER pid=4661 uid=0 auid=0 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:f0:51:d3:52:9e:e5:f1:0d:39:87:8f:d9:fc:1e:8d:dd:5f:d4:70:49:ac:ea:53:d5:1f:c2:d2:1b:af:00:9d:c1 direction=? spid=4661 suid=0 exe="/usr/libexec/openssh/sshd-session" hostname=? addr=10.31.44.128 terminal=? res=success' Jan 13 18:27:02 managed-node2 audit[4661]: CRYPTO_KEY_USER pid=4661 uid=0 auid=0 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:96:48:6b:c4:0e:e4:7c:8c:95:34:f6:ff:95:7a:36:f6:ab:e8:7a:6f:e3:41:4f:9c:1d:fc:82:b5:cf:15:47:44 direction=? spid=4661 suid=0 exe="/usr/libexec/openssh/sshd-session" hostname=? addr=10.31.44.128 terminal=? res=success' Jan 13 18:27:02 managed-node2 audit[4661]: CRED_ACQ pid=4661 uid=0 auid=0 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/libexec/openssh/sshd-session" hostname=10.31.44.128 addr=10.31.44.128 terminal=ssh res=success' Jan 13 18:27:02 managed-node2 audit[4658]: USER_LOGIN pid=4658 uid=0 auid=0 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/libexec/openssh/sshd-session" hostname=? addr=10.31.44.128 terminal=ssh res=success' Jan 13 18:27:02 managed-node2 audit[4658]: USER_START pid=4658 uid=0 auid=0 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/libexec/openssh/sshd-session" hostname=? addr=10.31.44.128 terminal=ssh res=success' Jan 13 18:27:02 managed-node2 audit[4662]: CRYPTO_KEY_USER pid=4662 uid=0 auid=0 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:96:48:6b:c4:0e:e4:7c:8c:95:34:f6:ff:95:7a:36:f6:ab:e8:7a:6f:e3:41:4f:9c:1d:fc:82:b5:cf:15:47:44 direction=? spid=4662 suid=0 exe="/usr/libexec/openssh/sshd-session" hostname=? addr=10.31.44.128 terminal=? res=success' Jan 13 18:27:02 managed-node2 audit[4658]: USER_END pid=4658 uid=0 auid=0 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/libexec/openssh/sshd-session" hostname=? addr=10.31.44.128 terminal=ssh res=success' Jan 13 18:27:02 managed-node2 audit[4658]: USER_LOGOUT pid=4658 uid=0 auid=0 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/libexec/openssh/sshd-session" hostname=? addr=10.31.44.128 terminal=ssh res=success' Jan 13 18:27:02 managed-node2 sshd-session[4661]: Received disconnect from 10.31.44.128 port 56526:11: disconnected by user Jan 13 18:27:02 managed-node2 sshd-session[4661]: Disconnected from user root 10.31.44.128 port 56526 Jan 13 18:27:02 managed-node2 audit[4658]: CRYPTO_KEY_USER pid=4658 uid=0 auid=0 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=4661 suid=0 rport=56526 laddr=10.31.13.184 lport=22 exe="/usr/libexec/openssh/sshd-session" hostname=? addr=10.31.44.128 terminal=? res=success' Jan 13 18:27:02 managed-node2 sshd-session[4658]: pam_unix(sshd:session): session closed for user root Jan 13 18:27:02 managed-node2 audit[4658]: USER_END pid=4658 uid=0 auid=0 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/libexec/openssh/sshd-session" hostname=10.31.44.128 addr=10.31.44.128 terminal=ssh res=success' Jan 13 18:27:02 managed-node2 audit[4658]: CRED_DISP pid=4658 uid=0 auid=0 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/libexec/openssh/sshd-session" hostname=10.31.44.128 addr=10.31.44.128 terminal=ssh res=success' Jan 13 18:27:02 managed-node2 systemd[1]: session-10.scope: Deactivated successfully. ░░ Subject: Unit succeeded ░░ Defined-By: systemd ░░ Support: https://lists.freedesktop.org/mailman/listinfo/systemd-devel ░░ ░░ The unit session-10.scope has successfully entered the 'dead' state. Jan 13 18:27:02 managed-node2 systemd-logind[610]: Session 10 logged out. Waiting for processes to exit. Jan 13 18:27:02 managed-node2 systemd-logind[610]: Removed session 10. ░░ Subject: Session 10 has been terminated ░░ Defined-By: systemd ░░ Support: https://lists.freedesktop.org/mailman/listinfo/systemd-devel ░░ Documentation: sd-login(3) ░░ ░░ A session with the ID 10 has been terminated. Jan 13 18:27:02 managed-node2 audit[4689]: CRYPTO_KEY_USER pid=4689 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:f3:06:22:66:28:2c:8c:ef:41:54:cb:13:1f:73:c7:8e:ee:30:95:4e:b8:50:8f:2d:c5:ca:0b:8c:93:3a:72:30 direction=? spid=4689 suid=0 exe="/usr/libexec/openssh/sshd-session" hostname=? addr=10.31.44.128 terminal=? res=success' Jan 13 18:27:02 managed-node2 audit[4689]: CRYPTO_KEY_USER pid=4689 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:f0:51:d3:52:9e:e5:f1:0d:39:87:8f:d9:fc:1e:8d:dd:5f:d4:70:49:ac:ea:53:d5:1f:c2:d2:1b:af:00:9d:c1 direction=? spid=4689 suid=0 exe="/usr/libexec/openssh/sshd-session" hostname=? addr=10.31.44.128 terminal=? res=success' Jan 13 18:27:02 managed-node2 audit[4689]: CRYPTO_KEY_USER pid=4689 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:96:48:6b:c4:0e:e4:7c:8c:95:34:f6:ff:95:7a:36:f6:ab:e8:7a:6f:e3:41:4f:9c:1d:fc:82:b5:cf:15:47:44 direction=? spid=4689 suid=0 exe="/usr/libexec/openssh/sshd-session" hostname=? addr=10.31.44.128 terminal=? res=success' Jan 13 18:27:02 managed-node2 audit[4688]: CRYPTO_SESSION pid=4688 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=4689 suid=74 rport=56528 laddr=10.31.13.184 lport=22 exe="/usr/libexec/openssh/sshd-session" hostname=? addr=10.31.44.128 terminal=? res=success' Jan 13 18:27:02 managed-node2 audit[4688]: CRYPTO_SESSION pid=4688 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=4689 suid=74 rport=56528 laddr=10.31.13.184 lport=22 exe="/usr/libexec/openssh/sshd-session" hostname=? addr=10.31.44.128 terminal=? res=success' Jan 13 18:27:02 managed-node2 audit[4688]: USER_AUTH pid=4688 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/libexec/openssh/sshd-session" hostname=? addr=10.31.44.128 terminal=? res=success' Jan 13 18:27:02 managed-node2 audit[4688]: CRYPTO_KEY_USER pid=4688 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:f6:3d:5b:97:0b:77:c1:ca:d1:88:66:19:43:b6:46:bb:d6:b1:9b:77:03:92:51:fa:ff:3e:1c:f8:47:bc:0b:31 exe="/usr/libexec/openssh/sshd-session" hostname=? addr=10.31.44.128 terminal=? res=success' Jan 13 18:27:02 managed-node2 audit[4688]: USER_ACCT pid=4688 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/libexec/openssh/sshd-session" hostname=10.31.44.128 addr=10.31.44.128 terminal=ssh res=success' Jan 13 18:27:02 managed-node2 sshd-session[4688]: Accepted publickey for root from 10.31.44.128 port 56528 ssh2: RSA SHA256:9j1blwt3wcrRiGYZQ7ZGu9axm3cDklH6/z4c+Ee8CzE Jan 13 18:27:02 managed-node2 audit[4688]: CRYPTO_KEY_USER pid=4688 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=4689 suid=74 rport=56528 laddr=10.31.13.184 lport=22 exe="/usr/libexec/openssh/sshd-session" hostname=? addr=10.31.44.128 terminal=? res=success' Jan 13 18:27:02 managed-node2 audit[4688]: CRED_ACQ pid=4688 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/libexec/openssh/sshd-session" hostname=10.31.44.128 addr=10.31.44.128 terminal=ssh res=success' Jan 13 18:27:02 managed-node2 audit[4688]: USER_ROLE_CHANGE pid=4688 uid=0 auid=0 ses=11 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pam_selinux default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/libexec/openssh/sshd-session" hostname=10.31.44.128 addr=10.31.44.128 terminal=ssh res=success' Jan 13 18:27:02 managed-node2 systemd-logind[610]: New session 11 of user root. ░░ Subject: A new session 11 has been created for user root ░░ Defined-By: systemd ░░ Support: https://lists.freedesktop.org/mailman/listinfo/systemd-devel ░░ Documentation: sd-login(3) ░░ ░░ A new session with the ID 11 has been created for the user root. ░░ ░░ The leading process of the session is 4688. Jan 13 18:27:02 managed-node2 systemd[1]: Started session-11.scope - Session 11 of User root. ░░ Subject: A start job for unit session-11.scope has finished successfully ░░ Defined-By: systemd ░░ Support: https://lists.freedesktop.org/mailman/listinfo/systemd-devel ░░ ░░ A start job for unit session-11.scope has finished successfully. ░░ ░░ The job identifier is 2186. Jan 13 18:27:02 managed-node2 sshd-session[4688]: pam_unix(sshd:session): session opened for user root(uid=0) by root(uid=0) Jan 13 18:27:02 managed-node2 audit[4688]: USER_START pid=4688 uid=0 auid=0 ses=11 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/libexec/openssh/sshd-session" hostname=10.31.44.128 addr=10.31.44.128 terminal=ssh res=success' Jan 13 18:27:02 managed-node2 audit[4691]: CRYPTO_KEY_USER pid=4691 uid=0 auid=0 ses=11 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:f3:06:22:66:28:2c:8c:ef:41:54:cb:13:1f:73:c7:8e:ee:30:95:4e:b8:50:8f:2d:c5:ca:0b:8c:93:3a:72:30 direction=? spid=4691 suid=0 exe="/usr/libexec/openssh/sshd-session" hostname=? addr=10.31.44.128 terminal=? res=success' Jan 13 18:27:02 managed-node2 audit[4691]: CRYPTO_KEY_USER pid=4691 uid=0 auid=0 ses=11 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:f0:51:d3:52:9e:e5:f1:0d:39:87:8f:d9:fc:1e:8d:dd:5f:d4:70:49:ac:ea:53:d5:1f:c2:d2:1b:af:00:9d:c1 direction=? spid=4691 suid=0 exe="/usr/libexec/openssh/sshd-session" hostname=? addr=10.31.44.128 terminal=? res=success' Jan 13 18:27:02 managed-node2 audit[4691]: CRYPTO_KEY_USER pid=4691 uid=0 auid=0 ses=11 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:96:48:6b:c4:0e:e4:7c:8c:95:34:f6:ff:95:7a:36:f6:ab:e8:7a:6f:e3:41:4f:9c:1d:fc:82:b5:cf:15:47:44 direction=? spid=4691 suid=0 exe="/usr/libexec/openssh/sshd-session" hostname=? addr=10.31.44.128 terminal=? res=success' Jan 13 18:27:02 managed-node2 audit[4691]: CRED_ACQ pid=4691 uid=0 auid=0 ses=11 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/libexec/openssh/sshd-session" hostname=10.31.44.128 addr=10.31.44.128 terminal=ssh res=success' Jan 13 18:27:02 managed-node2 audit[4688]: USER_LOGIN pid=4688 uid=0 auid=0 ses=11 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/libexec/openssh/sshd-session" hostname=? addr=10.31.44.128 terminal=ssh res=success' Jan 13 18:27:02 managed-node2 audit[4688]: USER_START pid=4688 uid=0 auid=0 ses=11 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/libexec/openssh/sshd-session" hostname=? addr=10.31.44.128 terminal=ssh res=success' Jan 13 18:27:02 managed-node2 audit[4692]: CRYPTO_KEY_USER pid=4692 uid=0 auid=0 ses=11 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:96:48:6b:c4:0e:e4:7c:8c:95:34:f6:ff:95:7a:36:f6:ab:e8:7a:6f:e3:41:4f:9c:1d:fc:82:b5:cf:15:47:44 direction=? spid=4692 suid=0 exe="/usr/libexec/openssh/sshd-session" hostname=? addr=10.31.44.128 terminal=? res=success'